Table of Contents
Advertisement
For further information, see
File.
3.
Sign the firmware image with a private key.
Please notice that signing the image must be after setting the public keys, and the
forbidden versions. For further information, see
a.
Run the mstflint sign command.
To sign with a 2048 bits private key only, make sure that the firmware image
does not contain a 4096 bits key signature.
Run the mstflint set_public_keys command with a 4096 bits keys section filled
with zeros and then sign with a 2048 bits private key.
For further information, see
To sign with 4096 bits private key only, run the mstflint set_public_keys
command with a 2048 bits keys section filled with zeros and then sign with the
a 4096 bits private key.
For further information, see
mstfwreset – Loading Firmware on 5th Generation
Devices Tool
mstfwreset tool enables the user to load updated firmware on a NIC without having to reboot the
machine. mstfwreset supports 5th Generation (Group II) HCAs and allows a smooth firmware
upgrade.
Tool Requirements
•
Access to device through BDF format
•
Firmware supporting ISFU
•
Connect-IB: v10.10.3000 or above
•
ConnectX-4: v12.0100.0000 or above
•
ConnectX-4 Lx: v14.0100.0000 or above
•
Device's firmware updated with latest mstflint burning tools (mstflint)
•
Supported devices: Connect-IB / ConnectX-4 / ConnectX-4 Lx / ConnectX-5 / BlueField /
ConnectX-6
•
Supported OSs: FreeBSD, Linux
mstfwreset Synopsis
mstfwreset -d <device> [--level <0,3..5>] [--type <0..1>] [-m] [-y] <q[uery] | r[eset] | reset_fsm_register>
where:
-d|--device <device>
-l|--level <0..5>
Setting a "Forbidden Versions" Section in a Binary Image
Device to work with
Run reset with the specified reset-level
Secure Firmware
Signing Binary Image
Signing Binary Image
Update.
Files.
Files.
60
Advertisement
Table of Contents
