Cisco IMC Firmware Management

This chapter includes the following sections:

Overview of Firmware

C-Series servers use Cisco-certified firmware that is specific to the C-Series server model that you are using. You can download new releases of the firmware for all supported server models from Cisco.com.


Caution


When you install the new BIOS firmware, it must be from the same software release as the Cisco IMC firmware that is running on the server. Do not install the new BIOS firmware until after you have activated the matching Cisco IMC firmware or the server will not boot.

To avoid potential problems, we strongly recommend that you use the Cisco Host Upgrade Utility (HUU), which upgrades the BIOS, Cisco IMC, and other firmware to compatible levels. For detailed information about this utility, see the Cisco Host Upgrade Utility Guide for the version of the HUU that goes with the Cisco IMC software release that you want to install. The HUU guides are available at the following URL: http:/​/​www.cisco.com/​en/​US/​products/​ps10493/​products_​user_​guide_​list.html.


If you want to update the firmware manually, you must update the Cisco IMC firmware first. The Cisco IMC firmware update process is divided into the following stages to minimize the amount of time that the server is offline:

  • Installation—During this stage, Cisco IMC installs the selected Cisco IMC firmware in the nonactive, or backup, slot on the server.

  • Activation—During this stage, Cisco IMC sets the nonactive firmware version as active, causing a disruption in service. When the server reboots, the firmware in the new active slot becomes the running version.

After you activate the Cisco IMC firmware, you can update the BIOS firmware.


Note


  • You can either upgrade an older firmware version to a newer one, or downgrade a newer firmware version to an older one.

  • This procedure only applies to the Cisco UCS C-Series server running on Stand-Alone mode. Contact Cisco Technical Assistance Center to upgrade firmware for UCS C-Series running on Cisco UCS Manager integrated mode.


Cisco IMC in a secure mode ensures that all the firmware images prior to loading and execution are digitally signed and are verified for authenticity and integrity to protect the device from running tampered software.

Obtaining Firmware from Cisco

Procedure
    Step 1   Navigate to http:/​/​www.cisco.com/​.
    Step 2   If you are not already logged in, click Log In at the top right-hand edge of the page and log in using your Cisco.com credentials.
    Step 3   In the menu bar at the top, click Support.
    Step 4   Click All Downloads in the roll down menu.
    Step 5   If your server model is listed in the Recently Used Products list, click the server name. Otherwise, do the following:
    1. In the left-hand box, click Products.
    2. In the center box, click Unified Computing and Servers.
    3. In the right-hand box, click Cisco UCS C-Series Rack-Mount Standalone Server Software.
    4. In the right-hand box, click the server model whose software you want to download.
    Step 6   Click the Unified Computing System (UCS) Server Firmware link.
    Step 7   (Optional)Select a prior release from the menu bar on the left-hand side of the page.
    Step 8   Click the Download button associated with the Cisco Host Upgrade Utility ISO for the selected release.
    Step 9   Click Accept License Agreement.
    Step 10   Save the ISO file to a local drive.

    We recommend you upgrade the Cisco IMC and BIOS firmware on your server using this ISO file, which contains the Cisco Host Upgrade Utility. For detailed information about this utility, see the Cisco Host Upgrade Utility Guide for the version of the HUU that goes with the Cisco IMC software release that you want to install. The HUU guides are available at the following URL: http:/​/​www.cisco.com/​en/​US/​products/​ps10493/​products_​user_​guide_​list.html.

    Step 11   (Optional) If you plan to upgrade the Cisco IMC and BIOS firmware manually, do the following:
    1. From the ISO file, open the ZIP file containing the firmware installation files.

      The ZIP file is on the top-level of the ISO file, and its name follows the format ServerModel_ReleaseNumber.ZIP.

      For example, C240M3_1.4.4A.ZIP.

      You do not need to extract all of the files contained in this ZIP file. Instead, you only need to open it so that you can access the BIOS firmware installation CAP file and the ZIP file containing the Cisco IMC firmware installation BIN file.

    2. From the ServerModel_ReleaseNumber.ZIP file, extract the BIOS firmware installation CAP file and save it to your local drive.

      The CAP file is in the ReleaseNumber/bios/cisco imc folder, and its name follows the format Server-BIOS-Release-Number.CAP.

      For example, 1.4.4a/bios/cisco imc/C240-BIOS-1-4-4c-0.CAP.

    3. From the ServerModel_ReleaseNumber.ZIP file, open the ZIP file containing the Cisco IMC firmware installation files.

      The ZIP file is in the ReleaseNumber/cisco imc folder and its name follows the format server-model-cisco imc-release.zip.

      For example, 1.4.4a/cisco imc/c240-m3-cisco imc.1.4.4a.zip.

      You do not need to extract all of the files contained in this zip file. Instead, you only need to open it so that you can access the Cisco IMC firmware installation BIN file.

    4. From the server-model-cisco imc-release.zip file, extract the full Cisco IMC firmware installation BIN file and save it to your local drive.

      The BIN file is in the server-model-cisco imc-release folder and its name follows the format upd-pkg-server-model-cisco imc.full.release.bin.

      For example, c240-m3-cisco imc.1.4.4a/upd-pkg-c240-m3-cisco imc.full.1.4.4a.bin.

    Step 12   (Optional)If you plan to install the firmware from a remote server, copy the BIOS installation CAP file and the Cisco IMC installation BIN file to the remote server you want to use.
    The remote server can be one of the following:
    • TFTP

    • FTP

    • SFTP

    • SCP

    • HTTP

    The server must have read permission for the destination folder on the remote server.

    Note   

    The Cisco UCS C-Series server now supports fingerprint confirmation of the server when you update firmware through a remote server. This option is available only if you choose SCP or SFTP as the remote server type.

    If you chose SCP or SFTP as the remote server type while performing this action, a prompt with the message Server (RSA) key fingerprint is <server_finger_print _ID> Do you wish to continue? Click y or n depending on the authenticity of the server fingerprint.

    The fingerprint is based on the host's public key and helps you to identify or verify the host you are connecting to.


    What to Do Next

    Use the Cisco Host Upgrade Utility to upgrade all firmware on the server or manually install the Cisco IMC firmware on the server.

    Installing Cisco IMC Firmware from a Remote Server

    Before You Begin
    • Log in to the Cisco IMC as a user with admin privileges.

    • Activate the Cisco IMC firmware that goes with the BIOS version you want to install, as described in the Activating Installed Cisco IMC Firmware section.

    • Power off the server.


    Note


    You must not initiate a Cisco IMC update when another Cisco IMC update is already in progress.


    Procedure
       Command or ActionPurpose
      Step 1Server /server # scope server {1 | 2}  

      Enters server command mode of server 1 or 2.

       
      Step 2server /server # scope bmc  

      Enters bmc command mode.

       
      Step 3server /server/bmc # scope firmware  

      Enters the firmware command mode.

       
      Step 4server /server/bmc/firmware # update protocol IP Address path  
      Specifies the protocol, IP address of the remote server, and the file path to the firmware file on the server. The protocol can be one of the following:
      • TFTP

      • FTP

      • SFTP

      • SCP

      • HTTP

      Note   

      The Cisco UCS C-Series server now supports fingerprint confirmation of the server when you update firmware through a remote server. This option is available only if you choose SCP or SFTP as the remote server type.

      If you chose SCP or SFTP as the remote server type while performing this action, a prompt with the message Server (RSA) key fingerprint is <server_finger_print _ID> Do you wish to continue? Click y or n depending on the authenticity of the server fingerprint.

      The fingerprint is based on the host's public key and helps you to identify or verify the host you are connecting to.

       
      Step 5server /server/bmc/firmware # show detail   (Optional)

      Displays the progress of the firmware update.

       

      This example shows how to update the Cisco IMC firmware:

      server# scope server 1
      server /server # scope bmc
      server /server/bmc # scope firmware
      server /server/bmc/firmware # update ftp 192.0.20.34 //test/dnld-ucs-k9-bundle.1.0.2h.bin
      Firmware update has started.
      Please check the status using "show detail"
      server /server/bmc/firmware # show detail
      Firmware Image Information:
           Update Stage: NONE
          Update Progress: 5
          Current FW Version: 2.0(6.56)
          FW Image 1 Version: 2.0(6.56)
          FW Image 1 State: RUNNING ACTIVATED
          FW Image 2 Version: 2.0(6.55)
          FW Image 2 State: BACKUP INACTIVATED
          Boot-loader Version: 2.0(6.56).36
          Secure Boot: ENABLED
       
      server /server/bmc/firmware # 
      What to Do Next

      Activate the new firmware.

      Activating Installed Cisco IMC Firmware

      Before You Begin

      Install the Cisco IMC firmware on the server.

      Important: p

      While the activation is in progress, do not:

      • Reset, power off, or shut down the server.

      • Reboot or reset Cisco IMC.

      • Activate any other firmware.

      • Export technical support or configuration data.

      Procedure
         Command or ActionPurpose
        Step 1Server /server # scope server {1 | 2}  

        Enters server command mode of server 1 or 2.

         
        Step 2server /server # scope bmc  

        Enters bmc command mode.

         
        Step 3server /server/bmc # scope firmware  

        Enters the firmware command mode.

         
        Step 4Server /server/bmc # show detail  

        Displays the available firmware images and status.

         
        Step 5Server /server/bmc # activate  

        Activates the selected image. If no image number is specified, the server activates the currently inactive image.

         
        Step 6At the prompt, enter y to activate the selected firmware image.  

        The BMC reboots, terminating all CLI and GUI sessions until the reboot completes.

         
        Step 7Log back into the CLI and repeat steps 1–4 to verify the activation.   (Optional) 

        This example activates firmware image 2 and then verifies the activation after the BMC reboots:

        Server# scope server 1
        Server/server# scope bmc
        Server /server/bmc # scope firmware
        Server /server/bmc # show detail 
        Firmware Image Information:
             Update Stage: NONE
            Update Progress: 100
            Current FW Version: 2.0(6.55)
            FW Image 1 Version: 2.0(6.56)
            FW Image 1 State: BACKUP INACTIVATED
            FW Image 2 Version: 2.0(6.55)
            FW Image 2 State: RUNNING ACTIVATED
            Boot-loader Version: 2.0(6.55).36
            Secure Boot: ENABLED
        
        
        Server /server/bmc # activate 
        This operation will activate firmware 2 and reboot the BMC.
        Continue?[y|N]y
        .
        .
         -- BMC reboot --
        .
        .
        -- Log into CLI as Admin --
        
        Server# scope server 1
        Server/server# scope bmc
        Server /server/bmc # scope firmware
        Server /server/bmc # show detail 
        Firmware Image Information:
            Update Stage: NONE
            Update Progress: 100
            Current FW Version: 2.0(6.55)
            FW Image 1 Version: 2.0(6.56)
            FW Image 1 State: BACKUP INACTIVATED
            FW Image 2 Version: 2.0(6.55)
            FW Image 2 State: RUNNING ACTIVATED
            Boot-loader Version: 2.0(6.55).36
            Secure Boot: ENABLED
            
        

        Installing BIOS Firmware from a Remote Server

        Before You Begin
        • Log in to the Cisco IMC as a user with admin privileges.

        • Activate the Cisco IMC firmware that goes with the BIOS version you want to install, as described in the Activating Installed BIOS Firmware section.

        • Power off the server.


        Note


        You must not initiate a BIOS update while another BIOS update is already in progress.


        Procedure
           Command or ActionPurpose
          Step 1Server /server # scope server {1 | 2}  

          Enters server command mode of server 1 or 2.

           
          Step 2server /server # scope bios  

          Enters BIOS command mode.

           
          Step 3server /server/bios # update protocol IP Address pathrecovery  
          Specifies the protocol, IP address of the remote server, and the file path to the firmware file on the server. The protocol can be one of the following:
          • TFTP

          • FTP

          • SFTP

          • SCP

          • HTTP

          Note   

          The Cisco UCS C-Series server now supports fingerprint confirmation of the server when you update firmware through a remote server. This option is available only if you choose SCP or SFTP as the remote server type.

          If you chose SCP or SFTP as the remote server type while performing this action, a prompt with the message Server (RSA) key fingerprint is <server_finger_print _ID> Do you wish to continue? Click y or n depending on the authenticity of the server fingerprint.

          The fingerprint is based on the host's public key and helps you to identify or verify the host you are connecting to.

           
          Step 4server /server/bios # show detail   (Optional)

          Displays the progress of the firmware update.

           

          This example updates the BIOS firmware to Cisco IMC software release 2.0(7c):

          Server# scope server 1
          Server /server# scope bios
          Server /server/bios# show detail
          BIOS:
              BIOS Version: C3X60M3.2.0.7c.0.071620151216
              Backup BIOS Version: C3X60M3.2.0.7c.0.071620151216
              Boot Order: (none)
              Boot Override Priority: 
              FW Update/Recovery Status: None, OK
              UEFI Secure Boot: disabled
              Configured Boot Mode: Legacy
              Actual Boot Mode: Legacy
              Last Configured Boot Order Source: CIMC
          Server /server/bios # update ftp 192.0.20.34 //upgrade_bios_files/C3620-BIOS-2-0-7c-0.CAP
           <CR>  Press Enter key
          Firmware update has started.
          Check the status using "show detail"
          Server /bios #
          

          Activating Installed BIOS Firmware

          Before You Begin
          • Install the BIOS firmware on the server.

          • Power off the host.

          Important:
          While the activation is in progress, do not:
          • Reset, power off, or shut down the server.

          • Reboot or reset Cisco IMC.

          • Activate any other firmware.

          • Export technical support or configuration data.

          Procedure
             Command or ActionPurpose
            Step 1Server /server # scope server {1 | 2}  

            Enters server command mode of server 1 or 2.

             
            Step 2server /server # scope bios  

            Enters BIOS command mode.

             
            Step 3Server /server/bios # activate  

            Activates the currently inactive image.

             
            Step 4At the prompt, enter y to activate the selected firmware image.  

            Initiates the activation.

             

            This example activates firmware and then verifies the activation:

            Server# scope server 1
            Server /server# scope bios
            Server /server/bios# show detail
            BIOS:
                BIOS Version: C3X60M3.2.0.7c.0.071620151216
                Backup BIOS Version: C3X60M3.2.0.7c.0.071620151216
                Boot Order: (none)
                Boot Override Priority: 
                FW Update/Recovery Status: None, OK
                UEFI Secure Boot: disabled
                Configured Boot Mode: Legacy
                Actual Boot Mode: Legacy
                Last Configured Boot Order Source: CIMC
            
            Server /server/bios # activate
            This operation will activate "C240M4.2.0.2.66.071820142034" after next host power off
            Continue?[y|N] 
            
            Server# scope server 1
            Server /server# scope bios
            Server /server/bios# show detail
            BIOS:
                BIOS Version: C3X60M3.2.0.7c.0.071620151216
                Backup BIOS Version: C3X60M3.2.0.7c.0.071620151216
                Boot Order: (none)
                Boot Override Priority: 
                FW Update/Recovery Status: None, OK
                UEFI Secure Boot: disabled
                Configured Boot Mode: Legacy
                Actual Boot Mode: Legacy
                Last Configured Boot Order Source: CIMC
                
            

            Installing CMC Firmware from a Remote Server


            Note


            You must not initiate a CMC update while another CMC update is already in progress.


            Before You Begin
            • Log in to the Cisco IMC as a user with admin privileges.

            • Obtain the Cisco Host Upgrade Utility ISO file from Cisco.com and extract the firmware installation files as described in Obtaining Firmware from Cisco.

            Procedure
               Command or ActionPurpose
              Step 1server # scope chassis  

              Enters chassis command mode.

               
              Step 2server /chassis # scope cmc 1|2  

              Enters CMC on the chosen SIOC controller command mode.

               
              Step 3server /chassis/cmc # update protocol IP Address path  
              Specifies the protocol, IP address of the remote server, and the file path to the firmware file on the server. The protocol can be one of the following:
              • TFTP

              • FTP

              • SFTP

              • SCP

              • HTTP

              Note   

              The Cisco UCS C-Series server now supports fingerprint confirmation of the server when you update firmware through a remote server. This option is available only if you choose SCP or SFTP as the remote server type.

              If you chose SCP or SFTP as the remote server type while performing this action, a prompt with the message Server (RSA) key fingerprint is <server_finger_print _ID> Do you wish to continue? Click y or n depending on the authenticity of the server fingerprint.

              The fingerprint is based on the host's public key and helps you to identify or verify the host you are connecting to.

               
              Step 4server /chassis/cmc # show detail   (Optional)

              Displays the progress of the firmware update.

               

              This example shows how to update the CMC firmware:

              server # scope chassis
              server /chassis # scope cmc 1
              server /chassis/cmc # update  http 10.104.236.99 colusa2_cmc.2.0.7a.img
              CMC Firmware update initialized.
              Please check the status using "show detail"
              Server /chassis/cmc # show detail
              Firmware Image Information:
                  Name: CMC1
                  Update Stage: DOWNLOAD
                  Update Progress: 25
                  Current FW Version: 2.0(7a)
                  FW Image 1 Version: 2.0(7a)
                  FW Image 1 State: RUNNING ACTIVATED
                  FW Image 2 Version: 2.0(7a)
                  FW Image 2 State: BACKUP INACTIVATED
              server /chassis/cmc # 
              What to Do Next

              Activate the new firmware.

              Activating Installed CMC Firmware


              Note


              CMCs are configured to have one in an active state while other acts as a backup, when you activate the backup CMC the previously active CMC changes to backup CMC activating the other.


              Before You Begin

              Install the CMC firmware on the server.

              Important:

              While the activation is in progress, do not:

              • Reset, power off, or shut down the server.

              • Reboot or reset Cisco IMC.

              • Activate any other firmware.

              • Export technical support or configuration data.

              • CMC-1 activation interrupts Cisco IMC network connectivity.

              Procedure
                 Command or ActionPurpose
                Step 1server # scope chassis  

                Enters chassis command mode.

                 
                Step 2Server# scope cmc1|2  

                Enters the CMC of the chosen SIOC slot command mode.

                 
                Step 3Server /cmc # activate  

                Activates the selected image for the chosen CMC.

                 
                Step 4At the prompt, enter y to activate the selected firmware image.  

                The CMC-1 reboots, terminating all CLI and GUI sessions until the reboot completes, but CMC-2 reboot will not affect any active sessions.

                 

                This example activates CMC firmware on the SIOC slot 1:

                Server # scope chassis
                Server /chassis # scope cmc 1
                Server /chassis/cmc #  activate
                Warning: The CMC will be rebooted immediately to complete the activation.
                The network may go down temporarily till CMC boots up again 
                Continue?[y|N]y