## SPARC T7-1 Sun System Firmware 9.10.2

Product: | SPARC T7-1 Sun System Firmware 9.10.2
Release Version: | 9.10.2
Date: | 2021-06-08

### Table of Contents:

- Release Summary

- Why Should You Install System Firmware 9.10.2?

- Release Profile

- Reference Information

- Bug Manifest

- Special Release Notes

  - Note 1: Installing this release as a live firmware update.

  - Example 1: The host is powered on and System Firmware 9.10.1 is running. Both ILOM and the Hypervisor will be live-updated.
  - Example 2: The host is powered on and a version of System Firmware other than 9.10.1 is running. Only ILOM will be live-updated.

  - Note 2: FMA defects and alerts now proxied to ILOM (since 9.10.1).

  - Note 3: ILOM CLI timeout (since 9.10.0).

  - Note 4: New downgrade restrictions (since 9.10.0).

  - Note 5: New ILOM password and account policies

  - Note 6: Bug 31650254 - a reset /SP may be needed when using fwupdate to update firmware (Since 9.10.0).

  - Note 7: PCIe root port FMA alerts after upgrading from Sun System Firmware older than 9.8.5 (Since 9.8.5)

  - Note 8. Instructions for firmware upgrade from Sun System Firmware older than 9.5.2.g

### Release Summary

This release applies to SPARC T7-1 Systems. This release is called a micro-version, used as a maintenance refresh of the existing minor-version level (e.g. 9.10). A micro-release (in which the third field of the version increments, such as from 9.10.1.c to 9.10.2 as in this release) does not involve new general features, but includes bug fixes and critical security improvements.

### Why Should You Install System Firmware 9.10.2?

You are strongly recommended to update to the latest firmware release in your next maintenance window to ensure optimal system reliability, availability, security and performance.

Noteworthy changes in System Firmware 9.10.2 (since 9.10.1.c) include:

- Hypervisor:

- Fix an issue where SFF NVMe drives could stop working after upgrading from System Firmware 9.7.6.b or earlier (32505437).
- Address a Solaris panic that can occur during dynamic reconfiguration of memory (32674160).
- Improve diagnosability of out-of-bounds address accesses (31561348).

See the Bug Manifest section for a complete list of fixes. For more information on the security content of this release contact Oracle support.

The table below shows the distribution of bug ID's fixed in the SPARC T7-1 System Firmware 9.10.2 release across the five gates:

Gate | 9.10.2 Bug Count
ILOM | 39
Nyx | 4
Hypervisor | 9
OpenBoot | -
POST | 1
FWP | -

### Release Profile

    Sun System Firmware
    Version:  9.10.2
    Location: Firmware/Sun_System_Firmware
    Keywords: FIRMWARE: SPARC T7-1 - 9.10.2 firmware_metadata
    Synopsis: FIRMWARE: SPARC T7-1 - Sun System Firmware 9.10.2
    Files included:
        Sun_System_Firmware-9_10_2-SPARC_T7-1.pkg
        Install.info
        metadata.xml
        powercycle_metadata.xml

    Version:
    Sun System Firmware 9.10.2 2021/05/20 08:58
    --------------------------------------------
    ILOM 5.0.2.1 Thu May 20 10:02:21 PDT 2021
    Hostconfig 1.11.6 2021/05/20 07:23
    POST 5.8.6 2021/05/20 07:16
    FWP 1.6.6 2021/05/20 07:01
    Hypervisor 1.20.5.b 2021/05/20 07:08
    OpenBoot 4.43.6 2021/05/20 07:05
    GM 1.11.6 2021/05/20 07:42

    Checksum of Sun_System_Firmware-9_10_2-SPARC_T7-1.pkg : 2430442429
    (generated by the /usr/bin/cksum command)

    sha512 sum of Sun_System_Firmware-9_10_2-SPARC_T7-1.pkg : 8c538a597c46a9bc61b4314bda9862306de0e303afb4b5f2aadd8e4b3d77bb4e24d25551851249a7f4aa1bb2562b7ef95618124e4bce2fe38f11547be6c2b155
    (generated by the /usr/bin/sha512sum command)

### Reference Information

Please refer to the online documentation for information relevant to this platform:

OTN Firmware Release Hub | http://www.oracle.com/technetwork/systems/patches/firmware/index.html
OVM SPARC | http://www.oracle.com/technetwork/documentation/vm-sparc-194287.html
Oracle ILOM | http://www.oracle.com/technetwork/documentation/sys-mgmt-networking-190072.html
SPARC T7-1 Systems | http://www.oracle.com/goto/t7-1/docs
Open Source Link | http://www.oracle.com/goto/opensourcecode Please visit here to download the firmware's open source components that are required to be made available under open source licenses.

### Bug Manifest

     (Current Release:  Patch ID = 32951267.  Sun System Firmware 9.10.2  Total BugIDs = 53)

       32935640 MCTP for CX5 with subdevice-id = 0x0063 not working
       32907759 SP-Trace: provide filtering capability
       32904113 Reduce the time it takes for SDA recovery on PILOT
       32838155 Backport 32838155 to 1.20.5 Need to capture debug better on watchdog traps on debug firmware
       32794630 Improve SP trace for POD watchdog patting events
       32697062 fmstat: display currently open hysteresis timers
       32697043 etcd -u should flag invalid input
       32680589 Disable crypto engines in all reset paths to avoid stoneware hang
       32674160 Backport to 32674160 1.20.5 - Panic from invalid pagesize after memory DR (blacklisting)
       32655933 A power-on-failed alert is sometimes seen when power cycling
       32645080 Backport 32645080 to 1.20.5 - Add lp_check as a useful top level target
       32625647 Backport 32625647 to 1.20.5 - root dev pointer is 0'd inappropriately
       32619812 Request to move access to image override to service mode.
       32610287 GM should no longer link with libfeatures
       32604099 Fix errors found by GCC 10.2.0
       32603236 Backport 32603236 to 1.20.5 - Live patch checkers don't check the BSS for symbol
       32572817 IPv6 does not work for remote host storage NFS URI
       32553120 Proto dependency introduced in ILOM 5.0.2 breaks GM build
       32550785 Backport 32550785 to 1.20.5 - cpu devq reset is not protected by the devq lock
       32534548 SP FS IS FULL AND CELL IS NOT BACK AFTER IMAGE UPGRADE
       32505437 Backport 32505437 to 1.20.5 - SFF NVME drives report fatal errors after upgrade
       32441831 Deadlock when processing COU retirements
       32436316 Stopping systemd-journald incorrectly activates ilom_umount service
       32385998 Aura 9 SFF fail post in some systems
       32379524 IPMI restart fails due to socket bind failure
       32372784 Add timing data for more DRAM types
       32340949 Passwords are displayed as clear text in LUAPI sp_trace messages
       32321890 Serviceable faults should replace their nonserviceable counterparts
       32321796 Entries in multi-fault suspect lists should not be suppressed by existing faults
       32309716 The host power lock is not cleared if SP state transition fails to get back to IDLE
       32304072 hwdiag, remove loop report after pci utility commands
       32301110 Inappropriate sp_trace logging in libasr
       32219247 Backport 32219247 to 1.20.5 - ILOM loses HOST status after race in hypervisor up
       32138561 Include distro slabtop command in ILOM image
       32076126 Output from 'um -l' is missing from snapshot.
       32075401 Disabled account lockout by default on OCI systems
       32074098 Add Aura9 SFF support to SPARC platforms
       32033315 ilom hang/offline in new FW 5.0.1.21
       32008818 Create new ILOM mode(service/escalation) keys for 5.0.2
       31989666 Intermittent failures when running ipmi commands on the host
       31980528 busybox applet missing in 5.0.2
       31943984 Problem with Platform Infrastructure
       31943953 Problem with Platform Infrastructure
       31902588 restapi swagger missing /SP/services/bbr target and properties
       31827040 Ethernet over USB interface is not getting initialized by the HOST due to ipmi/ssif
       31793708 Update SMTP to libesmtp-1.0.6-7 or latest
       31793701 Update libnss-ldap to v 265-5 or latest
       31793660 Update busybox to 1.31.1 or latest release
       31561348 Backport 31561348 to 1.20.5 - Fatal error due to generic-sparc.addr-oob error
       31447119 Device Monitor: Add support for CX-5 OCP,CX-5 2x100G OCP, CX-6 Dx, and CX-6 Dx 50G, and CX-6 Dx 50G Bifurcated cards
       31365759 [ILOM]"hwdiag pci info" does not show Aura8 SFF Subsystem Vendor ID, Subsystem Device ID, Part Number and Description
       30250838 IPMI: reading FRU record behind the FRU record size
       29036968 Update timezone data to latest (2020b)

     (Previous Release:  Patch ID = 32670931.  Sun System Firmware 9.10.1.c  Total BugIDs = 1)

       32449351 Problem with SYS-MGMT

     (Previous Release:  Patch ID = 32407832.  Sun System Firmware 9.10.1.a  Total BugIDs = 70)

       32228739 fpga_event_logger misinterpreting debug_next_psu1_pwr_r" as a POST code
       32208759 Remove de-duplication behavior of pstore Warm/Cold_Boot_Elapsed_Time sensors
       32183092 SPARC - rundiag power supply test error
       32182811 Support for multiple tcp connections on SSH-DCA port (avoid conflict with security scanners)
       32153767 HMND: script timeout causes continual restart with bad URI
       32118902 Error message "Value must be 3 or 4, 0 not supported" seen when booting to ILOM
       32109068 Add new FMA payload information in SP/ILOM UI and ASR
       32103433 Restarting Mediator or LAN Daemon SIGPIPE can lock up pilot crypto semaphore
       32081339 NTP: Unable to read /etc/services file
       32076144 Event validation failures seen for old FMA repair events
       32074174 Log Manager: Handle "holes" in ID-space
       32064787 /etc/init.d/fpga_event_logger not fully handling debug event log
       32059898 Enable live patching in Hypervisor 1.20.5
       31996874 Secure Boot Event and Boot Time Logging
       31986766 UCNA poller is logging all accesses to IMC_SHADOW banks with no valid error
       31979975 Add DIMM power on data to hwdiag mem spd
       31979411 faultdiags log mutexes need call to pthread_mutexattr_setrobust()
       31956049 pmon.c misses updates in watch directory
       31933420 /SYS/DBP/HDDx is not faulted after ereport injection on the NVMe device
       31896035 fdd restart + faultmgmt shell = fmdump broken
       31833490 Add semaphore information to systools and snapshot
       31832637 SP Trace: live view to add current time
       31832582 Memory leak when pending retirements complete
       31818388 HV patching list cleanup is incorrect
       31812421 Hardening: Always create the 'log' group
       31812269 make libubenv Multi-Thread functional
       31806426 New crashdump shouldn't overwrite the last one
       31805139 SERD engine shows "FIRED" value after its counter restarts
       31798861 Add page retirement CLI for PA ranges
       31792974 Updating Aura9 Descriptions and adding Samsung v2
       31786470 Enhance P3 watchDog mechanism to use pretrigger, as per latest SDK 06/30/2016
       31782269 Reverting memtest policy to pre-29455622
       31780433 Add Get_Log to mctptest
       31769932 i2ctool doesn't detect i2c devices on bus 13
       31769774 libhostdata: need to initialize "origin" member of struct mc_msr_bank_err_list_s
       31745392 Memstore: timeout the attempt to grab the semaphore
       31722441 No fault is reported for sensor upper_nonrecov_threshold crossings
       31717081 Bootcount is missing when IPMI is excluded from build.
       31682555 When host is on and booted to OS a reboot of SP show host state as "The host is ON(in Reset)"
       31667098 Change for 31634899 omitted required PALLADIUM guards
       31658119 MCTP: add namespace support to identify request
       31649494 Provide UI to enable and disable BBR
       31649399 pod dumps core if suspect list has more than 32 faults
       31634899 OBP does not issue warning when a single DIMM is disabled and DIMM sparing is disabled
       31627746 /SP/audit/log shows "/SP/serial/loggedin" error when login from serial console
       31622088 Need capability in SP to subscribe to defects and alerts
       31590137 Errors running showpsnc/setpsnc from service mode
       31589493 fdd should flag instanced paths for ereports and ireports
       31560795 Only most recent event shown in SP event log
       31559317 host OS cannot power on if all power supplies have alerts
       31554920 MCTP: add support to write VPD
       31548973 Update auto-generated files frudefs.h and deinfo.xml
       31547626 provide ability to disable BBRD completely
       31537515 logmgr ID wrap-around issus causes LJ to stop procesing audit logs after log rotation
       31530068 detect multiple msgids for the same fault in a platform's FMA dictionaries
       31512835 FRUID: enable caching for DIMMs with DIMM-Manager
       31494841 REST Firmware Update: remove working file after completion
       31486159 Add err_version field to MCU SERs
       31462027 Increase ILOM Host Watchdog timeout to 60 minutes
       31440757 OBP does not report "One or more resources have been disabled" when an SCC is disabled
       31374850 When /System/Networking is invalid, REST and CLI do not return invalid target for targets under it
       31366741 fmadm coredumps after large number of faults against a FRU
       31319025 Fan algorithm not working for critical & non-recoverable temperature thresholds
       31245828 Requesting to remove the -v option in the help statement for hwdiag cpu in the Diagshell.
       31131952 Longevity scan: Lumain VmRSS continuous increase
       31118562 Update to v5.0 lost ILOM DHCP configuration
       27593483 Hot replacement of SP fails to turn 'Ready to Remove' led to Blue
       27261003 ILOM "fdd" needs to improve diagnosis as to why quorum can't be establshed
       25712722 Overlapping page retirement requests not finishing correctly
       23346538 HV changes for fast reboot

     (Previous Release:  Patch ID = 31705989.  Sun System Firmware 9.10.0.a  Total BugIDs = 78)

       31486159 Backport 31486159 to 5.8.4 - Add err_version field to MCU SERs
       31486151 Backport 31486151 to 1.20.4 - Add err_version field to MCU SERs
       31486136 Backport 31486136 to 1.11.4: Add ce-version payload to MED  MCE ereports
       31440160 Add CX-6 Dx 50G iLOM support
       31404646 Add CX-6 Dx 2x100G iLOM support
       31388207 After reset /System, mctp_drive failed on Aura8 SFF
       31388020 Add CX-5 2x100G OCP NIC support to iLOM
       31386714 workaround for systemd-journal coredump
       31374606 The consolidated root CA bundle file should be created when ILOM is upgraded
       31354123 Snapshot - include dhclient config files
       31353446 tlip updates the RFID SN and it's off by one byte
       31344230 mm->mmap_sem acquisition latency AKA: "ps hang"..
       31328786 Apply /HOST/diag/error_level after RED state error
       31294752 Host Control page not working for non-Admin user.
       31268451 Restricted Shell: allow access to historic trace dumps
       31248493 'ps' hang seen in ILOM 4.0 and 5.0 in the OCI fleet causing ILOM+ updates to stop
       31233321 add 'set' subcommand to capipcitest
       31233296 Make sp_trace a common driver for pilot3/4 and Aspeed
       31225789 Device Monitor: Add support for Intel prototype Aura9
       31218973 Failed to access Aura9 SSDs via MCTP/SMBus on E2-2C
       31214523 Firmware should emit warnings/faults when a system is booted with a bad RTC value
       31196816 Allow Service/Escalation mode access when the SP is in degraded mode
       31192907 ROPNL fruwrite failure is not diagnosed to a fault.
       31190919 add aura9/7 aic to i2c test
       31181415 Enable live patching in Hypervisor 1.20.4
       31181349 Device Monitor: Add support for Intel/Samsung Aura9
       31171558 Device Monitor MCTP: delay probe until the HOST is powered on
       31156924 JRC+ About Information Displays Outdated Version Information
       31144725 Dimm scrub interval is set incorrectly due to bad match on dimm speed
       31123504 hw version command in snapshot will frequently timeout
       31106020 /dev/shm filled with empty temp files. no inodes available
       31091586 FRUID: Update auto-generated FRUID files frudefs.h and deinfo.xml
       31085499 spifpga_read failed messages on /var/log/messages during FPGA update
       31085171 Platforms should decide which buses to load MCTP/SMBus driver
       31080820 Check i2c address conflict if mctp_smb_feature enabled
       31076712 SPSH command "cd .." from "/" returns "Invalid target /HOST"
       31061807 Setassettag should not emit error messages for missing shadow containers.
       31056807 Unexpected ireport.chassis.sp.logs-ok when /var/log is full
       31047575 Warn for timeout during PSC measurement
       31047564 Make PSC debug messages controllable via configvar
       31047553 Ereport should be generated when Pstate0 voltage is > 1200mV
       31045830 Support up to 3 'sunoem cli' sessions to ED to switch to deferred image
       31031503 setassettag fails to update Primary container when shadow container is absent
       31025902 Add strace to ILOM image.
       30992458 Server certs missing clear action in show of target (clear action
       30969607 Allow larger certificate bundles to be uploaded
       30951204 Web - Javascript error on Password Policy page with A or U role.
       30910616 Some component types from ILOM cli are not correct
       30910583 /SYS/SP/NET0 is missing fru_* properties
       30898834 ILOM change request to support Aura9 SFF from Intel/Samsung and AIC from Intel
       30885420 Trying to get /content when it is load only should return 405 not 404
       30878084 UBIFS error (pid: 100 / 102): cannot open "ubi0:params" / "ubi0:firmware", error -19
       30853331 KVM redirection client fails to validate custom certificate
       30815705 Accessibility OAG structure and table errors
       30814677 POD crashes trying to read/compare/write DIMM SPD data.
       30804732 sshfs redirection fails when symlink is used
       30794384 Inaccurate hostfw_status after live update if FW image changes but HV does not
       30794185 GM hostinfo structure must be protected by a lock
       30793129 libfru DDR4 (SPD_128RW_FORMAT) CRC protection is ineffective
       30788342 DIMM sparing strand selection selects the same strands too often
       30773375 sttwa with BIS to non-cacheable space produces a reserved kernel trap
       30766834 ILOM is not identifying the part number and description of the Cx5 card
       30763981 Update auto-generated files frudefs.h and deinfo.xml
       30756590 REST: Add support for "collection" resources
       30738307 DDR4 (SPD_RW128_FORMAT) SPD_Fault_DataR record is being re-initialized on every SP reboot.
       30734005 Fix errors found by GCC 9.2.0
       30733783 DDB file open status should be checked after file creation
       30714551 fmdump: unexpected line in event record, missing newlines in ireports/ereports
       30628569 SP need to be reset in order to get the serial baud rate setting to take effect
       30080229 Update LibVNCServer to 0.9.12-1
       29817087 MINIHELP: Minor typos in Maintenance - Firmware Update
       29674650 Buffer overrun in luapifed
       29597320 Remove state_capture dependencies on perl
       29592626 kernel log trace is not added to linux-4.14.35
       29522151 include gputest in builds with bringup-features
       29457542 MINIHELP: Add description of "mode" to the Device Monitor help
       29332436 sp_la changes TOD at SP boot, causes "WARNING: Time of Day clock error" in Solaris
       29168116 MINIHELP: Add help for new feature 'auto baud' for serial/host management.

### Special Release Notes

### Note 1: Installing this release as a live firmware update

If your system is currently running any version of System Firmware from 9.10.1.a through 9.10.1.d, and if System Firmware 9.10.2 is loaded while the SPARC host is powered on, the firmware will be live-updated after ILOM is restarted. The Hypervisor and ILOM changes included in this release will be applied immediately, without requiring the host to be powercycled. This prevents the need to incur any host downtime to complete the firmware update. See Example 1 below.

If your system is not currently running System Firmware 9.10.1.*, a host power cycle is required to update the host firmware, as with an ordinary release. The ILOM firmware will still be live-updated, as usual. See Example 2 below.

#### Example 1: The host is powered on and System Firmware 9.10.1 is running. Both ILOM and the Hypervisor will be live-updated.

    -> show /HOST status hypervisor_version sysfw_version

     /HOST
        Properties:
            status = Solaris running
            visor_version = Hypervisor 1.20.5 2020/12/03 02:16
            sysfw_version = Sun System Firmware 9.10.1.c 2021/03/04 03:37

    -> load -script -source <System Firmware 9.10.2 URI>
    NOTE: The host is powered on; HOST firmware will be updated
          automatically when the host is restarted.
          If possible, the Hypervisor will be live-updated, without
          requiring a host restart.

    ...................................................................................

    Firmware update is complete.
    ILOM will now be restarted with the new firmware.

After ILOM restarts, the live updates of ILOM and Hypervisor will occur. The ILOM CLI will show the following, indicating that the updates were successful:

    -> show /HOST status hostfw_status hypervisor_version sysfw_version

     /HOST
        Properties:
            status = Solaris running
            hostfw_status = Host firmware update pending; HV live-patch applied
            hypervisor_version = Hypervisor 1.20.5.b. 2021/05/20 07:04
            sysfw_version = Sun System Firmware 9.10.2 2021/05/20 08:59

####

#### Example 2: The host is powered on and a version of System Firmware other than 9.10.1 is running. Only ILOM will be live-updated.

    -> show /HOST status hypervisor_version sysfw_version

     /HOST
        Properties:
            status = Solaris running
            hypervisor_version = Hypervisor 1.20.3 2019/12/02 14:09
            sysfw_version = Sun System Firmware 9.9.3 2019/12/02 14:56

    -> load -script -source <System Firmware 9.10.2 URI>
    NOTE: The host is powered on; HOST firmware will be updated
          automatically when the host is restarted.
          If possible, the Hypervisor will be live-updated, without
          requiring a host restart.

    ...................................................................................

    Firmware update is complete.
    ILOM will now be restarted with the new firmware.

After ILOM restarts, the live update of ILOM will occur. The ILOM CLI will show the following, indicating that the update was successful:

    -> show /HOST status hostfw_status hypervisor_version sysfw_version

     /HOST
        Properties:
            status = Solaris running
            hostfw_status = Host firmware update pending
            hypervisor_version = Hypervisor 1.20.3 2019/12/02 14:09
            sysfw_version = Sun System Firmware 9.10.2 2021/05/20 08:59

###

###

### Note 2: FMA defects and alerts now proxied to ILOM (since 9.10.1)

FMA defects and alerts diagnosed by the host operating system are now proxied to and visible in ILOM. These events will also be forwarded to the ASR manager by ILOM, if configured. Previously, only FMA faults were proxied to ILOM.

For example, a Solaris kernel panic will result in an FMA defect being diagnosed once the domain reboots. This event will now be proxied to ILOM:

    faultmgmtsp> fmadm faulty
    ------------------- ------------------------------------ -------------- --------
    Time                UUID                                 msgid          Severity
    ------------------- ------------------------------------ -------------- --------
    2020-12-04/02:29:44 e3930d68-ffbd-4303-8d92-bd3a8a24ad56 SUNOS-8000-KL  Unknown

    Problem Status           : open [proxied from primary-example-hostname]
    Diag Engine              : software-diagnosis 0.2
    System
       Manufacturer          : Oracle Corporation
       Name                  : SPARC T7-1
       Part_Number           : SamplePartNo
       Serial_Number         : AK1234567890

    System Component
       Firmware_Manufacturer : Oracle Corporation
       Firmware_Version      : (OBP)4.43.5,(HC)1.11.5,(HV)1.20.5
       Firmware_Release      : (OBP)2020.12.03,(HC)2020.12.03,(HV)2020.12.03
       Host_ID               : 88888888
       Server_Name           : primary-example-hostname
       Virtualization_Type   : logical-domain
       Virtualization_Roles  : control-domain,io-domain,root-domain
       Parent_Type           : non-virtualized

    ---------------------------------------
    Suspect 1 of 1
       Problem class  : defect.sunos.kernel.panic
       Certainty      : 100%
       Affects        : -
       Status         : faulted

       FRU
          Status            : faulty
          Location          : /SYS
          Manufacturer      : Oracle Corporation
          Name              : SPARC T7-1
          Part_Number       : SamplePartNo
          Serial_Number     : AK1234567890
          Chassis
             Manufacturer   : Oracle Corporation
             Name           : SPARC T7-1
             Part_Number    : SamplePartNo
             Serial_Number  : AK1234567890
       Resource
          Location          : -

    Description : A fault was diagnosed by the Host Operating System.

    Action      : Please refer to the associated reference document at
                  http://support.oracle.com/msg/SUNOS-8000-KL for a complete,
                  detailed description and the latest service procedures and
                  policies regarding this diagnosis.

As with faults, these FMA events can be managed either in ILOM or Solaris. For example, an "fmadm acquit" action, performed in either ILOM or Solaris, will cause the acquittal to be recorded in both ILOM and Solaris.

Recent enhancements to Solaris 11.4 also add support for proxying defects and alerts from guest domains to the primary domain. So, if the primary domain is running an up-to-date Solaris 11.4 SRU, defects and alerts will proxy from the guest domains to the primary domain, and then to ILOM.

### Note 3: ILOM CLI timeout (Since 9.10.0)

For increased security, System Firmware 9.10.0 introduced a default timeout of 12 hours (720 minutes) for Oracle ILOM CLI sessions (29361779, 30931238). Previously, there was no timeout by default. All CLI sessions are impacted by this change, including those that have opened a connection to the host console (i.e. /HOST/console, /SP/console, etc). If there is no user input for 12 hours, the session will disconnect. Console output does not reset the timer; there must be input in order to extend the session.

To restore the previous behavior, issue the following command from the Oracle ILOM CLI after installing this firmware:

        -> set /SP/cli timeout=0

This sets an “infinite” timeout. The setting will persist across host power cycles, chassis AC power cycles, and future firmware upgrades, as long as the Service Processor is not reset to its factory-default settings.

A different timeout value, either shorter or longer than the default, may also be set if desired. The timeout value is in units of minutes.

Please see https://docs.oracle.com/cd/E95134_01/html/E95138/z40041871561936.html for more details on default session timeouts.

### Note 4: New downgrade restrictions (Since 9.10.0)

Due to new security checks in Oracle ILOM 5.0, downgrades to earlier System Firmware versions may fail. The previously-running version, however, will be accepted if a downgrade is attempted. Please see https://docs.oracle.com/cd/E95134_01/html/E95138/downgrade.html for more details.

### Note 5: New ILOM password and account locking policies

Oracle ILOM 5.0 introduced new policy options for local account security. By default, accounts are now locked for a period of time after a number of failed login attempts. Please see https://docs.oracle.com/cd/E95134_01/html/E95138/gppit.html for more details on how to configure these policies.

### Note 6: Bug 31650254 - a reset /SP may be needed when using fwupdate to update firmware (Since 9.10.0)

Occasionally, updating firmware using "fwupdate" from Solaris will fail. You may see messages such as "Updating sp: IPMI TLS Authenticate Session command failed" or "Error: Unable to establish IPMI v2 / RMCP+ session" during the fwupdate, and the command will not complete. When such an error is encountered, the fwupdate may succeed after the SP is reset and the command is retried. In certain cases, you may need to use the Oracle ILOM CLI or web interface to update firmware instead.

### Note 7: PCIe root port FMA alerts after upgrading from Sun System Firmware older than 9.8.5 (Since 9.8.5)

FMA alerts may be generated by Solaris after upgrading firmware to this release and power cycling the host. They are a side effect of the fix for bug 27083597 "FMA topology incorrect, calls out IOS RP as a FRU".

The alerts are innocuous and can be removed using the 'fmadm clear' command. Example alert removal:

      # fmadm list-alert

      --------------------------------------------------------------------------
      TIME EVENT-ID MSG-ID               SEVERITY
      --------------------------------------------------------------------------
      Apr 19 19:49:11 26553f6d-38d1-4472-8282-87e7a792c78f  FMD-8000-CV Minor

      Problem Status    : open
      Diag Engine       : software-diagnosis / 0.1
      System
          Manufacturer  : Oracle Corporation
          Name          : SPARC T7-1
          Part_Number   : 33940198+1+1
          Serial_Number : AK1234567890
          Host_ID       : 88888888

      ----------------------------------------
      Suspect 1 of 1 :
         Problem class : alert.oracle.solaris.fmd.fru-monitor.fru-remove
         Certainty   : 100%

         FRU
           Status           : Active
           Location         : "/SYS/MB/IOH/IOS2/RP1"
           Manufacturer     : Oracle-Corporation
           Name             : ASY,MB
           Part_Number      : 121212
           Revision         : 01
           Serial_Number    : 0123456789+987654A
           Chassis
              Manufacturer  : Oracle Corporation
              Name          : SPARC T7-1
              Part_Number   : 12345678+1+1
              Serial_Number : AK123456780
         Resource
           Status           : Active

      Description : FRU '/SYS/MB/IOH/IOS2/RP1' has been removed from the system.

      Response    : FMD topology will be updated.

      Impact      : System impact depends on the type of FRU.

      Action      : Use 'fmadm faulty' to provide a more detailed view of this event.
                    Please refer to the associated reference document at
                    http://support.oracle.com/msg/FMD-8000-CV  for the latest service
                    procedures and policies regarding this diagnosis.

      # fmadm clear 26553f6d-38d1-4472-8282-87e7a792c78f

### Note 8: Instructions for firmware upgrade from Sun System Firmware older than 9.5.2.g

All operations may be performed from the Oracle ILOM CLI, ILOM web interface, or OpsCenter unless specifically noted. All examples below are CLI operations.

1. Check current Sun System Firmware version

       -> show /HOST sysfw_version

   1. If current version is 9.5.2.g or later go directly to Step 10
   2. If current version is before 9.5.2.g follow Steps 2 through 10

2. Turn off host power

       -> stop /System
       -> show /System power_state

3. Record current network settings if not using DHCP

       -> show /SP/network

   Note: If not using DHCP, you must have local serial connection before proceeding.

4. Backup current Service Processor configuration (only from CLI or web browser)

       -> set /SP/config passphrase=<XXXXXXXXXXXXXXXX>
       -> set /SP/config dump_uri=scp://<user>@<ip_address_or_hostname>/XXXXXX.xml

5. Perform initial load of Sun System Firmware package

       -> load -source http://<ip_address_or_hostname>/Sun_System_Firmware-X_X_X.pkg

6. Restore network settings if not using DHCP (from CLI only on local serial connection)

       -> set /SP/config passphrase=<XXXXXXXXXXXXXXXX>
       -> set /SP/config dump_uri=scp://<user>@<ipaddr_or_hostname>/XXXXXX.xml

7. Perform second load of Sun System Firmware package

       -> load -source http://<ip_address_or_hostname>/Sun_System_Firmware-X_X_X.pkg

8. Restore Service Processor configuration (only from CLI or Web browser)

       -> set /SP/config passphrase=<XXXXXXXXXXXXXXXX>
       -> set /SP/config load_uri=scp://<user>@<ip_address_or_hostname>/XXXXXX.xml

9. Load the fallback image

       -> load /SP/firmware/host/miniroot -source http://<ip_address_or_hostname>/xxxxxxx-fallback_boot-sparc.pkg

   Note: Information on uploading a new Oracle Solaris miniroot package from SP to Host (SPARC M7 and T7) can be found at: https://docs.oracle.com/cd/E37444_01/html/E37446/gqcim.html

10. Perform final load of Sun System Firmware package

        -> load -source http://<ip_address_or_hostname>/Sun_System_Firmware-X_X_X.pkg