Please notice that signing the image must be after setting the public keys, and the
forbidden versions. For further information, see
a.
Run the mstflint sign command.
To sign with a 2048 bits private key only, make sure that the firmware image
does not contain a 4096 bits key signature.
Run the mstflint set_public_keys command with a 4096 bits keys section filled
with zeros and then sign with a 2048 bits private key.
For further information, see
To sign with 4096 bits private key only, run the mstflint set_public_keys
command with a 2048 bits keys section filled with zeros and then sign with the a
4096 bits private key.
For further information, see
mstfwreset – Loading Firmware on 5th
Generation Devices Tool
mstfwreset (Mellanox firmware reset) tool enables the user to load updated firmware on a NIC without
having to reboot the machine.
mstfwreset supports 5th Generation (Group II) HCAs and allows a smooth firmware upgrade.
Tool Requirements
•
Access to device through BDF format
•
Firmware supporting ISFU
•
Connect-IB: v10.10.3000 or above
•
ConnectX-4: v12.0100.0000 or above
•
ConnectX-4 Lx: v14.0100.0000 or above
•
Device's firmware updated with latest mstflint burning tools (mstflint)
•
Supported devices: Connect-IB / ConnectX-4 / ConnectX-4 Lx / ConnectX-5 / BlueField /
ConnectX-6
•
Supported OSs: FreeBSD, Linux
mstfwreset Synopsis
mstfwreset -d <device> [--level <0,3..5>] [--type <0..1>] [-m] [-y] <q[uery] |
r[eset] | reset_fsm_register>
where:
-d|--device <device>
-l|--level <0..5>
-t|--type <0,1>
Device to work with
Run reset with the specified reset-level
Run reset with the specified reset-type
Secure Firmware
Signing Binary Image
Signing Binary Image
Update.
Files.
Files.
77