Lenovo System UEFI/BIOS Firmware
Available Drivers
Lenovo System UEFI/BIOS Firmware
OS Independent
Lenovo System UEFI/BIOS Firmware change history file (plain text)
lnvgy_fw_uefi_d8e134h-3.24_anyos_32-64.chg
OS Independent
Lenovo System UEFI/BIOS Firmware release notes file (plain text)
lnvgy_fw_uefi_d8e134h-3.24_anyos_32-64.txt
OS Independent
Fix - Update Payload
lnvgy_fw_uefi_d8e134h-3.24_anyos_32-64.uxz
OS Independent
XML file
lnvgy_fw_uefi_d8e134h-3.24_anyos_32-64.xml
OS Independent
Description
System Support: ThinkSystem SR665, ThinkSystem SR645
OS Support: Any OS
What's More
Change History
UEFI Update Change History For installation instructions, see the file, lnvgy_fw_uefi_d8e134h-3.24_anyos_32-64.txt, which is provided in the downloaded software package. When installing firmware, Lenovo recommends that you use the UpdateXpress System Pack (UXSP) bundle. ================================================== Version 3.24, Build ID D8E134H[Critical] Release date: [Oct./ 2023] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.10 (Build ID: D8E120J) Prerequisite XCC version: - SR645/SR665 XCC Version 5.32 (Build ID: D8BT60Q) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Address CVE-2023-20592 [AMD EPYC 7002 Series processor] -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Fixed the issue that "System Settings > Devices and I/O Ports > Enable / Disable Adapter Option ROM Support > Network/Storage/Video/Other PCI Devices" loaded to "Legacy" by selecting ¡§Load Default Settings" if "System Settings > Security > Secure Boot Configuration > Secure Boot Settings" is enabled in System Setup Utility. -Fixed the issue that options of "BMC Settings > Network Settings > Fail-Over Rule" still exist in System Setup Utility if "BMC Configuration > Network > Ethernet Configuration > Ethernet Port #" is disabled in BMC web page. -Fixed the issue that boot priority of USB storage device was included in "Boot Manager > Set Boot Priority > Hard Disk Priority" in System Setup Utility if its capacity was over 64GB. -Popped up warning message if ¡§Password expiration warning period¡¨ exceed the value specified for the ¡§Password expiration period¡¨ at "User security > Password Rule and Policy" menu in System Setup Utility. -Fixed the issue that system hang if clicking "System Settings > Storage > NVME" in System Setup Utility if server has Intel P5500 NVMe SSD installed. -Fixed the issue that yellow bang would be displayed in Windows Device Manager for "Generic IPMI Compliant Device" if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page. -Fixed the issue that booting Windows OS slowly and virtualization device drive labeled with "LEPT" was visible under OS if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page. -Fixed the issue that cannot change setting for "Secure Boot Setting" and "Secure Boot Policy" at "System Settings > Security > Secure Boot Configuration" at the same time in System Setup Utility. -Used NVMe bay number in boot option instead of PCI slot for PCIe NVMe devices. -Fixed the issue that system hang after change both settings DMAR to "Enabled" and IOMMU to "Disabled" in System Setup Utility. -Fixed the issue that system still boot to legacy PXE if "System Settings > Legacy BIOS > Rehook INT 19h" is enabled. -Fixed the issue that the SEL(FQXSFMA0007I:[arg1] DIMM number [arg2] has been replaced. [arg3]) maybe reported for Un-Qualified bad DIMM incorrectly. -Fixed the issue that "System Settings -> Devices and I/O Ports > Network Option ROM" cannot be disabled when "System Settings > Legacy BIOS" is disabled in System Setup Utility. [AMD EPYC 7002 Series processor] -Fixed the issue that "System Settings > Devices and I/O Ports > Enable / Disable Adapter Option ROM Support > Network/Storage/Video/Other PCI Devices" loaded to "Legacy" by selecting ¡§Load Default Settings" if "System Settings > Security > Secure Boot Configuration > Secure Boot Settings" is enabled in System Setup Utility. -Fixed the issue that options of "BMC Settings > Network Settings > Fail-Over Rule" still exist in System Setup Utility if "BMC Configuration > Network > Ethernet Configuration > Ethernet Port #" is disabled in BMC web page. -Fixed the issue that boot priority of USB storage device was included in "Boot Manager > Set Boot Priority > Hard Disk Priority" in System Setup Utility if its capacity was over 64GB. -Popped up warning message if ¡§Password expiration warning period¡¨ exceed the value specified for the ¡§Password expiration period¡¨ at "User security > Password Rule and Policy" menu in System Setup Utility. -Fixed the issue that system hang if clicking "System Settings > Storage > NVME" in System Setup Utility if server has Intel P5500 NVMe SSD installed. -Fixed the issue that yellow bang would be displayed in Windows Device Manager for "Generic IPMI Compliant Device" if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page. -Fixed the issue that booting Windows OS slowly and virtualization device drive labeled with "LEPT" was visible under OS if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page. -Fixed the issue that cannot change setting for "Secure Boot Setting" and "Secure Boot Policy" at "System Settings > Security > Secure Boot Configuration" at the same time in System Setup Utility. -Used NVMe bay number in boot option instead of PCI slot for PCIe NVMe devices. -Fixed the issue that "System Settings -> Devices and I/O Ports > Network Option ROM" cannot be disabled when "System Settings > Legacy BIOS" is disabled in System Setup Utility. -Fixed the issue that secure boot keys not loaded to default if "System Settings > Security > Secure Boot Configuration > Secure Boot Policy" set to "Factory Policy". -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Update SEV Fw v1.55.14 -Added CPU fusing status "System Settings > Processors > Processor Details > PSB Fusing Status" in System Setup Utility. -Added code logic which will not fuse new CPU (without PSB fusing) automatically but report SEL (FQXSFPU4073G, FQXSFPU4074G or FQXSFPU4075G) if system enables PSB feature but new CPU is installed by customers. Lenovo service team will help do CPU fuse when provide CPU replacement service. Prerequisite: XCC version D8BT60Q 5.32 -Blocked OS reset during system UEFI firmware updating to make sure firmware updating is not interrupted. [AMD EPYC 7002 Series processor] -Added CPU fusing status "System Settings > Processors > Processor Details > PSB Fusing Status" in System Setup Utility. -Added code logic which will not fuse new CPU (without PSB fusing) automatically but report SEL (FQXSFPU4073G, FQXSFPU4074G or FQXSFPU4075G) if system enables PSB feature but new CPU is installed by customers. Lenovo service team will help do CPU fuse when provide CPU replacement service. Prerequisite: XCC version D8BT60Q 5.32 -Blocked OS reset during system UEFI firmware updating to make sure firmware updating is not interrupted. ================================================== Version 3.11, Build ID D8E132H[Critical] Release date: [Sep./ 2023] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.10 (Build ID: D8E120J) Prerequisite XCC version: - SR645/SR665 XCC Version 5.00 (Build ID: D8BT54M) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Addressed CVE-2023-20569 [AMD EPYC 7002 Series processor] -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] [AMD EPYC 7002 Series processor] -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Updated CPU uCode to B0 0x0A001079 B1 0x0A0011D1 B2 0x0A001234 [AMD EPYC 7002 Series processor] ================================================== Version 3.10, Build ID D8E132G[Critical] Release date: [Aug./ 2023] Update date: [Oct./ 2023] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.10 (Build ID: D8E120J) Prerequisite XCC version: - SR645/SR665 XCC Version 5.00 (Build ID: D8BT54M) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Integrated AMD AGESA MilanPI Version 1.0.0.B Updated uCode to B0 0x0A001078 B1 0x0A0011CE B2 0x0A001231 Addressed CVE-2021-46774, CVE-2023-20566 -Updated DBX MAY 2023 to address PSIRT issue LEN-127392 Note: User could take one of the two methods below to apply the default DBX, but it will reset all keys to default, so customer need re-add their customer keys after the operation. 1. Go to setup menu, Security > Secure Boot Configuration > Secure Boot Policy, select "Reset All Keys to Default", then save and exit setup. 2. Use the OneCLI command below to update the new DBX: OneCli.exe config set SecureBootConfiguration.SecureBootPolicy "Reset All Keys to Default" --imm <USERID>:<PASSW0RD>@<IP> [AMD EPYC 7002 Series processor] -Integrated AMD AGESA RomePI Version 1.0.0.G Updated uCode to B0 0x0830107A Addressed CVE-2021-46774, CVE-2023-20593 -Updated DBX MAY 2023 to address PSIRT issue LEN-127392 Note: User could take one of the two methods below to apply the default DBX, but it will reset all keys to default, so customer need re-add their customer keys after the operation. 1. Go to setup menu, Security > Secure Boot Configuration > Secure Boot Policy, select "Reset All Keys to Default", then save and exit setup. 2. Use the OneCLI command below to update the new DBX: OneCli.exe config set SecureBootConfiguration.SecureBootPolicy "Reset All Keys to Default" --imm <USERID>:<PASSW0RD>@<IP> -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Fixed the issue that XCC web can not show the detailed inventory information for generic onboard SATA drive. -Fixed the issue that setup items in "BMC Settings" are loaded to default by selecting ÜdÕîoad Default Settings" in system setup utility. -Supported over 20 boot devices in "Boot manager > Change Boot Order". -Cleaned up the invalid address input in "System Settings > Network > Network Boot Settings > IPv6 Configuration List > Click any configuration > Enter Configuration Menu > Change Policy to manual > Advanced Configuration". -Do not highlight "F1:System Setup" in POST screen if Shift + F1 are pressed. -Fixed the issue that changing BootOrder.HardDiskBootOrder failed by OneCLI when "Boot manager > Boot Modes > Prevent OS Change To Boot Order" is enabled. -Fixed the issue that Linux efibootmgr cannot show "BootCurrent" after setting IPMI next one time boot. -Fixed the bug that after changing a setup item at "BMC Settings > Network Settings > Advanced Settings for BMC Ethernet", then an error message box would be popped up always when "BMC Settings > Network Settings > Save Network Settings" in Sytem Setup Utility. -Fixed the issue that Manufacturer is empty for Intel SATA drives in "System Settings > Storage > SATA Drives > SATA Drive Information" in System Setup Utility. -Fixed the issue that SMBIOS Type 1 "Family" field cannot be updated if changing SYSTEM_PROD_DATA.SysInfoFamily by OneCLI. -Fixed the issue that Linux would report error message "Memory for the RMP table has not been reserved by BIOS error occurred" if SEV-SNP function enabled. -Exposed setup setting "System Settings > Devices and IO Ports > PCIe Ten Bit Tag Support" in System Setup Utility and DevicesandIOPorts.PCIeTenBitTagSupport in OneCLI. -Fixed operating mode setting is not synced with operating mode after system reboot if changing OperatingModes.ChooseOperatingMode by OneCLI. -Fixed the maximum number of "System Settings > Processors > BoostFmax Manual" from 0xFFFFFFFF to digital 9999. [AMD EPYC 7002 Series processor] -Fixed the issue that XCC web can not show the detailed inventory information for generic onboard SATA drive. -Fixed the issue that setup items in "BMC Settings" are loaded to default by selecting "Load Default Settings" in system setup utility. -Supported over 20 boot devices in "Boot manager > Change Boot Order". -Cleaned up the invalid address input in "System Settings > Network > Network Boot Settings > IPv6 Configuration List > Click any configuration > Enter Configuration Menu > Change Policy to manual > Advanced Configuration". -Do not highlight "F1:System Setup" in POST screen if Shift + F1 are pressed. -Fixed the issue that changing BootOrder.HardDiskBootOrder failed by OneCLI when "Boot manager > Boot Modes > Prevent OS Change To Boot Order" is enabled. -Fixed the issue that Linux efibootmgr cannot show "BootCurrent" after setting IPMI next one time boot. -Fixed the bug that after changing a setup item at "BMC Settings > Network Settings > Advanced Settings for BMC Ethernet", then an error message box would be popped up always when "BMC Settings > Network Settings > Save Network Settings" in Sytem Setup Utility. -Fixed the issue that Manufacturer is empty for Intel SATA drives in "System Settings > Storage > SATA Drives > SATA Drive Information" in System Setup Utility. -Fixed the issue that SMBIOS Type 1 "Family" field cannot be updated if changing SYSTEM_PROD_DATA.SysInfoFamily by OneCLI. -Fixed the issue that system event log (FQXSFMA0002M) is not reported for certain uncorrectable error. -Exposed setup setting "System Settings > Devices and IO Ports > PCIe Ten Bit Tag Support" in System Setup Utility. -Fixed system hang when selecting "System Settings > Device and I/O Ports > Set Option ROM Execution Order" item in System Setup Utility. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] -Added new setup option to allow user to select whether to expose unused PCIe slots to the OS through "System Settings > Devices and I/O Ports > Enable/ Disable Onboard Devices(s) > Slot #" or DevicesandIOPorts.Device_Slot<N> -Added a new function that uEFI will report OS boot status to XCC when system is staying in power on password and privileged admin password input message box. Note: need to match XCC version 5.00 (Build ID: D8BT54M) -Enabled MHB (Memory Healing BIST) at UEFI side, customer can enable MHB by redfish through the related XCC version 5.00 (Build ID: D8BT54M) -Support below new CPUs (Updated: Oct / 2023) AMD EPYC (Milan) 7203 Processor AMD EPYC (Milan) 7203P Processor AMD EPYC (Milan) 7303 Processor AMD EPYC (Milan) 7303P Processor AMD EPYC (Milan) 7643P Processor AMD EPYC (Milan) 7663P Processor Note: If you want to use above CPUs, before installing above new CPUs, please update to this BIOS version firstly. [AMD EPYC 7002 Series processor] -Added a new function that uEFI will report OS boot status to XCC when system is staying in power on password and privileged admin password input message box. Note: need to match XCC version 5.00 (Build ID: D8BT54M) ================================================== Version 2.61, Build ID D8E130G[Critical] Release date: [Apr./ 2023] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.02 (Build ID: D8E116G) Prerequisite XCC version: - SR645/SR665 XCC Version 3.01 (Build ID: D8BT16J) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Updated OpenSSL to 1.1.1t. Addressed CVE-2023-0286, CVE-2022-4304, CVE-2023-0215, CVE-2022-4450 [AMD EPYC 7002 Series processor] Updated OpenSSL to 1.1.1t. Addressed CVE-2023-0286, CVE-2022-4304, CVE-2023-0215, CVE-2022-4450 -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] [AMD EPYC 7002 Series processor] -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Provided setup item "System Settings > Processors > SEV-SNP Support" to System Setup Utility Provided setup item "Processors.SEV-SNPSupport" for OneCLI [AMD EPYC 7002 Series processor] ================================================== Version 2.60, Build ID D8E130F[Suggested] Release date: [Feb./ 2023] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.02 (Build ID: D8E116G) Prerequisite XCC version: - SR645/SR665 XCC Version 3.01 (Build ID: D8BT16J) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Address CVE-2021-33164 [AMD EPYC 7002 Series processor] Address CVE-2021-33164 -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Modified the options to be 1-based numbering for "BMC Settings > Network Settings > Fail-Over Rule" and "BMC Settings > Network Settings > Share NIC on" to match with XCC web UI when OCP adapters are installed. Fixed the issue that "BMC Settings > Network Settings > Fail-Over Rule" is not synced with IMM.FailoverMode. Fixed the issue that the USB device is not bootable in legacy boot mode. Fixed the issue that after system reset, "BMC Settings > Network Settings > Network Interface Port" is changed to default value "Dedicated" automatically when "BMC Settings > Network Settings > Share NIC on" is changed and saved. Fixed the issue that MCA (Machine Check Architecture) LS (Load-Store) type uncorrectable errors is not reported as SEL FQXSFPU0019N. Show "Data rate" and "Duplex" setup menus only when "BMC Settings > Network Settings > Network Interface Port > Advanced Setting for BMC Ethernet > Autonegotiation" is "No". Added "System Settings > Processors > HSMP" in System Setup. Added "Prcoessors.HSMP" for OneCLI. Changed the string to "System Settings > Network > Network Devices List" from "System Settings > Network > Network Devices" in the Setup menu. Fixed the issue that existing HTTP boot option would be gone in "Start Options" when creating a new HTTP boot options "System Settings > Network > HTTP Boot Configuration > MAC: XXXXXXXXXX- HTTP Boot Configuration". Adjusted to report PPR result SEL FQXSFMA0026I/FQXSFMA0027M right after PPR (POST Package Repair) is done. [AMD EPYC 7002 Series processor] Modified the options to be 1-based numbering for "BMC Settings > Network Settings > Fail-Over Rule" and "BMC Settings > Network Settings > Share NIC on" to match with XCC web UI when OCP adapters are installed. Fixed the issue that "BMC Settings > Network Settings > Fail-Over Rule" is not synced with IMM.FailoverMode. Fixed the issue that the USB device is not bootable in legacy boot mode Fixed the issue that after system reset, "BMC Settings > Network Settings > Network Interface Port" is changed to default value "Dedicated" automatically when "BMC Settings > Network Settings > Share NIC on" is changed and saved. Show "Data rate" and "Duplex" setup menus only when "BMC Settings > Network Settings > Network Interface Port > Advanced Setting for BMC Ethernet > Autonegotiation" is "No". Changed the string to "System Settings > Network > Network Devices List" from "System Settings > Network > Network Devices" in the Setup menu. Fixed the issue that four setup items below would be loaded to defaults after FW upgrading/ downgrading and cannot be changed by OneCLI. -"System Settings > Processors > L1 Stream HW Prefetcher" -"System Settings > Processors > L2 Stream HW Prefetcher" -"System Settings > Processors > SMT Mode" -"System Settings > Processors > CPPC" Fixed the issue that existing HTTP boot option would be gone in "Start Options" when creating a new HTTP boot options "System Settings > Network > HTTP Boot Configuration > MAC: XXXXXXXXXX- HTTP Boot Configuration". Adjusted to report PPR result SEL FQXSFMA0026I/FQXSFMA0027M right after PPR (POST Package Repair) is done. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Added "3D V-Cache" setup menu in "System Setting > Processors" System Setup page. Added Processors.3DV-Cache in OneCLI. Integrated AMD MilanPI Version 1.0.0.A Update Milan Ucode(B0:0x0A001078, B1:0x0A0011CE, B2:0x0A001231) for AMD Erratum #1450. [AMD EPYC 7002 Series processor] Integrated AMD RomePI Version 1.0.0.F Rome Ucode (A0: 0x08300027 B0: 0x08301055) ================================================== Version 2.51, Build ID D8E128G[Suggested] Release date: [Dec./ 2022] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.02 (Build ID: D8E116G) Prerequisite XCC version: - SR645/SR665 XCC Version 3.01 (Build ID: D8BT16J) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Correct the default setting of "SystemSettings" > "Memory" > "DRAM Scrub Time" [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.50, Build ID D8E128F[Suggested] Release date: [Sep./ 2022] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- * Prerequisite uEFI version: 2.02 (Build ID: D8E116G) Prerequisite XCC version: - SR645/SR665 XCC Version 3.01 (Build ID: D8BT16J) To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP * Note: The bios version can be downgraded to 2.00 (Build ID: D8E116D) at a minimum -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Addressed CVE-2022-34302, CVE-2022-34303, CVE-2022-34301, CVE-2022-23813, CVE-2022-23814, CVE-2021-26316, CVE-2021-26328, CVE-2021-26355, CVE-2021-26396, CVE-2021-26402, CVE-2021-26404, CVE-2021-39298, CVE-2021-46791, CVE-2021-26343, CVE-2021-26409 Addressed LEN-84093, LEN-84946, LEN-84945 [AMD EPYC 7002 Series processor] Addressed CVE-2022-34302, CVE-2022-34303, CVE-2022-34301, CVE-2022-23813, CVE-2021-26316, CVE-2021-26402, CVE-2021-39298, CVE-2021-26403, CVE-2021-26407 Addressed LEN-84093, LEN-84946, LEN-84945 -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Fixed the issue that some NVMe drives are displayed under both of "System Settings > Storage" and "System Settings > Storage > NVMe" page Changed SecureCore to Secured-Core in System Setup and OneCLI to match Microsoft requirements Modified the setup options for "System Settings > Processors > APIC Mode" in System Setup and for Processors.APICMode in OneCLI Pop up a message box to stop user changing settings in System Setup while flashing system UEFI firmware is ongoing Prevent user from changing system UEFI variables in OS while flashing system UEFI firmware is ongoing [AMD EPYC 7002 Series processor] Fixed the issue that some NVMe drives are displayed under both of "System Settings > Storage" and "System Settings > Storage > NVMe" page. Pop up a message box to stop user changing settings in System Setup while flashing system UEFI firmware is ongoing Prevent user from changing system UEFI variables in OS while flashing system UEFI firmware is ongoing -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Support XCC to configure array on adapters: -ThinkSystem RAID 5350-8i PCIe 12Gb Adapter -ThinkSystem RAID 9350-8i 2GB Flash PCIe 12Gb Adapter -ThinkSystem RAID 9350-8i 2GB Flash PCIe 12Gb Internal Adapter -ThinkSystem RAID 9350-16i 4GB Flash PCIe 12Gb Adapter -ThinkSystem RAID 9350-16i 4GB Flash PCIe 12Gb Internal Adapter Integrated AMD MilanPI Version 1.0.0.9 Added "SEV ASID Count", "SEV-ES ASID Space Limit Control", "SEV-ES ASID Space Limit" setup items in "System Settings > Memory" System Settings page Added Memory.SEVASIDCount, Memory.SEV-ESASIDSpaceLimitControl, Memory.SEV-ESASIDSpaceLimit in OneCLI Added "Enhanced Preferred IO Mode" Setup Item in "System Settings > Processors" System Setup page for EPYC 7003 Series Processors Added Processors.EnhancedPreferredIOMode in OneCLI for EPYC 7003 Series Processors [AMD EPYC 7002 Series processor] Integrated AMD RomePI Version 1.0.0.E Added "SEV ASID Count", "SEV-ES ASID Space Limit Control", "SEV-ES ASID Space Limit" setup items in "System Settings > Memory" System Settings page Added Memory.SEVASIDCount, Memory.SEV-ESASIDSpaceLimitControl, Memory.SEV-ESASIDSpaceLimit in OneCLI ================================================== Version 2.42, Build ID D8E126J[Suggested] Release date: [Sep./ 2022] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: Skip to report FQXSFIO0022J of PCIe link width downgrade for Nvidia A2 GPU - Tip HT513599 FIX: Fixed secure core feature couldn't be set in uefi setup affected in UEFI D8E126H-2.41 [AMD EPYC 7002 Series processor] FIX: Skip to report FQXSFIO0022J of PCIe link width downgrade for Nvidia A2 GPU - Tip HT513599 -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.41, Build ID D8E126H[Suggested] Release date: [Jul./ 2022] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: Expose two setup items "Fast Short REP MOVSB (FSRM)¶©? and "Enhanced REP MOVSB/STOSB (ERMSB)¶©? in F1 setup "Processor¶©? page to solve EVC vMotion fail issue which was caused by flashing different UEFI versions, can refer more details in tip HT513865 (https://support.lenovo.com/us/en/solutions/HT513865) [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Enhance generic NVMe drives information display in the F1 Setup "System settings > Storage¶©? page [AMD EPYC 7002 Series processor] Enhance generic NVMe drives information display in the F1 Setup "System settings > Storage¶©? page -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.40, Build ID D8E126F[Suggested] Release date: [May./ 2022] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Addressed PSIRT issue LEN-71534 Addressed PSIRT issues LEN-78118 [AMD EPYC 7002 Series processor] Addressed PSIRT issue LEN-71534 Addressed PSIRT issues LEN-78118 Addressed PSIRT issues CVE-2021-3711 and CVE-2021_3712 -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: Populate UUID into SMBIOS before Option ROM execution for SAN boot and DHCP IPv6. FIX: Update microcode for Milan Erratum #1407 and #1415 (B0:0A001058, B1:0A001173, B2:0A001229) to fix OS crash and reboot issue. FIX: Corrected the DIMM speed to AMD supported 2666 MT/s for configuration on 2pcs of 3DS DIMM per channel. [AMD EPYC 7002 Series processor] FIX: Update microcode for Rome Erratum #1417 (B0:08301055) to fix OS crash and reboot issue. FIX: Populate UUID into SMBIOS before Option ROM execution for SAN boot and DHCP IPv6. FIX: Stop supporting EXFAT, Universal Disk Format and ISO9660. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Windows 2022 secure core and system guard support Integrated AMI 5.22_MilanCrb_0ACOU018 with AMD MilanPI Version 1.0.0.8. [AMD EPYC 7002 Series processor] Integrated AMI 5.14_RomeCrb_0ACMK023 with AMD RomePI Version 1.0.0.D. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.30, Build ID D8E124I [Suggested] Release date: [Feb / 2022] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: SR645 Welcome page Network Interface Port lacks the Shared option. FIX: Renamed "Number of CPU Cores Activated" to "Number of Enabled CPU Cores Per Socket" in Setup and renamed "CPUCoresActivated" to "NumberofEnabledCPUCoresPerSocket" for OneCLI. And fixed the issue that CPU 72F3 cores cannot be adjusted. FIX: Enhanced PCIe Error processing in POST time. FIX: Systems with Milan processor experienced OS crash and system softreset. Update microcode for Milan Erratum #1381(B0:0A00104C, B1:0A001143, B2:0A001223) Update microcode for Milan Erratum #1386 (B0: 0x0A00104E, B1: 0x0A001144, B2: 0x0A001224) [AMD EPYC 7002 Series processor] FIX: SR645 Welcome page Network Interface Port lacks the Shared option. FIX: Renamed "Number of CPU Cores Activated" to "Number of Enabled CPU Cores Per Socket" in Setup and renamed "CPUCoresActivated" to "NumberofEnabledCPUCoresPerSocket" for OneCLI. And fixed the issue that CPU 72F3 cores cannot be adjusted. FIX: Enhanced PCIe Error processing in POST time. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Enhanced the MCA processing Expose one setup item for both of System Setup Utility and OneCLI: System Settings > Memory > SMEE Report system event log (FQXSFDD0012K, FQXSFDD0012I) for AHCI hardware issue during post time. Expose three setup items for both of System Setup Utility and OneCLI: System Settings > Processors > L1 Stride Prefetcher System Settings > Processors > L1 Region Prefetcher System Settings > Processors > L2 Up/Down Prefetcher Expose one setup item for both of System Setup Utility and OneCLI: System Settings > Memory > Interleave Display generic adapter into Lenovo System Setup Utility as foreign device. Exposed SRIOV setup item in System Setup Utility and OneCLI. Support VGA USB device. Correct NVMe bay number in the PCIe system event log. Integrated AMI 5.22_MilanCrb_0ACOU016 with AMD MilanPI Version1.0.0.6. [AMD EPYC 7002 Series processor] Enhanced the MCA processing Expose one setup item for both of System Setup Utility and OneCLI: System Settings > Memory > SMEE Report system event log (FQXSFDD0012K, FQXSFDD0012I) for AHCI hardware issue during post time. Expose three setup items for both of System Setup Utility and OneCLI: System Settings > Processors > L1 Stride Prefetcher System Settings > Processors > L1 Region Prefetcher System Settings > Processors > L2 Up/Down Prefetcher Display generic adapter into Lenovo System Setup Utility as foreign device. Exposed SRIOV setup item in System Setup Utility and OneCLI. Support VGA USB device. Correct NVMe bay number in the PCIe system event log. Integrated 5.14_RomeCrb_0ACMK022 with AMD Reference Code RomePI 1.0.0.C. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.21, Build ID D8E122L [Critical] Release date: [Nov / 2021] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX2375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX7375 Integrated System, Machine Type 7D82 Lenovo ThinkAgile VX3376 Certified Node, Machine Type 7D82 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Address CVE-2020-12944,CVE-2020-12946,CVE-2020-12951,CVE-2020-12954,CVE-2020-12961,CVE-2020-12988,CVE-2021-26312,CVE-2021-26315,CVE-2021-26320,CVE-2021-26321,CVE-2021-26322,CVE-2021-26323,CVE-2021-26325,CVE-2021-26326,CVE-2021-26327,CVE-2021-26329,CVE-2021-26330,CVE-2021-26331,CVE-2021-26335,CVE-2021-26336,CVE-2021-26337,CVE-2021-26338 [AMD EPYC 7002 Series processor] Address CVE-2020-12944,CVE-2020-12946,CVE-2020-12951,CVE-2020-12954,CVE-2020-12961,CVE-2020-12988,CVE-2021-26312,CVE-2021-26320,CVE-2021-26321,CVE-2021-26322,CVE-2021-26329,CVE-2021-26330,CVE-2021-26331,CVE-2021-26335,CVE-2021-26336,CVE-2021-26337,CVE-2021-26338 -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.20, Build ID D8E122K [Suggested] Release date: [Aug / 2021] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Address CVE-2020-10255 - Rowhammer - DDR4 protection bypass (TRRespass). Address CVE-2020-10713 - Update DBX to latest one at https://uefi.org/revocationlistfile. [AMD EPYC 7002 Series processor] Address CVE-2020-10255 - Rowhammer - DDR4 protection bypass (TRRespass). Address CVE-2020-10713 - Update DBX to latest one at https://uefi.org/revocationlistfile. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: incorrect PCIe Slot information in OS. FIX: Xilinx U25 only show 2 NIC ports on web inventory but not show another 2 FPGA ports. FIX: the issue that UEFI settings are loaded to default if unexpected restart happen after UEFI firmware update. FIX: Remove "Zero Output" power policy from system menu. FIX: Information about M.2 RAID card and M.2 SSD is missing from XCC. [AMD EPYC 7002 Series processor] FIX: Xilinx U25 only show 2 NIC ports on web inventory but not show another 2 FPGA ports. FIX: the issue that UEFI settings are loaded to default if unexpected restart happen after UEFI firmware update. FIX: Remove "Zero Output" power policy from system menu. FIX: Information about M.2 RAID card and M.2 SSD is missing from XCC. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Add firmware support for ThinkSystem 4-Port PCIe Gen4 NVMe Retimer Adapter to support SR645 with 10x NVME and single processor. Support 1611-8P switch card config. Integrated AMI 5.22_MilanCrb_0ACOU012 with AMD AGESA MilanPI 1.0.0.3. Print a message on UEFI setup page when customer changed a setting which needs a reboot to take effect. Report PCIe link width and speed downgrade system event log <TBD event ID). [AMD EPYC 7002 Series processor] Add firmware support for ThinkSystem 4-Port PCIe Gen4 NVMe Retimer Adapter to support SR645 with 10x NVME and single processor. Support 1611-8P switch card config. Integrated AMI 5.14_RomeCrb_0ACMK021 with AMD AGESA RomePI 1.0.0.B. Print a message on UEFI setup page when customer changed a setting which needs a reboot to take effect. Report PCIe link width and speed downgrade system event log <TBD event ID). -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.10, Build ID D8E120J [Suggested] Release date: [June / 2021] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U Lenovo ThinkAgile VX5575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX7576 Certified Node, Machine Type 7D43 Lenovo ThinkAgile VX7575 Integrated System, Machine Type 7D43 Lenovo ThinkAgile VX3575-G Integrated System, Machine Type 7D43 This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) or higher versions at first step, then upgrade UEFI to 2.02 (D8E116G) or higher versions. And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) or higher versions via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) or higher versions via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: Increased the temperature threshold value for DIMM performance degrade. FIX: The runtime hang issue when DIMM correctable error count reach the threshold. FIX: The runtime hang issue when high PFA happened. FIX: Hang during POST when fail to obtain the shared NIC info from XCC through IPMI. FIX: Removed System Settings > Recovery and RAS > Advanced RAS > PCIe Endpoint Reset On Fatal Error from system setup utility. FIX: Removed AdvancedRAS.PCIeEndpointResetOnFatalError from OneCLI. FIX: The issue that Linux boot fail when "Prevent OS Changes To Boot Order" is set to "Enable". FIX: The issue that after finishing the 3 times DC cycle successfully, the current UEFI image would not be saved as a trust image to be flashed while UEFI FW recovery. FIX: The issue that PCIe error recovery does not work when System Settings > Recovery and RAS > Advanced RAS > PCI Error Recovery is enabled. FIX: The issue that F12 selection page is broken after returning from network boot failure. FIX: The issue that non-UDI memory show incorrect slot number in XCC web event log. FIX: The POST fail issue with 4 ethernet adapters under NPAR mode. FIX: The issue that Processors.GlobalC-stateControl is not found by OneCLI. [AMD EPYC 7002 Series processor] FIX: Increased the temperature threshold value for DIMM performance degrade. FIX: The runtime hang issue when DIMM correctable error count reach the threshold. Increased the DIMM correctable error count threshold value. FIX: The runtime hang issue when high PFA happened. FIX: Hang during POST when fail to obtain the shared NIC info from XCC through IPMI. FIX: Removed System Settings > Recovery and RAS > Advanced RAS > PCIe Endpoint Reset On Fatal Error from system setup utility. FIX: Removed AdvancedRAS.PCIeEndpointResetOnFatalError from OneCLI. FIX: The issue that Linux boot fail when "Prevent OS Changes To Boot Order" is set to "Enable". FIX: The issue that PCIe error recovery does not work when System Settings > Recovery and RAS > Advanced RAS > PCI Error Recovery is enabled. FIX: The POST fail issue with 4 ethernet adapters under NPAR mode. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] Provided a setup item in both of system setup utility and OneCLI to enable/disable SHA-1 for TPM 2.0. Integrated AMI 5.22_MilanCrb_0ACOU010 with AMD AGESA MilanPI 1.0.0.1. Provided a setup item for OneCLI to enable / disable SMEE (Secure Memory Encryption Extension). Support Riser1C&1D slot3 bifurcation for US25 configuration. [AMD EPYC 7002 Series processor] VLAN Configuration can be configured by OneCLI. Passed the info of AHCI-attached SATA drive to XCC so that the disk drive info can be displayed on XCC web. Enabled Thales CipherTrust Manager support. Provided PCIe info to XCC for the Redfish schema of NetworkAdapter. Added BMC IPv6 address to SMBIOS Type 42. Removed Physical Presence and Remote Physical Presence functions. Only allow the account with security privilege to change security settings through OneCLI. Provided a setup item in both of system setup utility and OneCLI to enable/disable SHA-1 for TPM 2.0. Integrated AMI 5.14_RomeCrb_0ACMK020 with AMD AGESA RomePI 1.0.0.A. Provided a setup item for OneCLI to enable / disable SMEE (Secure Memory Encryption Extension). Default is changed from Enable to Disable. Support Riser1C&1D slot3 bifurcation for US25 configuration. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.02, Build ID D8E116G [Suggested] Release date: [April / 2021] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) at first step, then upgrade UEFI to 2.02 (D8E116G). And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.02 (D8E116G) via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.02 (D8E116G) via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] Enhancement to address LEN-57315. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: Workaround for DBMU issue. [AMD EPYC 7002 Series processor] FIX: Workaround for DBMU issue. FIX: Support TPM 1.2 version 7.4.0.1 firmware on Nuvoton 750 part. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.01, Build ID D8E116E [Suggested] Release date: [March / 2021] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) at first step, then upgrade UEFI to 2.01 (D8E116E). And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.01 (D8E116E) via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.01 (D8E116E) via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] FIX: 3DS DIMM performance degrades when operating temperature above 66 degree C [AMD EPYC 7002 Series processor] FIX: 3DS DIMM performance degrades when operating temperature above 66 degree C -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 2.00, Build ID D8E116D [Suggested] Release date: [March / 2021] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U This UEFI supports two series of AMD processor: AMD EPYC 7002 Series processor (formerly codenamed "Rome") AMD EPYC 7003 Series processor (formerly codenamed "Milan") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- If user would like to upgrade FW, it needs to upgrade XCC to 3.01 (D8BT16J) at first step, then upgrade UEFI to 2.00 (D8E116D). And we suggest user NOT to perform AC power cycle (remove and re-plug power cable) after XCC upgraded but UEFI has not yet, it may cause the long boot time during POST about 10 minutes. If user would like to replace AMD EPYC 7002 Series processor with AMD EPYC 7003 Series processor, then please follow the steps: For remote update: Step 1: Update XCC to 3.01 (D8BT16J) via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 2: If XCC update during system power on, then reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. If XCC update during system power off, then FPGA/PFR will automatically update during XCC reboot which take 10 minutes during XCC reboot. Step 3: Update UEFI to 2.00 (D8E116D) via XCC Web UI or Lenovo XClarity Essentials OneCLI or UpdateXpress. Step 4: AC power off and remove AMD EPYC 7002 Series processor. Step 5: Install AMD EPYC 7003 Series processor, then Power on. And for local update: Step 1: Power on the system. Step 2: Update XCC to 3.01 (D8BT16J) via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 3: Reboot system to let new FPGA/PFR take effect, it may take 10 minutes during UEFI boot. Step 4: Update UEFI to 2.00 (D8E116D) via Lenovo XClarity Essentials OneCLI, UpdateXpress or Bootable Media Creator (BoMC). Step 5: AC power off and remove AMD EPYC 7002 Series processor. Step 6: Install AMD EPYC 7003 Series processor, then Power on -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] FIX: TPM hang when TPM policy is disabled and no TCM exists. FIX: Correctable CPU link error reporting from OS log, XCC event during runtime and system POST. FIX: Normally display on the UEFI Setup screen even the length is over the width. FIX: The problem when user use online tool to modify settings, such as Onecli or LXCA... etc. FIX: The performance will not degrade when update UEFI. FIX: Correct the value of Protocol Identifier in SMBIOS Type 42. FIX: National Language Support (NLS) does not work well in UEFI Setup > System Settings > View Secure Boot Keys. FIX: Correct the behavior of one-time boot from XCC RDOC image in DBMU process. FIX: Inconsistency information of Share port between UEFI setup and UEFI shell. FIX: The inconsistency the translation for 'Power' between setup option and the help information. FIX: Correct the Help information of CPU Cores Activated. FIX: The window of dropdown list value cover the other values displaying. FIX: Correct the Help information of USB3 Rear/Front Port and USB2 Front Port. FIX: System fails to install legacy mode OS. FIX: The hidden log recording the PPR result correctly in the same boot cycle. FIX: PPR is triggerred, UEFI log is inconsistent with XCC log. FIX: UEFI will hang when "Mount Local Media File" after mounting a special Local Media File¶©C FIX: System POST hang after BMC mounting a special Local Media File. FIX: The RAID 930-16i not showing correctly in XCC inventory / LXCM System Summary when system boot in legacy mode. FIX: The system keeps reboot when QLogic 16Gb Enhanced Gen5 FC HBA installed. FIX: Correct the incorrect PCI slot information. FIX: The flooding PCIEHP events in ESXi vmkernel log. FIX: The NVMe devices can't be detected on middle backplane from bay 36 to bay 39. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] Added the support for new critical secure feature PFR (Platform Firmware Resilience, hardware based Root-of-Trust), Lenovo PFR feature is one combination implementation of FPGA, XCC and UEFI, so please update UEFI together with the related version of FPGA and XCC. NOTE: in order to keep the high secure of the system, once updating UFEI to Version 2.00, Build ID D8E116D or later, downgrading to any old versions prior to 2.00 (e.g. 1.21) will be blocked. Expose some UEFI Setup items for better performance tuning. Integrate 5.14_RomeCrb_0ACMK019 and Agesa 1009. Add SystemRecovery.PostLoadSetupDefault. Prevent OS boot manager changes the UEFI boot order after OS installation. Support TPM 2.0 version 7.2.2.0 firmware toggling on Nuvoton 750. After TPM Fw were update to 7.2.2.0 it cannot be downgrade to TPM 1.2. Repeat event logs "FQXSFIO0010M" with different severities. No OS event logs after PCIE error. Update the NVMe VPP address for SR665. SR645 max memory speed option in custom mode. Unified language string in Processor Socket field. Support trimode configuration. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None -------------------------------------------------------------------------- 7.0 Limitations -------------------------------------------------------------------------- [AMD EPYC 7003 Series processor] None [AMD EPYC 7002 Series processor] None ================================================== Version 1.21, Build ID D8E110K [Suggested] Release date: [Dec / 2020] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U This UEFI is to support the AMD CPU¶©GAMD EPYC 7002 Series processor (formerly codenamed "Rome") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- FIX¶©GEAR needed for the AMD CPU link error issue. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 7.0 Limitations -------------------------------------------------------------------------- None. ================================================== Version 1.20, Build ID D8E110J [Suggested] Release date: [Nov / 2020] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W Lenovo ThinkAgile HX3375 Appliance, Machine Types 7D5U Lenovo ThinkAgile HX3376 Certified Node, Machine Types 7D5U This UEFI is to support the AMD CPU¶©GAMD EPYC 7002 Series processor (formerly codenamed "Rome") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- Addresses Coverity 18697 Negative loop bound. Addresses Coverity CID 18542. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- FIX: TPM hang when TPM Disabled and TCM Disable. FIX¶©GCorrected SMBIOS Type 9 information when "Slot 1 Bifurcation" set to x8x8 with Xilinx Alveo U25 SmartNIC Accelerator Card. FIX¶©GCorrected SMBIOS Type 9 (System Slots) information. FIX¶©G"Correctable CPU link error" logged in XCC when two CPU's are installed on SR645 and SR665( HT511122). FIX¶©GUEFI-via manually in UEFI set Processors.P-state1 to Disable and set Processors.BoostFmaxManual to 37 at same time will Cause UEFI hang. FIX: dmesg reports wrong slot number after encountered PCIe LCRC TX Error. FIX¶©Gsystem network lost and USB port cannot be used. FIX: garbage screen appears while exit LXPM when system boot mode is set as legacy. FIX¶©GThinkSystem repeatedly powers on and off or POST fails ( HT510509). FIX: the system blocked in 'maintenance mode' interface after upgraded UEFI. FIX: UEFI log inconsistent with XCC log when the DIMM PPR is triggered. FIX: secure boot will be changed to disable after upgraded or downgraded UEFI -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- Modify 1U_Riser1 with RearHDD config. Corrected SMBIOS type 3 Security State. Enabled slot Bifurcation support. Addresses Sync CRB15 PI 1.0.0.7, Sync CRB16 PI 1.0.0.7, Sync CRB17 PI 1.0.0.8. Enabled the function of turning off AMD cores. Expose SVM Mode under Setup menu. Use SystemOobCustom.AdvancedDebugControl to enable RC setup menu in system setup utility. Corrected inconsistent information shown in help message. Allow NVRAM to be flashed in maintenance mode. Enabled "CPU Cores Activated" function and allow to power off a set number of cores for processors. Removed unconfigurable settings from the config XML.(i.e. Do not output UEFI HII button type question to the config XML and The code to output only UEFI HII string, oneof, numeric, orderred list, checkbox and password question which is user configurable questions to the config XML). -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- -------------------------------------------------------------------------- 7.0 Limitations -------------------------------------------------------------------------- ================================================== Version 1.11, Build ID D8E108H [Suggested] Release date: [Nov / 2020] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W This UEFI is to support the AMD CPU¶©GAMD EPYC 7002 Series processor (formerly codenamed "Rome") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- FIX: TPM hang when TPM Disabled and TCM Disable. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 7.0 Limitations -------------------------------------------------------------------------- None. ================================================== Version 1.10, Build ID D8E108D [Suggested] Release date: [Sep / 2020] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W This UEFI is to support the AMD CPU¶©GAMD EPYC 7002 Series processor (formerly codenamed "Rome") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- FIX: Invalid NVME SSD device information is displayed in LXPM PCI adapter information. FIX: When installed Broadcom 57416 10GBASE-T 2-port + 5720 1GbE 2-port OCP Ethernet Adapter, SMBIOS type9 shown wrong bus number. FIX: The slot information is not correct under Hardware-> PCI Information->Devices->slot. FIX: Correctable CPU Link Error has been detected on processor events. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 7.0 Limitations -------------------------------------------------------------------------- Slot Number and bus number of Dual-port OCP(Broadcom 57416 10GBASE-T 2-port + 5720 1GbE 2-port) had design changed , If you use older BIOS/uEFI below the current version, please re-configure your OS Broadcom 57416 ports, please check with Lenovo support team for detail information The tips number:HT511078. ================================================== Version 1.01, Build ID D8E106Q [Suggested] Release date: [Jun / 2020] ================================================== -------------------------------------------------------------------------- 1.0 Overview -------------------------------------------------------------------------- Support Systems: Lenovo ThinkSystem SR645 Server, Machine Types 7D2X,7D2Y Lenovo ThinkSystem SR665 Server, Machine Types 7D2V,7D2W This UEFI is to support the AMD CPU¶©GAMD EPYC 7002 Series processor (formerly codenamed "Rome") Supported configurations can be found on the Lenovo Operating System Interoperability Guide at the following website: https://lenovopress.com/osig -------------------------------------------------------------------------- 2.0 Prerequisites and dependencies -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 3.0 Security Fixes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 4.0 Other Fixes -------------------------------------------------------------------------- FIX: NVMe SSD surprise Hot-Plug failed on some special configurations. -------------------------------------------------------------------------- 5.0 Enhancements -------------------------------------------------------------------------- Support modify Multi-language with OOB. -------------------------------------------------------------------------- 6.0 Other Changes -------------------------------------------------------------------------- None. -------------------------------------------------------------------------- 7.0 Limitations -------------------------------------------------------------------------- None. ================================================== Version 1.00, Build ID D8E106P [Suggested] Release date: [Jun / 2020] ================================================== This is the initial release of UEFI. This UEFI is to support the AMD CPU¶©GAMD EPYC 7002 Series processor (formerly codenamed "Rome") ================================================== Related Information ================================================== Lenovo Data Center forums https://forums.lenovo.com/t5/Datacenter-Systems/ct-p/sv_eg Lenovo Data Center Support http://datacentersupport.lenovo.com Lenovo ThinkSystem Rack Server Customer Documentation http://thinksystem.lenovofiles.com/help/topic/rack_servers/overview_rack_servers.html XClarity Controller Customer Documentation http://sysmgt.lenovofiles.com/help/topic/com.lenovo.thinksystem.xcc.doc/product_page.html Lenovo Product Security Advisories https://datacentersupport.lenovo.com/us/en/product_security/home
Your feedback helps to improve the overall experience
Alias Id: LNVGY_FW_UEFI_D8E134H-3.24_ANYOS_32-64
Fix ID: lnvgy_fw_uefi_d8e134h-3.24_anyos_32-64
Release Date: 16 Dec 2023
Original Publish Date: 16 Dec 2023
Document ID: DS566396