Unlocking Any Brand SFP modules on Intel X710

[seb101]

Inspired by this post I have been investigating if it is possible to edit the NVM of Intel X710 adaptors to allow any brand of SFP module to be used. The good news is, I think it's entirely possible using similar methods to NathanA's post.

First ray of hope is that in this document: https://www.intel.com/content/dam/w...tasheets/xl710-10-40-controller-datasheet.pdf

There are multiple references to the 'qualfied module check' being something that can be enabled or disabled.

Page 136 (note: all my page references are to the PDF page index not the printed page index)

4.If link is setup for module connectivity:
• Firmware verifies that the connected module is a qualified module (when enabled).
• Based on module type, optical or direct attach, firmware configures the PCS registers and
the re-timer (when applicable).
• Firmware restarts the link setup.

If module or PHY qualification is enabled and connected device is not found in the qualified
list, firmware stops the link setup process and reports event to software.

Further reading reveals that the qualification check is indeed enabled or disabled with a flag in the NVM (EEPROM):

Page 498:
6.3.24.9 PHY capabilities misc0 (0x0008)

Bits	Field Name	Default NVM Value	Description
15:13	RESERVED	000b	Reserved.
12	Disable Firmware Link Management	0b	Used to disable the firmware's link management and enable direct software control of the link parameters for debug. Note:This field is preserved by the Intel NVM update tool.
11	Enable Module Qualification	0b	When, set to 1b, module qualification process is enabled. Note:This field is preserved by the Intel NVM update tool.

This is per-port on the x710 series. Interestingly the documents state the default is 0b (i.e. check is off) so Intel must force the flag to 'on' for their product firmwares. The document notes that these fields are preserved by the update tool - I beleive this is simply so that any changes that manufacturers make to these settings don't get blown away by firmware updates, not a statement that these fields cannot be changes... though we shall see.

The structure of the NVM is slightly more complex than the X520 series. I have not been able to validate yet because I do not have hardware to experiment on right now, but rather than being a fixed monolithic data structure the top level NVM is organised as a list of pointers to other memory locations.

Reverse engineering this from the bit field we need to change backwards..

• The Enable Module Qualification field is bit 11 of the 'PHY Cababilities misc0' word (Page 496)
• The 'PHY Capabilities misc0' word is located at offset 0x0008 of the 'PHY Capabilites Data Structure 0' (Page 494)
• The 'PHY Capabilities Data Structure 0' is located at 0x07 of the 'EMP Settings' section. The data structures for the other ports (up to four) are at 0x08, 0x09, 0x0A. (Page 291) I am unsure at this point if these are the locations of the actual Structures or further pointers to the structures.
• Finally Table 6-2 (Page 293) confims the pointer to the EMP Settings section is located at word 0x0F of the NVM.

So to find the right bit to change, you'd take the Pointer address located at 0x0F. Add the pointer value to it the Data Structure offset address of the port you wish to change. Add to that the misc0 word offset 0x08. Then toggle bit 11 of that word.

This is as far as I can go in theory - in the next few days I will have hardware to test with and I will update you!

 

[zleppy]

Has there been any progress on this?

 

[mha]

Interestingly enough I have a X710.

On my stock NVM I got a strict block for adding my Huawei 10G SM 10km modules. However, after applying NVMUpdatePackage_700_Series_v8_15.zip it would without complaint bring up the interfaces with this module. Without any EEPROM updates.

This update can be fetched from Download Non-Volatile Memory (NVM) Update Utility for Intel® Ethernet Network Adapter 700 Series

I am wondering if Intel reverted the global bit for Enable Module Qualification for this release or simply somehow whitelisted more modules?` However, as the check is done it seems just to be a bit in the NVM / EEPROM to qualify modules. Otherwise it's down to drivers to qualify them?

[  712.398555] i40e 0000:04:00.0: fw 8.13.63341 api 1.12 nvm 8.15 0x80009613 1.2829.0
[  712.503651] i40e 0000:04:00.0: MAC address: 00:1c:7f:80:b4:d9
[  712.503966] i40e 0000:04:00.0: FW LLDP is enabled
[  712.508841] i40e 0000:04:00.0 enp4s0f0: renamed from eth0
[  712.524789] i40e 0000:04:00.0: PCI-Express: Speed 5.0GT/s Width x8
[  712.524792] i40e 0000:04:00.0: PCI-Express bandwidth available for this device may be insufficient for optimal performance.
[  712.524793] i40e 0000:04:00.0: Please move the device to a different PCI-e link with more lanes and/or higher transfer rate.
[  712.533893] i40e 0000:04:00.0: Features: PF-id[0] VFs: 64 VSIs: 66 QP: 4 RSS FD_ATR FD_SB NTUPLE CloudF DCB VxLAN Geneve NVGRE PTP VEPA
[  712.548416] i40e 0000:04:00.1: fw 8.13.63341 api 1.12 nvm 8.15 0x80009613 1.2829.0
[  712.655738] i40e 0000:04:00.1: MAC address: 00:1c:7f:80:b4:da
[  712.656051] i40e 0000:04:00.1: FW LLDP is enabled
[  712.660287] i40e 0000:04:00.1: PCI-Express: Speed 5.0GT/s Width x8
[  712.660289] i40e 0000:04:00.1: PCI-Express bandwidth available for this device may be insufficient for optimal performance.
[  712.660290] i40e 0000:04:00.1: Please move the device to a different PCI-e link with more lanes and/or higher transfer rate.
[  712.660556] i40e 0000:04:00.1 enp4s0f1: renamed from eth0
[  712.660665] i40e 0000:04:00.1: Features: PF-id[1] VFs: 64 VSIs: 66 QP: 4 RSS FD_ATR FD_SB NTUPLE CloudF DCB VxLAN Geneve NVGRE PTP VEPA

 

[mha]

The following code works great unlocking any X710. Reboot required after modified EEPROM.

GitHub - terpstra/xl710-unlocker: Unlock Intel XL710 / X710 cards for use with any SFP+

Unlock Intel XL710 / X710 cards for use with any SFP+ - terpstra/xl710-unlocker

github.com

 

[tinfoil3d]

Thanks the linked github unlocker worked, just required some fiddling first to figure out what's going on and what to look for.
Mine 1572 rev 02 had 000c not 000b, and it had 6b0c value, which I set to 630c, at offset 0x68f6.
Hope this helps.
I'm able to use SFP+ DACs(MT, FS, noname) and SFP+ modules but not SFP modules for whatever reason but who cares if it's 10G card, why would you put SFP in there.
Thank you.

 

[mha]

Thanks the linked github unlocker worked, just required some fiddling first to figure out what's going on and what to look for.
Mine 1572 rev 02 had 000c not 000b, and it had 6b0c value, which I set to 630c, at offset 0x68f6.
Hope this helps.
I'm able to use SFP+ DACs(MT, FS, noname) and SFP+ modules but not SFP modules for whatever reason but who cares if it's 10G card, why would you put SFP in there.
Thank you.

I've experienced the same. And it comes down to the qualification of the SFP and SFP+ seems to be done independently where one function checks for this register bit and the other does not. It does not make much sense to me either, but I agree that this is not a card you install to use with 1GE networking.

Glad it worked for you as well.

 

[Gio]

Does anyone have recent experience with X710-DA2 on the latest 9.20 firmware and getting this to work? I've been unsuccessful.

root@6600:/home# ip link show enp8s0f1
4: enp8s0f1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN mode DEFAULT group default qlen 1000
    link/ether 3c:fd:fe:ab:e4:51 brd ff:ff:ff:ff:ff:ff
root@6600:/home# ethtool --module-info enp8s0f1
        Identifier                                : 0x03 (SFP)
        Extended identifier                       : 0x04 (GBIC/SFP defined by 2-wire interface ID)
        Connector                                 : 0x21 (Copper pigtail)
        Transceiver codes                         : 0x00 0x00 0x00 0x00 0x00 0x04 0x00 0x00 0x00
        Transceiver type                          : Passive Cable
        Encoding                                  : 0x00 (unspecified)
        BR, Nominal                               : 10300MBd
        Rate identifier                           : 0x00 (unspecified)
        Length (SMF,km)                           : 0km
        Length (SMF)                              : 0m
        Length (50um)                             : 0m
        Length (62.5um)                           : 0m
        Length (Copper)                           : 3m
        Length (OM3)                              : 0m
        Passive Cu cmplnce.                       : 0x01 (SFF-8431 appendix E) [SFF-8472 rev10.4 only]
        Vendor name                               : OEM
        Vendor OUI                                : 00:40:20
        Vendor PN                                 : SFP-H10GB-CU3M
        Vendor rev                                : 03
        Option values                             : 0x00 0x00
        BR margin, max                            : 0%
        BR margin, min                            : 0%
        Vendor SN                                 : 2106231716
        Date code                                 : 210623
root@6600:/home# dmesg | grep i40
[    1.496193] i40e: Intel(R) Ethernet Connection XL710 Network Driver
[    1.496195] i40e: Copyright (c) 2013 - 2019 Intel Corporation.
[    1.509937] i40e 0000:08:00.0: fw 9.120.73026 api 1.15 nvm 9.20 0x8000d87f 1.3353.0 [8086:1572] [8086:0008]
[    1.806150] i40e 0000:08:00.0: MAC address: xxx
[    1.806408] i40e 0000:08:00.0: FW LLDP is enabled
[    1.810786] i40e 0000:08:00.0: PCI-Express: Speed 8.0GT/s Width x4
[    1.810788] i40e 0000:08:00.0: PCI-Express bandwidth available for this device may be insufficient for optimal performance.
[    1.810789] i40e 0000:08:00.0: Please move the device to a different PCI-e link with more lanes and/or higher transfer rate.
[    1.811299] i40e 0000:08:00.0: Features: PF-id[0] VFs: 64 VSIs: 66 QP: 4 RSS FD_ATR FD_SB NTUPLE DCB VxLAN Geneve PTP VEPA
[    1.824045] i40e 0000:08:00.1: fw 9.120.73026 api 1.15 nvm 9.20 0x8000d87f 1.3353.0 [8086:1572] [8086:0008]
[    2.136433] i40e 0000:08:00.1: MAC address: xxx
[    2.136703] i40e 0000:08:00.1: FW LLDP is enabled
[    2.141055] i40e 0000:08:00.1: PCI-Express: Speed 8.0GT/s Width x4
[    2.141057] i40e 0000:08:00.1: PCI-Express bandwidth available for this device may be insufficient for optimal performance.
[    2.141059] i40e 0000:08:00.1: Please move the device to a different PCI-e link with more lanes and/or higher transfer rate.
[    2.141533] i40e 0000:08:00.1: Features: PF-id[1] VFs: 64 VSIs: 66 QP: 4 RSS FD_ATR FD_SB NTUPLE DCB VxLAN Geneve PTP VEPA
[    2.145908] i40e 0000:08:00.1 enp8s0f1: renamed from eth2
[    2.164835] i40e 0000:08:00.0 enp8s0f0: renamed from eth1
[   70.955501] i40e 0000:08:00.0 enp8s0f0: Cannot read module EEPROM memory. No module connected.
root@6600:/home# ethtool -a enp8s0f1
Pause parameters for enp8s0f1:
Autonegotiate:  off
RX:             off
TX:             off

 

[nicolas9510]

Found this thread when going down the rabbit hole today.
just recently got 3x x710-da2 from ebay along witih a 10gtek 1/2.5/5/10 SFP+.
i was able to update the nvram with linux to 9.3 firmware.
I did find another github with a modified x710 unlock here: GitHub - bibigon812/xl710-unlocker: Unlock Intel XL710 / X710 cards for use with any SFP+
Ran it once and if showed the 4 things it would modify.
worked perfectly and rebooted my host and link light was active.
hope this helps anyone like it did myself

 

[Jakub]

Found this thread when going down the rabbit hole today.
just recently got 3x x710-da2 from ebay along witih a 10gtek 1/2.5/5/10 SFP+.
i was able to update the nvram with linux to 9.3 firmware.
I did find another github with a modified x710 unlock here: GitHub - bibigon812/xl710-unlocker: Unlock Intel XL710 / X710 cards for use with any SFP+
Ran it once and if showed the 4 things it would modify.
worked perfectly and rebooted my host and link light was active.
hope this helps anyone like it did myself

How do you run this code? I can VM any flavor of Linux to run the code. It'll be going on a TrueNAS machine.

 

[nicolas9510]

How do you run this code? I can VM any flavor of Linux to run the code. It'll be going on a TrueNAS machine.

I believe I spun up a ubuntu vm and did the passthrough of the full device with vmware to run the code.
Or its possible i booted a live ubuntu iso on my actual host to compile and run it. something along those lines.

 

[blunden]

How do you run this code? I can VM any flavor of Linux to run the code. It'll be going on a TrueNAS machine.

It will probably work in a KVM VM with passthrough, but you might as well live boot something like Ubuntu, clone the git repo and run it from there. That latter is what I did since my card was going into a Windows PC.

 

[HardwareHarry]

Since I have this problem and found this thread via google and it might help others as well:

1. )
Just FYI:
I received a used original intel X710-DA2 (with yottamark) with fw version 6.x from a It Re-Seller/Refurbishing Company and all cheap Amazon Tranceivers (10Gtec, H!Fiber, etc. )worked perfectly with the current drivers 28.2.1)
I updated to FW 9.30 and suddenly they all did not work anymore. Luckily I had some "Intel" FTLX8571D3BCV-IT (Shop Zupoint) from Aliexpress for about 8.26€ including Shipping laying around and they do work.(Just ordered 2 more but now they cost 8.68€/pcs).

https://de.aliexpress.com/item/1005005864767888.html?spm=a2g0o.order_list.order_list_main.5.246a5c5f2W04gT

Until now I did not find a FW Changelog/History on the Intel website to check if that "feature" was introduced with some newer FW.


2.)
Until now I did not try if a downgrade of the FW will remove the check

NVM Downgrade Packages for Intel® Ethernet Adapters 700 Series

Provides the NVM Downgrade Packages for Intel® Ethernet Adapters 700 Series (9.40 to Previous Versions)

www.intel.com

3.)

Found this thread when going down the rabbit hole today.
just recently got 3x x710-da2 from ebay along witih a 10gtek 1/2.5/5/10 SFP+.
i was able to update the nvram with linux to 9.3 firmware.
I did find another github with a modified x710 unlock here: GitHub - bibigon812/xl710-unlocker: Unlock Intel XL710 / X710 cards for use with any SFP+
Ran it once and if showed the 4 things it would modify.
worked perfectly and rebooted my host and link light was active.
hope this helps anyone like it did myself

As I'm a Windows guy: How do I compile/run this in Linux Mint or Ubuntu?

 

[Jakub]

Since I have this problem and found this thread via google and it might help others as well:

1. )
Just FYI:
I received a used original intel X710-DA2 (with yottamark) with fw version 6.x and all cheap Amazon Tranceivers (10Gteck, H!Fiber, etc. )worked perfectly.
I updated to FW 9.30 and suddenly they all did not work anymore. Luckily I had some "Intel" FTLX8571D3BCV-IT (Shop Zupoint) from Aliexpress for about 8.26€ including Shipping laying around and they do work.(Just ordered 2 more but now they cost 8.68€/pcs).

Until now I did not find a FW Changelog/History on the Intel website to check if that "feature" was introduced with some newer FW.


2.)
Until now I did not try if a downgrade of the FW will remove the check

NVM Downgrade Packages for Intel® Ethernet Adapters 700 Series

Provides the NVM Downgrade Packages for Intel® Ethernet Adapters 700 Series (9.40 to Previous Versions)

www.intel.com

3.)



As I'm a Windows guy: How do I compile/run this in Linux Mint or Ubuntu?

VM Ubuntu or boot USB. Follow this guide. I was unsure until I found that in Github. x520 is a bit easier as its a simple python script. X710 is a lot more work.

 

[blunden]

VM Ubuntu or boot USB. Follow this guide. I was unsure until I found that in Github. x520 is a bit easier as its a simple python script. X710 is a lot more work.

That looks needlessly complicated if you use the more updated fork.

@HardwareHarry

1. Boot the latest Ubuntu (or distro of choice) from USB
2. Select Try Ubuntu to get to a desktop.
3. Open a terminal
4. Install the tools: sudo apt install git build-essential.
5. Download the code (clone the git repo): git clone https://github.com/bibigon812/xl710-unlocker.git
6. Change to the directory (folder) with the downloaded code: cd xl710-unlocker
7. Compile the code: make
8. Make the compiled program executable: chmod +x xl710_unlock
9. Run the tool as root as described in the readme, but change the end of the command to whatever the two interfaces end up being named in your particular case.

 

[RedRover72]

Does it need to be a genuine Intel card, or can it be one of the thousands of Dell or Lenovo rebranded Intel cards available on the bay.

 

[blunden]

Does it need to be a genuine Intel card, or can it be one of the thousands of Dell or Lenovo rebranded Intel cards available on the bay.

Worked on my Dell card, so it presumably works on all OEM cards.

The only downside with the OEM cards is that you can't use firmware updates from Intel.com, you need to get them from the OEMs themselves.