Chapter 5: System Monitoring and Alarms
70
Firmware Upgrade Process
The MMC firmware supports a reliable field upgrade procedure compatible with the
HPM.1
Specification
. The key features of the firmware upgrade procedures are as follows:
•
The upgrade can be performed over the serial debug/payload interface or over IPMB-L.
•
The upgrade procedure is performed while the MMC firmware is online and operating normally.
•
Upgrades of the firmware component are reliable. A failure in the download (error or interruption)
does not disturb the MMC's ability to continue using the “old” firmware or its ability to restart the
download process. Upgrades of the boot loader component are not reliable and may render the MMC
non-functional in case of an incomplete upgrade.
•
Upgrades of the firmware component are reversible. The MMC firmware automatically reverts back to
the previous firmware if there is a problem when first running the new code and can be reverted
manually using the HPM.1-defined
Manual Rollback
command. Upgrades of the boot loader
component are not reversible.
HPM.1 Boot Loader
•
The HPM.1 boot loader does not perform any upgrade actions
•
The HPM.1 boot loader is able to boot either of two redundant copies of the MMC firmware in flash
•
The HPM.1 boot loader is able to automatically rollback a failed copy of the MMC firmware and
activate the backup one
•
The HPM.1 boot loader can be upgraded in-field as an HPM.1-upgradeable component
HPM.1 Firmware Upgrade
The HPM.1 upgrade procedure is managed by a utility called the
upgrade agent
. The
ipmitool
utility is used as upgrade agent for upgrading the MMC firmware.
The upgrade agent communicates with the MMC firmware via serial interface or IPMB-L, and
uses the ATCA commands that are described in the
HPM.1 Specification
for upgrading the
firmware. Updated firmware is packed into a special image that has a format described in the
HPM.1 Specification
. That image is used by the upgrade agent to prepare and upgrade the
MMC firmware. The HPM.1 upgrade procedure includes the following steps:
1.
Preparation step
. This step erases the region in the flash memory where a component will be
written.
2.
Component upload step
. This step is designed to upload the component image via IPMB or a serial
interface, and write it into the flash memory.
3.
Component activation step
. This step is designed to activate the previously upgraded component;
for the firmware component, this step can be deferred until a later time.
The MMC firmware supports two upgradeable components: the firmware itself and the boot
loader. In case of an unsuccessful firmware upgrade it is possible to roll back to the old
firmware. This is not true for the boot loader.
Note: Extreme caution should be exercised when upgrading the boot loader. There is no
backup copy of the boot loader and if for any reason the boot loader upgrade procedure fails,
the firmware becomes non-functional after reboot and must be reprogrammed over JTAG.
Содержание AMC131
Страница 4: ...4 ...
Страница 10: ...Contents 10 ...
Страница 14: ...Tables 14 ...
Страница 16: ...Figures 16 ...
Страница 32: ...Chapter 2 Introduction 32 ...
Страница 42: ...Chapter 3 Getting Started 42 ...
Страница 82: ...Chapter 6 Reset Configuration 82 ...
Страница 98: ...Chapter 7 Programmable Registers 98 ...