Disabling/Enabling Access To The Hardware; Removing The Secure Host - Nvidia MSTFLINT Manual

Generating/Burning a Firmware Supporting Secure Host
1. Make sure you have INI and mlx files suitable for the device. Both files are available for
download at: http://www.mellanox.com/page/custom_firmware_table
a. Add cr_protection_en=true under [HCA] section in the INI file.
2. Burn the image on the device using mstflint:
# mstflint -d
3. For changes to take effect, reboot is required.
Setting the Secure Host Key
To set the key, run:
# mstflint -d 41:00.0
Setting the HW Key - OK
Restoring signature - OK

A driver restart is required to activate the new key.

Disabling/Enabling Access to the Hardware

1. Access the hardware while hardware access is disabled:
# mstflint -d
E- Cannot open 41:00.0: HW access is disabled on the device.
E- Run "mstflint -d 41:00.0 hw_access enable"
2. Enable hardware access:
# mstflint -d
Enter Key: ********
3. Disable hardware access:
# mstflint -d

Removing the Secure Host


This section is applicable to Group 1 network adapters only.
To remove the secure host feature:
1. Make sure you have INI and MLX file suitable for the device.
a. Remove cr_protection_en=true from the INI (if present)
41:00.0 -i fw-4099.secure.bin b
set_key 22062011
41:00.0 q
41:00.0 hw_access enable
41:00.0 hw_access disable
in order to enable HW access.
71