54
•
•
•
•
•
•
1.
a.
2.
mstflint Limitations
When running mstflint via an MTUSB-1 device, a burn/query command may take up to
45 minutes to complete.
To accelerate the burn process add the flag -no_flash_verify to the command line
which skips the flash verification step. This flag, however, does not verify if the image
is burnt correctly.
Burning an image to a ConnectX-3 adapter in Flash recovery mode may fail on some
server types (that use PCIe spread spectrum). The tool may not be able to recognize the
device’s PCI CONF0 or the image burn may not complete successfully.
To burn the device, use the MTUSB-1 connection.
To load the newly burnt firmware image, a driver restart is required for ConnectX-3/
ConnectX-3 Pro cards.
For fifth generation (Group II) devices, run the mstfwreset tool or reboot the system.
mstflint: Secure Host
Secure host is the general term for the capability of a device to protect itself and the subnet
from malicious software through mechanisms such as blocking access of untrusted entities to
the device configuration registers.
Using Secure Host
Secure Host feature is supported for all NVIDIA network adapters (listed in Group 1 and group 2). For
group 1 network adapters, the user is required to generate and burn a firmware image that supports
the feature (see “Generating/Burning a Firmware Supporting Secure Host” below).
For Group 2 network adapters, the feature is supported on firmware version 1x.22.1002 or newer.
Generating/Burning a Firmware Supporting Secure Host
Make sure you have INI and mlx files suitable for the device. Both files are available for
download at:
http://www.mellanox.com/page/custom_firmware_table
Add cr_protection_en=true under [HCA] section in the INI file.
Burn the image on the device using mstflint:
•
•
WARNING:
Once a hardware access key is set, the hardware can be accessed only after the
correct key is provided.
If a key is lost, please refer to
.
•
•
The hardware access in this mode is allowed only if a correct 64 bits key is provided.
The secure host feature for ConnectX-3/ConnectX-3 Pro HCAs requires a MLNX_OFED
driver installed on the machine.
