Lenovo System UEFI/BIOS Firmware

Change History

UEFI Firmware Update Change History

For installation instructions, see the file, 
lnvgy_fw_uefi_afe130d-3.31_anyos_32-64.txt, which is provided 
in the downloaded software package.  When installing firmware, Lenovo 
recommends that you use the UpdateXpress System Pack (UXSP) bundle.

==================================================
Version 3.31, Build ID AFE130D [Suggested]
Release date:   [November / 2024]
Release Ref: FOD061
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* Prerequisite uEFI version: 2.10 (Build ID: AFE124G)
* Prerequisite XCC version: 3.80 (Build ID: AFBT38M)
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  None	 
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  None
  
--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Add the support to run Hynix algorithm with special parameters for ADATA DIMM during advanced memory test 
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  None


==================================================
Version 3.30, Build ID AFE130C [Critical]
Release date:   [July / 2024]
Release Ref: FOD24B
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* Prerequisite uEFI version: 1.50 (Build ID: AFE122G)
* Prerequisite XCC version: 3.80 (Build ID: AFBT38M)
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Integrated Intel IPU 2024.3.
    - Update MCU to d0003e7.
	- Update ACM to BIOS ACM 1.3.7 SINIT ACM 1.3.8.
    - Addressed CVE-2024-25939(Medium),CVE-2024-24968(Medium),CVE-2024-24853(High),CVE-2024-23984(Medium),CVE-2024-24980(Medium),CVE-2024-21820(High),CVE-2024-23918(High),CVE-2024-21829(High),CVE-2024-21781(High),CVE-2023-43753(Medium).
	 
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed the issue that memory page retire request from UEFI could not be consumed by VMware 7.0.3.
  
--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Added the support of Windows 2025. 
    - UEFI Update for WS2025 Certification - Whitley, etc.
  - Added support for DDR4 ADATA DIMMs.
  - Supported Microsoft AsHCI (Azure Stack HCI) activation of OEM SKU.
  - Supported “persistent” option for boot order through the IPMI command and “continuous” option through redfish interface.This feature also needs the related support at XCC side through version afbt50f-5.10.
   
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  None


==================================================
Version 3.20, Build ID AFE128F [Critical]
Release date:   [February / 2024]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* Prerequisite uEFI version: 1.41 (Build ID: AFE120H)
* Prerequisite XCC version: 3.80 (Build ID: AFBT38M)
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Addressed CVE-2023-22655, CVE-2023-23583, CVE-2023-22655, CVE-2023-35191.
  - Fixed IPv6 PXEBOOT EDK2 network vulnerabilities.
    - Addressed CVE-2023-45229, CVE-2023-45230, CVE-2023-45231, CVE-2023-45232, CVE-2023-45233, CVE-2023-45234, CVE-2023-45235, CVE-2023-45236, CVE-2023-45237.
	 
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed the issue that system would hang if committing setup configuration after changing HTTP boot option at “Boot Manager > Change Boot Order” page on LXPM.
  - Correct NVMe bay number display "System Settings > Storage > NVMe" in System Setup Utility.
  - Fixed the issue that M.2 SATA kit would not be displayed at "System Settings > Storage > NVME" in System Setup Utility when 7mm NVME installed.
  - Allowed "System Settings > Processors > Cores in CPU Package" chaning if  "System Settings > Processors > Intel Speed Select" set to "Base" in System Setup Utility.
  

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Update Intel SPS firmware(SPS_E5_04.04.04.603).  
  - Added Microsoft KEK 2K CA 2023 certificate for secure boot support.
  - Updated OpenSSL version to 3.1.0.
  - IPU 2024.1 update.
     - Updated MCU to XCC D0 Production: m_87_606a6_0d0003d1
  - Exposed "System Settings > Processors > Misc" in System Setup Utility and Processors. Misc to OneCLI.
  
  
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  None


==================================================
Version 3.10, Build ID AFE126I [Critical]
Release date:   [October / 2023]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* Prerequisite XCC version: 3.80 (Build ID: AFBT38M)
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Update MCU to m_87_606a6_0d0003b9  
     - Address CVE-2023-23583
	 
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed the issue that "System Settings > Devices and I/O Ports > Enable / Disable Adapter Option ROM Support > Network/Storage/Video/Other PCI Devices" loaded to "Legacy" by selecting “Load Default Settings" if "System Settings > Security > Secure Boot Configuration > Secure Boot Settings" is enabled in System Setup Utility.
  - Fixed the issue that options of "BMC Settings > Network Settings > Fail-Over Rule" still exist in System Setup Utility if "BMC Configuration > Network > Ethernet Configuration > Ethernet Port #" is disabled in BMC web page. 
  - Fixed the issue that boot priority of USB storage device was included in "Boot Manager > Set Boot Priority >  Hard Disk Priority" in System Setup Utility if its capacity was over 64GB.
  - Popped up message box while MMIOH out of resource occurs.
  - Skipped AMT (Advanced Memory Test) in next boot if AMT was interrupted by power off.
  - Poped up warning message if “Password expiration warning period” exceed the value specified for the “Password expiration period” at "User security > Password Rule and Policy" menu in System Setup Utility.
  - Fixed the issue that system hang if clicking "System Settings > Storage > NVME" in System Setup Utility if server has Intel P5500 NVMe SSD installed.
  - Fixed the issue that yellow bang would be displayed in Windows Device Manager for "Generic IPMI Compliant Device" if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page.
  - Fixed the issue that booting Windows OS slowly and virtualization device drive labeled with "LEPT" was visible under OS if disabling "BMC Configuration > Security > IPMI over KCS Access" at BMC web page.
  - Fixed the issue that cannot change setting for "Secure Boot Setting" and "Secure Boot Policy" at "System Settings > Security > Secure Boot Configuration" at the same time in System Setup Utility.
  - Used NVMe bay number in boot option instead of PCI slot for PCIe NVMe devices.
  - Fixed the issue that secure boot keys not loaded to default if "System Settings > Security > Secure Boot Configuration > Secure Boot Policy" set to "Factory Policy".

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Added the support for Intel Flex GPU.  
  - Suppress system event log FQXSFIO0010M reporting if error was caused by CPU or memory.
  
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  None


==================================================
Version 2.10, Build ID AFE124G [Critical]
Release date:   [July / 2023]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* Prerequisite XCC version: 3.80 (Build ID: AFBT38M)
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Integrated Intel BKC 2023.3 IPU
    -Updatd SPS to SPS_E5_04.04.04.500.0
    -Updated MCU to m_87_606a6_0d0003a5.mcb
    -Addressed CVE-2022-40982, CVE-2022-41804, CVE-2023-23908, CVE-2022-43505
	
  - Updated DBX MAY 2023 to address PSIRT issue LEN-127392.
Note:
User could take one of the two methods below to apply the default DBX, but it will reset all keys to default, so customer need re-add their customer keys after the operation.
1. Go to setup menu, Security > Secure Boot Configuration > Secure Boot Policy, select "Reset All Keys to Default", then save and exit setup.
2. Use the OneCLI command below to update the new DBX     
	 OneCli.exe config set SecureBootConfiguration.SecureBootPolicy ¡§Reset All Keys to Default¡¨ --imm <USERID>:<PASSW0RD>@<IP>
	 
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed the issue that XCC web can not show the detailed inventory information for generic onboard SATA drive.
  - Added OS WHEA event log while memory UE occurred.
  - Fixed some setting are not synced with operating mode after system reboot if changing OperatingModes.ChooseOperatingMode by OneCLI.
  - Fixed wrong behavior of setup menu "Initiator IP Address", "Initiator Subnet Mask" and "Gateway" at page "System Settings > Network > iSCSI Settings > Host iSCSI Configuration > Attemp #" in System Setup Utility.
  - Fixed the issue that setup items in "BMC Settings" are loaded to default by selecting ¡§Load Default Settings" in system setup utility.
  - Supported over 20 boot devices in "Boot manager > Change Boot Order".
  - Supported domain name as the input of OneCLI iSCSI.TargetIp.
  - Fix issue that system hang when selecting "Discard Settings" after "System Settings > Network > iSCSI Settings > Host iSCSI Configuration > Attemp # > Target Address" is input as domain name in System Setup Utility.
  - Fixed the issue that SGX PRMRR size can not be configed as 512GB when MMIO base is 3GB.
  - Fixed the issue that system hang when selecting "Discard Settings" after "System Settings > Network > iSCSI Settings > Host iSCSI Configuration > Attemp # > Target Address" is input as domain name in System Setup Utility.
  - Cleaned up the invalid address input in  "System Settings > Network > Network Boot Settings > IPv6 Configuration List > Click any configuration > Enter Configuration Menu > Change Policy to manual > Advanced Configuration".
  - Fixed wrong behavior of setup menu "Initiator IP Address", "Initiator Subnet Mask" and "Gateway" at page "System Settings > Network > iSCSI Settings > Host iSCSI Configuration > Attemp #" in System Setup Utility.
  - Fixed the issue that AMT (Advanced Memory Test) fails to be triggerred by OneCLI or LXPM if "System Settings > Memory > Memory Test" is configured as "Disabled"
  - Do not highlight "F1:System Setup" in POST screen if Shift + F1 are pressed.
  - Fixed the issue that changing BootOrder.HardDiskBootOrder failed by OneCLI when "Boot manager > Boot Modes > Prevent OS Change To Boot Order" is enabled.
  - Fixed the issue that Linux efibootmgr cannot show "BootCurrent" after setting IPMI next one time boot.
  - Fixed the bug that after changing a setup item at  "BMC Settings > Network Settings > Advanced Settings for BMC Ethernet", then an error message box would be popped up always when "BMC Settings > Network Settings > Save Network Settings" in Sytem Setup Utility.
  - Fixed the issue that Manufacturer is empty for Intel SATA drives in "System Settings > Storage > SATA Drives > SATA Drive Information" in System Setup Utility.
  - Fixed the issue that SMBIOS Type 1 "Family" field cannot be updated if changing SYSTEM_PROD_DATA.SysInfoFamily by OneCLI.

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Added a new function that uEFI will report OS boot status to XCC when system is staying in power on password and privileged admin password input message box.
  - Fixed PCIe Link Width Degrade with Diamanti Network Accelerator.
  - Fixed PCIe Link Width Degrade with AEC-PCIe-45 produced by Adrienne Electronics.
  - Added a new system event log (FQXSFMA0076M: DIMM [arg1] is not supported, DIMM identifier is [arg2]) for unsupported DIMM error reporting.
  - Automatically enlarged the maximum for MMIOH size to support more GPU devices.
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.51, Build ID AFE122I [Critical]
Release date:   [Mar. / 2023]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* Prerequisite XCC version: 2.90 (Build ID: AFBT30M)
  To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Updated OpenSSL to 1.1.1t. Addressed CVE-2023-0286, CVE-2022-4304, CVE-2023-0215, CVE-2022-4450
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed "System Settings > Network > iSCSI Settings > Host iSCSI Configuration > Attempt # > Target Address" to support domain name input
  
--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Updated MCU to IceLake CPU XCC D0 Production MCU  m_87_606a6_0d000390.mcb
 
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.50, Build ID AFE122G [Suggested]
Release date:   [Feb. / 2023]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Addressd CVE-2022-21216, CVE-2022-33196, CVE-2022-38090, CVE-2022-33972, CVE-2022-32231, CVE-2021-0187, CVE-2022-26837, CVE-2022-36348
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed the issue that disabling "System Settings > Devices and IO Ports > Enable / Disable Onboard Device(s) > Onboard Video" in System Setup Utility and DevicesandIOPorts.Device_OnboardVideo for OneCLI does not work. Tip: HT514683
  - Fixed the blue screen issue if Win2022 is used and "System Settings > Devices and I/O Ports > Onboard SATA Mode" or DevicesandIOPorts.OnboardSATAMode is selected as "RAID".
  - Fixed the issue that "BMC Settings > Network Settings > Fail-Over Rule" is not synced with IMM.FailoverMode.
  - Fixed the issue that the USB device is not bootable in legacy boot mode.
  - Fixed the issue that after system reset, "BMC Settings > Network Settings > Network Interface Port" is changed to default value "Dedicated" automatically when "BMC Settings > Network Settings > Share NIC on" is changed and saved. 
  - Show "Data rate" and "Duplex" setup menus only when "BMC Settings > Network Settings > Network Interface Port > Advanced Setting for BMC Ethernet > Autonegotiation" is "No".
  - Fixed the issue that FQXSFMA0009K is reported while "System Settings > Memory > Mirror Mode" is selected as "Partial".
  - Disable failed DIMM with runtime uncorrectable error even when AC cycle.
  - Fixed the issue that existing HTTP boot option would be gone in "Start Options" when creating a new HTTP boot options "System Settings > Network > HTTP Boot Configuration > MAC: XXXXXXXXXX- HTTP Boot Configuration".
  - Modified the options to be 1-based numbering for "BMC Settings > Network Settings > Fail-Over Rule" and "BMC Settings > Network Settings > Share NIC on" to match with XCC web UI when OCP adapters are installed.
  - Adjusted to report SEL FQXSFPU0027N for processor fatal error and FQXSFPU0062F for processor recoverable error.

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Added SMBIOS Type 39 to provide PSU info.
  - Enable AMT (Advanced Memory Test) for Brazil SMART DIMMs Modular
  - Added "LLC Prefetcher" and "L2 RFO Prefetcher" setup menus in "System Setting > Processors" System Setup page.
  - Added Processors.LLCPrefetcher and Processors.L2RFOPrefetcher in OneCLI.
  - Support DIMM SPD info in dmidecode -t 17 output screen.
  - IPU 2023.1 update
    - Updated SPS to SPS_E5_04.04.04.301.0
    - Updated MCU to m_87_606a6_0d000389
  - Supported MPFA (Memory Predictive Failure Analysis) feature.
    - Implementation of enhanced memory event logging
  - Enhanced FQXSFMA0008M to show DIMM slot number while uncorrectable error happened on Intel PMEM.
  - Change the string to "System Settings > Network > Network Devices List" from "System Settings > Network > Network Devices" in the Setup menu.
  - Pop up an error message box for "System Settings > Network > iSCSI > Target IP Address" if wrong IP address is set.
  - Updated the help text of "System Settings > Processors > IntelSpeedSelect".
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461


==================================================
Version 1.41, Build ID AFE120H [Critical]
Release date:   [Oct / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Addressed CVE-2021-33164, CVE-2022-33176, CVE-2022-37345, CVE-2022-21794, CVE-2022-34152, CVE-2022-32569, CVE-2022-36789, 
    CVE-2022-35276, CVE-2022-26124, CVE-2022-36370, CVE-2022-37334, CVE-2022-36349 and CVE-2022-38099
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  None
--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Updated MCU to M87606A6_0D00037B  
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461


==================================================
Version 1.40, Build ID AFE120G [Suggested]
Release date:   [Sep / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
To ensure that you are installing compatible versions of firmware, suggest to update firmware via latest UXSP

* Note: The bios version can be downgraded to 1.01 (Build ID: AFE110P) at a minimum
--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Addressed CVE-2022-34302, CVE-2022-34303 and CVE-2022-34301
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed the issue that some NVMe drives are displayed under both of  "System Settings > Storage" and "System Settings > Storage > NVMe" page.
  - Fixed iSCSI over IPV6 issue with Broadcom 57454 10/25GbE SFP28 4-port PCIe Ethernet Adapter - Tip# HT512999
  - Only report FQXSFMA0001M once instead of each time when system warm reboot.
  - Fixed the issue that user cannot see M.2 drive through XCC redfish.
  - Fixed long time to  "Load Default Settings" in System Setup if the Broadcom adpaters listed are installed. 
    - ThinkSystem Broadcom 57416 10GBASE-T 2-port + 5720 1GbE 2-port OCP Ethernet Adapter
    - ThinkSystem Broadcom 57416 10GBASE-T 2-port PCIe Ethernet Adapter
    - ThinkSystem Broadcom 57416 10GBASE-T 2-port OCP Ethernet Adapter
    - ThinkSystem Broadcom 57454 10GBASE-T 4-port PCIe Ethernet Adapter
    - ThinkSystem Broadcom 57454 10GBASE-T 4-port OCP Ethernet Adapter
    - ThinkSystem Broadcom 57414 10/25GbE SFP28 2-port PCIe Ethernet AdapterV2
    - ThinkSystem Broadcom 57414 10/25GbE SFP28 2-port OCP Ethernet Adapter
    - ThinkSystem Broadcom 57454 10/25GbE SFP28 4-port PCIe Ethernet Adapter
    - ThinkSystem Broadcom 57454 10/25GbE SFP28 4-port OCP Ethernet Adapter
    - ThinkSystem Broadcom 57508 100GbE QSFP56 2-port PCIe 4 Ethernet AdapterV2
--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Report FQXSFDD0012K(assert) and FQXSFDD0012I(de-assert) for SATA drive error during POST time.
  - Support XCC to configure array on adapters:
    - ThinkSystem RAID 5350-8i PCIe 12Gb Adapter
    - ThinkSystem RAID 9350-8i 2GB Flash PCIe 12Gb Adapter
    - ThinkSystem RAID 9350-8i 2GB Flash PCIe 12Gb Internal Adapter
    - ThinkSystem RAID 9350-16i 4GB Flash PCIe 12Gb Adapter
    - ThinkSystem RAID 9350-16i 4GB Flash PCIe 12Gb Internal Adapter 
  - Enabled the capbility to cancel Intel AMT by DC cycle.
  - Added "Mirror Configuration" Setup item in "System Settings > Memory > Mirror Configuration" to 
    allow partial mirror percentage to be adjusted for both of System Setup and OneCLI.   
  - Update Intel VROC SATA(RSTe) and VROC NVMe(VMD) uEFI drivers to 7.8.0.1012
  - Support Intel AMT configuration through XCC Redfish Interface
  - Exposed setup item for System Setup Utility System settings > Devices and I/O Ports > Override Slot Bifurcation
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461



==================================================
Version 1.33, Build ID AFE118P [Suggested]
Release date:   [Sep / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  None
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Skip to report FQXSFIO0022J of PCIe link width downgrade for Nvidia A2 GPU - Tip HT513599

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  None
 
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461


==================================================
Version 1.32, Build ID AFE118M [Critical]
Release date:   [July / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Address CVE-2022-21233, CVE-2021-33060
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  None
   

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Enhance generic NVMe drives information display in the F1 Setup “System settings > Storage?page 
  - Update MCU to m_87_606a6_0d000375
  - Update Whitley BKC to PLR3
  - Update SPS version to 04.04.04.202.0
  - Update ACM to BIOS ACM v1.1.0 SINIT ACM v1.1.0
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461


==================================================
Version 1.31, Build ID AFE118K [Critical]
Release date:   [Jun / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Address CVE-2022-21166
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  None
   

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Update MCU to m_87_606a6_0d000363 
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461
  

==================================================
Version 1.30, Build ID AFE118I [Suggested]
Release date:   [May / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Addressed PSIRT issue LEN-71534 
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Added System Settings > Processors > PRMRR Size in System Setup and onecli related command for SGX feature.
  - Populate UUID into SMBIOS before Option ROM execution for SAN boot and DHCP IPv6.
  - Fix memery init phase hang issue when ASPM is enabled.
   

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Set SLOT_POWER_LIMIT with non-zero value.
  - Change the SEL severity from “Warning?to "Informational" for the DIMM which is 
    disabled due to the error detected on the companion DIMM in the same channel.
  - Integrated Intel Whitley-ICX Platform CRB BIOS PLR1 with MRC 27.P52 version.
  - Update SPS version to 04.04.04.62.0
  
--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461



==================================================
Version 1.22, Build ID AFE116P [Critical]
Release date:   [April / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  None 
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed : To address a false dimm temperature reporting error


--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.21, Build ID AFE116K [Critical]
Release date:   [Mar / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  None 
  
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed CPU Uncorrectable recoverable error reporting.
  - Fixed slot4 cannot be detected when retimer card is present in slot1.

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  - Added option to prevent OS boot loader changes the UEFI boot order after OS installation or booting.
  - Report system event log (FQXSFDD0012K, FQXSFDD0012I) for AHCI hardware issue during post time.
  - Display generic adapter into Lenovo System Setup Utility as foreign device.
  - Exposed SRIOV setup item in System Setup Utility and OneCLI.
  - Report runtime processor type UE (e.g. CHA, UPI, etc.) to XCC.
  - Corrected the onboard SATA disk drive location on XCC inventory web page when onboard SATA controller works at RAID mode.
  - Report PCIe link width and speed downgrade in system event log FQXSFIO0022J and FQXSFIO0023J.
  - Add new setup option to allowed user to select whether exposed unused PCIe slots to the OS.
  - Changed the PCIe link width / speed degrade system event log from error level to warning level
  - Improve Memory page retire algorithm.
  - Support TPM 2.0 version 7.2.2.0 firmware toggling on Nuvoton 750.
  - Integrated Intel Whitley MR7 release with MRC 21.P41 version

--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.12, Build ID AFE114O [Suggested]
Release date:   [Jan / 2022]
==================================================

--------------------------------------------------------------------------
1.0 Overview
--------------------------------------------------------------------------
Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

--------------------------------------------------------------------------
2.0 Prerequisites and dependencies
--------------------------------------------------------------------------
* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

--------------------------------------------------------------------------
3.0 Security Fixes
--------------------------------------------------------------------------
  - Update IceLake CPU D2.M1 Production MCU m_87_606a6_0d000331.mcb
    - Address  CVE-2021-0145
--------------------------------------------------------------------------
4.0 Other Fixes
--------------------------------------------------------------------------
  - Fixed occasionally memory uncorrectable error when install 16 BPS DIMMs and 16 DDR4

--------------------------------------------------------------------------
5.0 Enhancements
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
6.0 Other Changes
--------------------------------------------------------------------------
  None

--------------------------------------------------------------------------
7.0 Limitations
--------------------------------------------------------------------------
  - The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.11, Build ID AFE114G [Critical]
Release date:   [Nov / 2021]
==================================================

1.0 Overview

Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

2.0 Prerequisites and dependencies
	* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

3.0 Fixes
 
  FIX. SMI Timeout Error caused by a memory RAS recovery corner case
  FIX. PCIE link width/speed degraded issue

  
4.0 Enhancements
  Changed some configure setting for the "Maximum Performance" mode of the setup item "System Settings -> Operating Modes" and retain those settings for the transition from Maximum Performance mode to Custom mode
  Microcode update : update from m_87_606a6_8d000270 to m_87_606a6_0d0002a0 for ICX XCC SKU, and have m_87_606a4_0b000280 for ICX HCC SKU.
  
5.0 Limitations
  The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.10, Build ID AFE114D [Suggested]
Release date:   [Nov / 2021]
==================================================

1.0 Overview

Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

2.0 Prerequisites and dependencies
	* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

3.0 Fixes
  Fix. Added an Out-of-Band setting to enable dynamic SST-PP.
  Fix. System boot fail issue if two Liqid Element LQD4500 cards with NVMe drives are installed
  Fix. System would get exception when the CPU SMBus is accessed by different components simultaneously by adding an Out-of-Band setting
  
4.0 Enhancements
  Add Windows Server 2022 Secured Core & System Guard Support.
  Add support to gather industry NVMe driver information (U.2/U.3, M.2 and 7mm) without Lenovo customized FW implemented.
  Microcode update : update from m_87_606a6_0d0002a0 to m_87_606a6_0d0002e0 for ICX XCC SKU.
  
5.0 Limitations
  The user would not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461
  
==================================================
Version 1.03, Build ID AFE112B [Critical]
Release date:   [Sep / 2021]
==================================================

1.0 Overview

Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

2.0 Prerequisites and dependencies
	* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

3.0 Fixes
 
  Address CVE-2020-10255 - Rowhammer - DDR4 protection bypass (TRRespass)
  Address CVE-2020-10713 - Update DBX to latest one at https://uefi.org/revocationlistfile

  
4.0 Enhancements
  NA
  
5.0 Limitations
  The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.02, Build ID AFE112A [Suggested]
Release date:   [July / 2021]
==================================================

1.0 Overview

Support Systems: 
  Lenovo ThinkSystem SR630 V2 Server, Machine Types 7Z70,7Z71
  Lenovo ThinkSystem SR650 V2 Server, Machine Types 7Z72,7Z73

  Supported configurations can be found on the Lenovo Operating System 
  Interoperability Guide at the following website: 
  https://lenovopress.com/osig 

2.0 Prerequisites and dependencies
	* You must be at a minimum UEFI, Version 1.01 (Build ID: AFE110P) to 
  upgrade to this release to ensure that you are installing compatible versions of firmware,
  Suggest to update firmware via latest UXSP.

3.0 Fixes
 
  FIX. Added an OOB option to enable MEMBAR shadowing for VMD direct assign.
  FIX. Added and enabled a set of ACS settings to fix a Windows VM BSOD issue.

  
4.0 Enhancements
  Changed some configure setting for the "Maximum Performance" mode of the setup item "System Settings -> Operating Modes" and retain those settings for the transition from Maximum Performance mode to Custom mode
  Microcode update : update from m_87_606a6_8d000270 to m_87_606a6_0d0002a0 for ICX XCC SKU, and have m_87_606a4_0b000280 for ICX HCC SKU.
  
5.0 Limitations
  The user will not be able to hot-add P5800X drive under VMWare. Please refer to follow tip for more detail.
  https://datacentersupport.lenovo.com/solutions/HT512461

==================================================
Version 1.01, Build ID AFE110P [Initial Release]
Release date:   [May / 2021]
==================================================

This is the initial release of UEFI.

==================================================
Related Information
==================================================

Lenovo Data Center forums
https://forums.lenovo.com/t5/Datacenter-Systems/ct-p/sv_eg

Lenovo Data Center Support
http://datacentersupport.lenovo.com

Lenovo ThinkSystem Rack Server Customer Documentation
http://thinksystem.lenovofiles.com/help/topic/rack_servers/overview_rack_servers.html

XClarity Controller Customer Documentation
http://sysmgt.lenovofiles.com/help/topic/com.lenovo.thinksystem.xcc.doc/product_page.html

Lenovo Product Security Advisories
https://datacentersupport.lenovo.com/us/en/product_security/home