================================================================================
N8115-35 Trusted Platform Module Kit
Trusted Platform Module(TPM) Firmware： 73.20
================================================================================
Software name : Trusted Platform Module(TPM) firmware update module
Operating System: This software supports the following OS.
- Windows Server(R) 2012 R2
- Windows Server(R) 2016
- Windows Server(R) 2019
Target Users : See [ Models and software revisions to update ] below
Type of software: Trusted Platform Module(TPM) Firmware
--------------------------------------------------------------------------------
[ About the software ]
This software is an update module for Trusted Platform Module(TPM) firmware
that supports the following.
< Trusted Platform Module(TPM) Firmware >
- Mitigated security vulnerability CVE-2019-16863(TPM-FAIL).
Note:
- To prevent a system failure, please read this document carefully and follow
the procedure for successful update. Should your system malfunctions or is
powered off due to an unplanned event during update (for example, power
blackout or cutoff, lightening, and noise), the system may be damaged and
fails to operate normally. In this case, any remedial measures shall be
taken at your expense.
- Updating the TPM firmware changes TPM PCR values that OS/applications using TPM,
and disrupt access to encrypted disks/information.
Therefore decrypt the OS/application function(Microsoft BitLocker etc.) that using the
TPM before updating the TPM firmware, and encrypt it again after updating.
- Before updating the TPM firmware, confirm that SystemROM version supports the TPM firmware updating function.
System ROM (v1.46 or later) supports updating function.
- This firmware should be applied when the N8115-35 TPM kit is set to either TPM 1.2 or 2.0 operating mode.
If the operating mode is set to TPM 1.2, you need to switch to TPM 2.0 before updating the TPM firmware.
For the setting method, refer to the maintenance guide of the server you are using.
- TPM firmware can only be upgraded.
It is not possible to flash with the same version or downgrade to an earlier version.
- This software does not support a virtualized environment such as hyper visor,
guest OS, etc. Please install either on the host OS which this software supports.
- This software will access to iLO5 (Baseboard Management Controller). It is
required that the "iLO 5 Channel Interface Driver" (CHIF) must be installed.
The CHIF driver can be installed by using EXPRESSBUILDER or "Starter Pack
(Standard Program Package)" .
[ Firmware version to update ]
Users who use the following Trusted Platform Module(TPM) firmware versions need update:
- Target Option : N8115-35 Trusted Platform Module Kit
- Trusted Platform Module(TPM) Firmware versions to update : 73.0
- Server Models supported:
1. Express5800/R120h-1M
2. Express5800/R120h-1M(2nd-Gen)
3. Express5800/R120h-1M(3nd-Gen)
4. Express5800/R120h-2M
5. Express5800/R120h-2M(2nd-Gen)
6. Express5800/R120h-2M(3nd-Gen)
7. Express5800/R120h-1E
8. Express5800/R120h-2E
9. Express5800/T120h
NOTE:
If your firmware version is later than the above, you do not require the
update (the latest revisions already include the functions to be added by
the software).
- How to confirm your Trusted Platform Module(TPM) Firmware version:
Please make sure to confirm proper the Trusted Platform Module(TPM)
Firmware version by any of the following means.
* How to confirm by the server which will be updated *
- By System Utilities, to confirm your firmware version:
(1) Power on the system.
(2) When the following message appears, press the F9 key to start the
System Utilities.
[F9] System Utilities
(3) Select the [System Information], then select the [Firmware Information].
(4) The firmware versions of your system will be displayed.
Please confirm the version from "Trusted Platform Module(TPM)".
(5) After confirmation of the firmware versions, press the ESC key or select
[Exit] and exit the System Utilities.
Note:
About detail of "System Utilities" usage, refer to "1. System Utilities"
section in the chapter of "Useful Features" of the maintenance guide.
* How to confirm by the remote access *
- By iLO web interface, to confirm your firmware version:
(1) Login iLO web interface.
(2) Select the [Firmware & OS Software] of left side menu.
(3) The firmware version of your system will be displayed.
Please confirm the version from "TPM Firmware".
Please read the following User License Agreement ("Agreement") carefully.
If you do not agree to the terms and conditions of this Agreement, you shall not
download the Software. Downloading the Software indicates your acceptance of the
terms and conditions of the Agreement.
[User License Agreement]
NEC Corporation ("NEC") grants you the right to use the software program
("Software") under the terms and conditions of this Agreement only in the
country in which you acquired the Software. You shall agree to all provisions
of this Agreement and assume responsibility for selection, installation, use
and effect of the Software purchased for your desired effect.
<Agreement for the Software>
1. Terms
1.1 This Agreement shall come into force on the date of your receipt of the
Software.
1.2 You may terminate the license granted hereunder by notifying us in writing
at least one month prior to the desired termination date.
1.3 NEC may terminate the license granted you hereunder at any time if you fail
to comply with any terms and conditions of this Agreement.
1.4 The license to the Software shall remain in force until the license is
terminated on the date set forth hereunder.
1.5 Upon termination of the license, other rights granted you hereunder shall
also be terminated. You must destroy or dispose of the Software, any copies
of the Software and manual and other materials provided with the Software.
2. Copyright
2.1 The Software shall solely be used in the NEC Express5800 servers.
2.2 NEC grants you the right to use the Software only in the country in which
you acquired the Software in accordance with the conditions of the
preceding paragraph.
3. Intellectual Property Rights including patent and copyright
All of the intellectual property rights to the Software including patent and
copyright belong to NEC and/or the owners of the copyright or any other
intellectual property rights to the Software. No Intellectual Property Rights
including patent and copyright to the Software shall be transferred to you.
The Intellectual Property Rights can be protected as a matter of Japan, U.S.A.,
and any other applicable laws and regulations.
4. Copying, altering, and combining of the Software
4.1 You may only make one copy of the Software solely for a backup purpose,
provided, however, that the copy of the Software is loaded into permanent
memory of the system. You may store the Software solely to prevent damages
or loss of the memory media.
4.2 You shall place the copyright notice and other legends on each copy of the
Software.
4.3 You may not use, copy, alter, combine, publish, reproduce the Software over
the Internet, or otherwise dispose of the Software except as provided in
this Agreement.
4.4 You may not copy, publish the manual or other related documentation
provided with the Software, or reproduce such manual and documentation over
the Internet.
4.5 No intangible property right to the Software shall be transferred to you.
5. Transfer
5.1 You may assign your rights granted hereunder to a third party only if all
conditions below are satisfied:
a. You shall assign and shall not retain this Agreement, the Software,
all copies of the Software, or the manual or other related documentation
provided with the Software.
b. The transferee agrees to this Agreement.
5.2 You shall not sublicense, assign, transfer, or otherwise dispose of the
Software or the right of use to any third party except as provided herein.
6. Reverse compile
You may not reverse engineer, decompile, or otherwise disassemble the Software.
7. Limitation of warranties
7.1 The Software is provided "as is" without warranty of any kind. In no event
shall NEC be liable with respect to any claim by you on account of or
arising out of the use of the Software.
7.2 Notwithstanding the provisions of the preceding paragraph, in case NEC makes
any bug-fix version to the Software, NEC will, at its expense, furnish you
with such bug-fix version, update version, or information in relation to
such bug-fix or update version both in the source code form and object code
form, and such bug-fix version or update version shall be considered as the
licensed Software.
8. No liability
In no event shall NEC be liable for any indirect or consequential damages or
loss of profit or damages based on any third party claim, even if NEC has
been advised of the possibility of such damages.
9. Miscellaneous
9.1 This Agreement shall be governed by the laws of the country in which you
acquired the Software.
9.2 You agree that NEC inspects the use of the Software and provides the
information of the inspection to the owner of the copyright to theSoftware.
9.3 If the Software is licensed for use in the performance of a U.S. Government
prime contract or subcontract, You agree that, consistent with FAR 12.211
and 12.212, commercial computer Software, computer Software documentation
and technical data for commercial items are licensed under this Agreement.
9.4 If the Software has a file written about software license (hereinafter
referred to as "License File"), the terms of License File are applied to
the files specified in License File, regardless of the above-mentioned
Agreement.
[ Installation procedures ]
Perform the following steps to extract the Software and update your
Trusted Platform Module(TPM) Firmware.
- How to extract:
(1) Retry to login by Administrator if the user is not an Administrator user.
(2) Download the update module to a desired directory.
(3) Extract the download module to the specified folder
(4) The folder has "READMEE.txt" which is the installation procedures (readme file).
- How to update:
(1) Perform the steps of the readme file to update the Trusted Platform Module(TPM) Firmware.
--------------------------------------------------------------------------------
[ Revision history ]
2020/08/12 TPM Firmware Version : 73.20
- Mitigated the following security vulnerability.
CVE-2019-16863 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-16863)
This security vulnerabilities are not unique to NEC servers.
2017/08/23 TPM Firmware Version : 73.0
- Initial Release.
--------------------------------------------------------------------------------
[ Legal notices (trademarks and copyrights) ]
GRID is trademarks and/or registered trademarks of NVIDIA Corporation in the
U.S. and/or other countries.
All other product, brand, or trade names used in this publication are the
trademarks or registered trademarks of their respective trademark owners.
All contents on this software are the copyright of NEC Corporation or the
third-party software developer. All other contents mentioned herein are
copyright of their respective owners.
Microsoft, Windows, Windows Server are trademarks or registered trademarks
of Microsoft Corporation in the United States and other countries.
Linux(R) is a registered trademark of Linus Torvalds in the United States and
other countries.
Red Hat is a trademark or a registered trademark of Red Hat Inc. in the United
States and other countries.
All other company names and product names mentioned herein are registered
trademarks or trademarks of their respective owners.
--------------------------------------------------------------------------------
Copyright NEC Corporation 2020