Lenovo System UEFI/BIOS Firmware

Change History

UEFI Firmware Update Change History

For installation instructions, see the file, 
lnvgy_fw_uefi_tqe110d-2.10_anyos_32-64.txt, which is provided 
in the downloaded software package.  When installing firmware, Lenovo 
recommends that you use the UpdateXpress System Pack (UXSP) bundle.

==================================================
Version 3.10, Build ID TQE112D [Suggested]
Release date:   [November / 2023]
==================================================

1.0 Overview
Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 
 
2.0 Fixes 
- Fixed the issue that "System Settings > Devices and I/O Ports > Enable / Disable Adapter Option ROM Support > Network/Storage/Video/Other PCI Devices" loaded to "Legacy" by selecting “Load Default Settings" if "System Settings > Security > Secure Boot Configuration > Secure Boot Settings" is enabled in System Setup Utility.
- Fixed the issue that options of "BMC Settings > Network Settings > Fail-Over Rule" still exist in System Setup Utility if "BMC Configuration > Network > Ethernet Configuration > Ethernet Port #" is disabled in BMC web page. 
- Fixed the issue that boot priority of USB storage device was included in "Boot Manager > Set Boot Priority >  Hard Disk Priority" in System Setup Utility if its capacity was over 64GB.
- Fixed the issue that system hang if clicking "System Settings > Storage > NVME" in System Setup Utility if server has Intel P5500 NVMe SSD installed.
- Fixed the issue that yellow bang would be displayed in Windows Device Manager for "Generic IPMI Compliant Device" if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page.
- Fixed the issue that booting Windows OS slowly and virtualization device drive labeled with "LEPT" was visible under OS if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page.
- Fixed the issue that cannot change setting for "Secure Boot Setting" and "Secure Boot Policy" at "System Settings > Security > Secure Boot Configuration" at the same time in System Setup Utility.
- Fixed the issue that failed to permanently erase all data on SATA storage devices if selecting "Effortless Reset" in LXPM.

3.0 Enhancements
- Poped up warning message if “Password expiration warning period” exceed the value specified for the “Password expiration period” at "User security > Password Rule and Policy" menu in System Setup Utility.
- Used NVMe bay number in boot option instead of PCI slot for PCIe NVMe devices.

4.0 Security
- Update MCU to m_02_a0671_0000005d.
  Address CVE-2023-23583

5.0 Limitations
None

==================================================
Version 2.10, Build ID TQE110D [Critical]
Release date:   [August / 2023]
==================================================

1.0 Overview
Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 
 
2.0 Fixes 
  - Fixed the issue that XCC web can not show the detailed inventory information for generic onboard SATA drive.
  - Fixed the issue that setup items in "BMC Settings" are loaded to default by selecting “Load Default Settings" in system setup utility.
  - Fixed the issue that "System Settings -> Devices and I/O Ports > Network Option ROM" cannot be disabled when "System Settings > Legacy BIOS" is disabled in System Setup Utility.
  - Fixed the issue that when one DIMM has memory UE or CE, SEL (FQXSFMA0029L) is reported on its companion DIMM slot in the same channel instead of its own DIMM slot.
  - Fixed the bug that system will enter into endless reboot after clearing CMOS if system has a bad DIMM.
  - Fixed the issue that changing BootOrder.HardDiskBootOrder failed by OneCLI when "Boot manager > Boot Modes > Prevent OS Change To Boot Order" is enabled.
  - Fixed the issue that Linux efibootmgr cannot show "BootCurrent" after setting IPMI next one time boot.
  - Fixed the bug that after changing a setup item at  "BMC Settings > Network Settings > Advanced Settings for BMC Ethernet", then an error message box would be popped up always    when "BMC Settings > Network Settings > Save Network Settings" in Sytem Setup Utility.
  - Fixed the issue that Manufacturer is empty for Intel SATA drives in "System Settings > Storage > SATA Drives > SATA Drive Information" in System Setup Utility.
  - Fixed the issue that SMBIOS Type 1 "Family" field cannot be updated if changing SYSTEM_PROD_DATA.SysInfoFamily by OneCLI.

3.0 Enhancements
  - Added a new function that uEFI will report OS boot status to XCC when system is staying in power on password and privileged admin password input message box.
  - Added a new system event log (FQXSFMA0076M: DIMM [arg1] is not supported, DIMM identifier is [arg2]) for unsupported DIMM error reporting.
  - Supported over 20 boot devices in "Boot manager > Change Boot Order".
  - Do not highlight "F1:System Setup" in POST screen if Shift + F1 are pressed.
  - SMBIOS Type17 shows "Unkown" for "Manufacturer" field if it is not in Lenovo validation list.

4.0 Security
   - Updated DBX MAY 2023 to address PSIRT issue LEN-127392.
     Note:
     User could take one of the two methods below to apply the default DBX, but it will reset all keys to default, so customer need re-add their customer keys after the operation.
     1. Go to setup menu, Security > Secure Boot Configuration > Secure Boot Policy, select "Reset All Keys to Default", then save and exit setup.
     2. Use the OneCLI command below to update the new DBX
        OneCli.exe config set SecureBootConfiguration.SecureBootPolicy “Reset All Keys to Default” --imm <USERID>:<PASSW0RD>@<IP>

  - Integrated Intel BKC 2023.3 IPU
    Updated SPS to 06.00.03.505
    Updated MCU:
    CPU CML-S :
    M22A0650_000000BE.pdb M22A0651_000000C2.pdb M22A0653_000000F8.pdb M22A0654_000000C6.pdb
    CPU RKL-S:
    M02A0670_0000002C.pdb M02A0671_00000059.pdb
    Addressed CVE-2022-40982
  
5.0 Limitations
  None

==================================================
Version 1.21, Build ID TQE108G [Critical]
Release date:   [May / 2023]
==================================================

1.0 Overview
Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 
 
2.0 Fixes 
  - Hide option "System Settings > Processors > Trusted Execution Technology" if CPU does not have the capability. (Tip number: TT1073)

3.0 Enhancements
  None

4.0 Security
  - Updated MCU to 
    Microcode Version (CML-S): M22A0650_000000BE.pdb, M22A0651_000000C2.pdb, M22A0653_000000F6.pdb, M22A0654_000000C6.pdb
    Microcode Version (RKL-S)： M02A0670_0000002C.pdb, M02A0671_00000058.pdb

  - Updated OpenSSL to 1.1.1t
    Addressed CVE-2023-0286, CVE-2022-4304, CVE-2023-0215, CVE-2022-4450
  
5.0 Limitations
  None

==================================================
Version 1.20, Build ID TQE108D [Suggested]
Release date:   [March / 2023]
==================================================

1.0 Overview
Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 
 
2.0 Fixes 
  - Fix the blue screen issue if Win2022 is used and "System Settings > Devices and I/O Ports > Onboard SATA Mode" or DevicesandIOPorts.OnboardSATAMode is selected as "RAID".
  - Modified the options to be 1-based numbering for "BMC Settings > Network Settings > Fail-Over Rule" and "BMC Settings > Network Settings > Share NIC on" to match with XCC web UI when OCP adapters are installed.
  - Fixed the issue that "BMC Settings > Network Settings > Fail-Over Rule" is not synced with IMM.FailoverMode.
  - Fixed the issue that the USB device is not bootable in legacy boot mode.
  - Fixed the issue that after system reset, "BMC Settings > Network Settings > Network Interface Port" is changed to default value "Dedicated" automatically when "BMC Settings > Network Settings > Share NIC on" is changed and saved. 
  - Corrected SEL reporting for memory PFA event with FQXSFMA0029L.
  - Show "Data rate" and "Duplex" setup menus only when "BMC Settings > Network Settings > Network Interface Port > Advanced Setting for BMC Ethernet > Autonegotiation" is "No".
  - Fixed the issue that existing HTTP boot option would be gone in "Start Options" when creating a new HTTP boot options “System Settings > Network > HTTP Boot Configuration > MAC: XXXXXXXXXX- HTTP Boot Configuration”.


3.0 Enhancements
  - Removed "Autonomous" option for "System Settings > Processors > C-States"  to follow up Intel design.
  - Changed the string to "System Settings > Network > Network Devices List" from "System Settings > Network > Network Devices" in the Setup menu.
  - Provided DIMM FRU number in the system event log if it reports an event of any specific DIMM.

4.0 Security
  - IPU 2023.1 update
    Updated SPS to 06.00.03.309.
    Updated MCU to M02A0671_00000057, M22A0653_000000F4.
    Addressd CVE-2022-30704, CVE-2022-36794, CVE-2022-38090, CVE-2022-26837.
  
5.0 Limitations
  None

==================================================
Version 1.10, Build ID TQE106E [Critical]
Release date:   [November / 2022]
==================================================

1.0 Overview
Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

2.0 Fixes
  - Support XCC to configure array on adapters:
    ThinkSystem RAID 5350-8i PCIe 12Gb Adapter
    ThinkSystem RAID 9350-8i 2GB Flash PCIe 12Gb Adapter
    ThinkSystem RAID 9350-8i 2GB Flash PCIe 12Gb Internal Adapter
    ThinkSystem RAID 9350-16i 4GB Flash PCIe 12Gb Adapter
    ThinkSystem RAID 9350-16i 4GB Flash PCIe 12Gb Internal Adapter
  
  - Fixed the issue that DevicesandIOPorts.OnboardSATAMode cannot be changed by OneCLI - Tip 103835
  - Fixed the issue that user cannot see M.2 drive through XCC redfish
  - Fixed the issue that when changing "System Settings > Processors > Software Guard Extensions (SGX)" in System Setup, unsaved value changes of other setup items are deleted.
  
3.0 Enhancements
  - Enhance generic NVMe drives information display in the F1 Setup "System settings > Storage > NVMe" page. 
  - Update Intel VROC SATA(RSTe) and VROC NVMe(VMD) uEFI drivers to 7.8.0.1012
  
4.0 Security
  - IPU 2022.3 update
    Updated SPS to 06.00.03.204
    Updated MCU to M22A0653_000000F4 and M02A0671_00000056
    Addressd CVE-2022-29515, CVE-2022-21198, CVE-2021-33164, CVE-2022-33176, CVE-2022-37345, CVE-2022-21794, CVE-2022-34152, CVE-2022-32569, CVE-2022-36789, CVE-2022-35276,   CVE-2022-26124, CVE-2022-36370, CVE-2022-37334, CVE-2022-36349 and CVE-2022-38099
  
  - Addressed CVE-2022-34302, CVE-2022-34303 and CVE-2022-34301

5.0 Limitations
  None.

==================================================
Version 1.01, Build ID TQE104J [Suggested]
Release date:   [August / 2022]
==================================================

1.0 Overview

Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

2.0 Fixes
  None.
  
3.0 Enhancements
  None.
  
4.0 Security
  - IPU2022.2 update
    Addressed CVE-2022-21233
    Updated SPS to SPS_E3_06.00.03.100.0
    Updated MCU to M22A0650_000000BE, M22A0651_000000C2, M22A0653_000000F0, M22A0654_000000C6, M02A0670_0000002C, M02A0671_00000054
    Updated ACM to SINIT v1.14.39l, BIOS ACM v1.14.39

5.0 Limitations
  None.
  
==================================================
Version 1.01, Build ID TQE104H [Suggested]
Release date:   [May / 2022]
==================================================

1.0 Overview

Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 


2.0 Fixes
  - Fix system halts at post when TPM is disabled/Locked.
  
3.0 Enhancements
  None.

4.0 Limitations
  None.

==================================================
Version 1.01, Build ID TQE104F [Suggested]
Release date:   [April / 2022]
==================================================

1.0 Overview

Support Systems: 
  
  Lenovo ThinkSystem SR250 V2/ ST250 V2

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 


2.0 Fixes
  - Fix: Syncing problem of "CPU P-state control" value under F1 UEFI Setup pages of "Processors" and "Operating Modes"
  
3.0 Enhancements
  - Support Intel Comet Lake CPU. 
    Please find supported processors list from SR250 v2 / ST250 v2 Product Guide.
    SR250 v2 Produce Guide: https://lenovopress.com/lp1549-thinksystem-sr250-v2#processors
    ST250 v2 Produce Guide: https://lenovopress.com/lp1548-thinksystem-st250-v2#processors

4.0 Limitations
  None.

==================================================
Version 1.00, Build ID TQE102X [Initial Release]
Release date:   [Feb / 2022]
==================================================

This is the initial release of UEFI.

==================================================
Related Information
==================================================

Lenovo Data Center forums
https://forums.lenovo.com/t5/Datacenter-Systems/ct-p/sv_eg

Lenovo Data Center Support
http://datacentersupport.lenovo.com

Lenovo ThinkSystem Rack Server Customer Documentation
http://thinksystem.lenovofiles.com/help/topic/rack_servers/overview_rack_servers.html

XClarity Controller Customer Documentation
http://sysmgt.lenovofiles.com/help/topic/com.lenovo.thinksystem.xcc.doc/product_page.html

Lenovo Product Security Advisories
https://datacentersupport.lenovo.com/us/en/product_security/home