================================================================================ Express5800/R110j-1 System ROM U43 v2.20 (10/27/2020) ================================================================================ Software name : Express5800/R110j-1 System ROM (BIOS) update module Models : Express5800/R110j-1 Operating System : This software supports offline update and the following OS. - Windows Server(R) 2012 R2 - Windows Server(R) 2016 - Windows Server(R) 2019 - Red Hat(R) Enterprise Linux(R) 7 Target Users : See [Target Users for Update] below Type : System ROM ================================================================================ [About the software] The Express5800/R110j-1 System ROM (BIOS) update module supports the following changes in the Express5800/R110j-1 models: Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - And, when system updated to System ROM v2.20 (10/27/2020) or later, it should be updated Server Platform Services(SPS) Firmware 5.1.4.208 or later at the same time. - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Added a new BIOS/Platform Configuration (RBSU) option to Memory Options called Refresh Watermarks. When selecting the Low Watermark setting, the memory controller will help reduce susceptibility to a DDR4 RowHammer attack. It is expected that a memory performance impact will be seen when enabling the Low Watermark setting. System Utilities > System Configuration > RBSU > Memory Options - Updated the RESTful API BIOS Attribute Registry resources to match the latest BIOS/Platform Configuration(RBSU) options. - Updated microcode for Processor. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors - Addressed following security vulnerabilities. INTEL-SA-00381, INTEL-SA-00389, INTEL-SA-00358. - Addressed an issue where system may suddenly stop responding, shutdown or restart unexpectedly. Integrated Management Log (IML) contains the following information. - Class: 0x32, Code: 0x389 Unexpected Shutdown and Restart... And, it should be updated Server Platform Services(SPS) Firmware at the same time. For the detail of the SPS firmware, refer to "Notes" in [About the software]. ** Program and data included in this software ** Following program and data are included in this software. Use one of them according to the way of installation. a) Flash image for System Utilities/iLO Web User Interface firmware\U43_2.20_10_27_2020.signed.flash b) Executables for Windows(R) winx64\cp045784.exe c) RPM package for Linux(R) Linux\firmware-system-oem-u43-2.20_2020_10_27-1.1.x86_64.rpm ------------------------------------------------------------------------------- [ Target Users for Update ] This software is available for the users who use the following models with the following System ROM version. - Models to be supported 1. Express5800/R110j-1 - System ROM Versions to be supported 1. U43 v1.02 (10/02/2018) 2. U43 v1.03 (11/28/2018) 3. U43 v1.20 (02/02/2019) 4. U43 v1.22 (04/04/2019) 5. U43 v2.00 (05/16/2019) 6. U43 v2.10 (09/12/2019) 7. U43 v2.12 (12/06/2019) 8. U43 v2.14 (03/09/2020) 9. U43 v2.16 (05/25/2020) 10. U43 v2.18 (06/24/2020) Note: In case of using newer System ROM from the above version, it has already applied equivalent enhancements. Updating the System ROM isn't needed. Be sure to check the System ROM version and date with the following procedures. Select an arbitrary procedure and check the version before and after the update. ** System Utilities ** You can check the System ROM version and date by the following procedure. 1. Power on the system and the contents of process by POST (Power On Self- Test) will be shown on the screen. After a short time, the following message is shown. Press key, "System Utilities" is started. [F9] System Utilities 2. After starting "System Utilities", select "System Information". 3. Select "Firmware Information". 4. Each firmware version is shown on the screen. The System ROM version and date can be seen at "System ROM" option. Note: After checking the System ROM version, press the key or select "Exit" to exit the System Utilities. Note: About detail of "System Utilities" usage, refer to "1. System Utilities" section in the chapter of "Useful Features" of the maintenance guide. ** Windows(R) OS ** You can check the System ROM date by a following procedure. 1. Hold down key and press key. 2. In the "Run" dialog box, type "msinfo32" and then click "OK". 3. After "System Information" has started, select "System Summary". 4. Check the System ROM version by the profile of "BIOS Version/Date". ** Linux(R) OS ** You can check the System ROM date by a following procedure. 1. Launch the terminal such as xterm. 2. Execute the command as follows. # /usr/sbin/dmidecode | less Note: "#" means prompt. You do not need to input "#". 3. Check the System ROM date by "BIOS Information->Release Date". Note: The dmidecode command has to be installed. ================================================================================ Notes ================================================================================ ** Notes in general ** * Refer to "license_en.txt" about the user license agreement. * When you install the system ROM, the flashing mechanism writes over the backup ROM and saves current ROM as a backup, enabling you to switch easily to the alternate ROM version if the new ROM becomes corrupted for any reason. This feature protects the existing ROM version, even if you experience a power failure while flashing the ROM. * When Windows(R) BitLocker(TM) function is set to "Enabled", install the System ROM after making the function "Disabled". Then make the function "Enabled" after install and reboot of the system. If you install the system ROM without making the function "Disabled", you may need the recovery password when you boot the system. * This software does not support a virtualized environment such as hyper visor, guest OS, etc. Please install either on the OS which this software supports or with the method of offline installation. * To meet firmware dependencies, you can update iLO firmware by latest Starter Pack. And you can update Server Platform Services(SPS) firmware by latest "Server Platform Services(SPS) firmware update module". You can download latest update module(s) from the following web site. https://www.nec.com/express ("Support & Downloads" of the page top - PCs & Servers - Servers - Downloads - Select Model) ** Note for Windows(R) OS environment and Linux(R) OS environment ** * This software will access to iLO5 (Baseboard Management Controller). It is required that the "iLO 5 Channel Interface Driver" (CHIF) must be installed. The CHIF driver can be installed by using EXPRESSBUILDER or "Starter Pack". -------------------------------------------------------------------------------- [Revision history] Version:2.20 (10/27/2020) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - And, when system updated to System ROM v2.20 (10/27/2020) or later, it should be updated Server Platform Services(SPS) Firmware 5.1.4.208 or later at the same time. - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Added a new BIOS/Platform Configuration (RBSU) option to Memory Options called Refresh Watermarks. When selecting the Low Watermark setting, the memory controller will help reduce susceptibility to a DDR4 RowHammer attack. It is expected that a memory performance impact will be seen when enabling the Low Watermark setting. System Utilities > System Configuration > RBSU > Memory Options - Updated the RESTful API BIOS Attribute Registry resources to match the latest BIOS/Platform Configuration(RBSU) options. - Updated microcode for Processor. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors - Addressed following security vulnerabilities. INTEL-SA-00381, INTEL-SA-00389, INTEL-SA-00358. - Addressed an issue where system may suddenly stop responding, shutdown or restart unexpectedly. Integrated Management Log (IML) contains the following information. - Class: 0x32, Code: 0x389 Unexpected Shutdown and Restart... And, it should be updated Server Platform Services(SPS) Firmware at the same time. For the detail of the SPS firmware, refer to "Notes" in [About the software]. Version:2.18 (06/24/2020) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Updated microcode for Processor. This version mitigates security vulnerability of CVE-2020-0543, CVE-2020-0548, CVE-2020-0549. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors Version:2.16 (05/25/2020) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Updated to the latest thermal support for the platform. - Updated the RESTful API BIOS Attribute Registry resources to match the latest BIOS/Platform Configuration(RBSU) options. - Updated microcode for Processor. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors. - Addressed following security vulnerabilities. CVE-2020-0528, CVE-2020-0529 - Addressed an issue where the serial port would not function properly when the Serial CLI Status was also enabled on the server. This could lead to the serial BAUD rate not being configured properly and the serial output from the host would be corrupted or no output would be seen. System Configuration > BMC Configuration Utility > Setting Options > Serial CLI Status - Addressed an extremely rare issue where the server could become unresponsive in POST when configured in Legacy BIOS Mode at Boot Mode option when a USB Mouse is attached. This issue does not impact systems configured in UEFI Mode. System Configuration > RBSU > Boot Options > Boot Mode - Addressed an issue where boot devices could disappear from the Boot Options menu when pressing the or key to save boot order changes. System Configuration > RBSU > Boot Options - Addressed an issue where the server may become unresponsive during POST when both iLO and the server are reset simultaneously. - Addressed an issue where the System Utilities System Information data could not be successfully exported to an FTP network location. Version:2.14 (03/09/2020) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Updated the UEFI driver of Smart Array S100i Software RAID. Addressed an issue where the Smart Array S100i Software RAID may experience potential data inconsistency during initial configuration or operation of a RAID volume configured in RAID 0/1/10. Version:2.12 (12/06/2019) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Updated microcode for Processor. This version mitigates security vulnerability of CVE-2019-11157. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors Version:2.10 (09/12/2019) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] - Improved the function to set the memory frequency. Fault tolerance of the system is improved. The memory frequency will be set 2666MHz when all of the following requirements are met. If not satisfied, the memory frequency will be set 2400MHz. - Intel (R) Xeon (R) E Processor is equipped. - Memories with the same part number are mounted on the same channel. Note) The memory part number can be confirmed in the following items of System Utilities. System Utilities > System Information > Memory Information > Part Number Note) In case of R110j-1, memory frequency will be set lower frequency depending on memory configuration. Enhancements and problem fixes: - Addressed following security vulnerabilities. CVE-2017-5715 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11135 CVE-2018-11091 - Updated microcode for processor. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors Version:2.00 (09/05/2019) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] Enhancements and problem fixes: - Updated to the latest thermal support for the platform. - Addressed following security vulnerabilities. CVE-2019-1559 - Addressed an issue where the Intel Software Guard Extensions(SGX) Remote attestation functionality may not work properly. - Addressed an issue where the Server Backup and Restore functionality may not work properly if initiated through the RESTful API returning a message "An internal error occurred during RIS operation". - Addressed an issue where the system would not boot to a USB drive when a non-bootable (non-formatted) drive was also present in the system. This issue only impacts systems configured in Legacy BIOS Mode. System Utilities > System Configuration > RBSU > Boot Options > Boot Mode Version:1.22 (04/04/2019) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] Enhancements and problem fixes: - Updated microcode for processor. This version mitigates security vulnerability of CVE-2018-12126, CVE-2018-12130, CVE-2018-12127, CVE-2019-11091. Intel(R) Xeon(R) E Processor Intel(R) Pentium(R) Gold Processor Series 8th Generation Intel(R) Core(TM) i3 Processors Version:1.20 (02/02/2019) Notes: - Do not update if Intel(R) Software Guard Extensions(SGX) is set to Enabled in a system equipped with the following specific processors. System Utilities > System Configuration > RBSU > Processor Options > Intel(R) Software Guard Extensions(SGX) Note) CPU board(4C/i3-8300) [N8101-1515] CPU board(2C/Pentium G5400) [N8101-1512] Enhancements and problem fixes: - Added a new "Backup and Restore Settings" menu to "System Default Options" in the BIOS/Platform Configuration (RBSU). This option allows you to save the BIOS configuration to a USB storage device. - Updated description of Japanese and Chinese for System Utilities. - Updated the RESTful API BIOS Attribute Registry resources to match the latest BIOS/Platform Configuration(RBSU) options. - Addressed following security vulnerabilities. CVE-2018-3613, CVE-2017-5731, CVE-2017-5732, CVE-2017-5733, CVE-2017-5734, CVE-2017-5735, CVE-2018-3630, CVE-2018-12178, CVE-2018-12179, CVE-2018-12180, CVE-2018-12181, CVE-2018-12182, CVE-2018-12183 - Addressed an issue where certain PCIe option cards may not train properly and cause the system to hang during POST. - Addressed an issue where iLO virtual media may not boot properly after setting the "Boot on Next Reset" option in the "Remote Console and Media - Virtual Media" settings in the iLO web interface. - Addressed an issue where the AHS Download application from the Embedded Applications in System Utilities may fail to work properly with iLO firmware 1.30 or later. - Addressed an issue where an optional SATA DVD drive may not unlock and allow media to be ejected after an operating system reboot. - Addressed an issue where the system may become unresponsive during boot and experience a Red Screen (RSOD) when booting in Legacy BIOS Mode with a M.2 SATA SSD installed. This issue does not impact systems in UEFI Mode. -------------------------------------------------------------------------------- [Copyright and Trademark] All contents on this software are the copyright of NEC Corporation or the third-party software developer. All other contents mentioned herein are copyright of their respective owners. Microsoft, Windows, Windows Server are trademarks or registered trademarks of Microsoft Corporation in the United States and other countries. Linux(R) is a registered trademark of Linus Torvalds in the United States and other countries. Red Hat is a trademark or a registered trademark of Red Hat Inc. in the United States and other countries. All other company names and product names mentioned herein are registered trademarks or trademarks of their respective owners. -------------------------------------------------------------------------------- Copyright NEC Corporation 2021