Nvidia MSTFLINT, Документация

Страница: 60 / 123

60
3.
a.
•
•
•
•
•
•
•
•
For further information, see Setting a "Forbidden Versions" Section in a Binary Image
File .
Sign the firmware image with a private key.
Run the mstflint sign command.
mstfwreset – Loading Firmware on 5th Generation
Devices Tool
mstfwreset tool enables the user to load updated firmware on a NIC without having to reboot the
machine. mstfwreset supports 5th Generation (Group II) HCAs and allows a smooth firmware
upgrade.
Tool Requirements
Access to device through BDF format
Firmware supporting ISFU
Connect-IB: v10.10.3000 or above
ConnectX-4: v12.0100.0000 or above
ConnectX-4 Lx: v14.0100.0000 or above
Device's firmware updated with latest mstflint burning tools (mstflint)
Supported devices: Connect-IB / ConnectX-4 / ConnectX-4 Lx / ConnectX-5 / BlueField /
ConnectX-6
Supported OSs: FreeBSD, Linux
mstfwreset Synopsis
mstfwreset -d <device> [--level < 0 , 3 .. 5 >] [--type < 0 .. 1 >] [-m] [-y] <q[uery] | r[eset] | reset_fsm_register>
where:
-d|--device <device> Device to work with
-l|--level <0..5> Run reset with the specified reset-level
Please notice that signing the image must be after setting the public keys, and the
forbidden versions. For further information, see
Secure Firmware Update .

To sign with a 2048 bits private key only, make sure that the firmware image
does not contain a 4096 bits key signature.
Run the mstflint set_public_keys command with a 4096 bits keys section filled
with zeros and then sign with a 2048 bits private key.
For further information, see
Signing Binary Image Files .

To sign with 4096 bits private key only, run the mstflint set_public_keys
command with a 2048 bits keys section filled with zeros and then sign with the
a 4096 bits private key.
For further information, see
Signing Binary Image Files .
