Mstflint: Disabling/Enabling Access To The Hardware - Nvidia MSTFLINT Documentation

mstflint: Disabling/Enabling Access to the Hardware

The secure host feature enables ConnectX family devices to block access to its internal hardware
registers. The hardware access in this mode is allowed only if a correct 64 bits key is provided.

The secure host feature requires a MLNX_OFED driver installed on the machine.
4th Generation Devices
To disable/enable access to the hardware:
1. Set the key:
# mstflint -d 41:00.0
Setting the HW Key - OK
Restoring signature - OK

A driver restart is required to activate the new key.
2. Access the HW while HW access is disabled:
# mstflint -d 41:00.00
E- Cannot open 41:00.0: HW access is disabled on the device.
E- Run "mstflint -d 41:00.0 hw_access enable"
3. Enable HW access:
# mstflint -d 41:00.0
Enter Key: ********
4. Disable HW access:
# mstflint -d 41:00.0

WARNING:
1. Once a hardware access key is set, the hardware can be accessed only after the
correct key is provided.
2. If a key is lost, there is no way to recover it using the tool. The only way to
recover from a lost key is to:
• Connect the flash-not-present jumper on the card
• Boot in "flash recovery" mode
• Re-burn FW
• Re-set the HW access key
5th Generation Devices
Secure Host can be enabled on 5th generation devices in one of the following manners:
1. Set the key:
# mstflint -d 41:00.0
set_key 22062011
q
in order to enable HW access.
hw_access enable
hw_access disable
set_key 18022018
49