﻿================================================================================
Express5800/R110k-1
System ROM U60 v1.58 (04/18/2022)
================================================================================
Software name    : Express5800/R110k-1
                   System ROM (BIOS) update module
Models           : Express5800/R110k-1
Operating System : This software supports offline update and the following OS.
                   - Windows Server(R) 2019
                   - Windows Server(R) 2022
                   - Red Hat(R) Enterprise Linux(R) 8
Target Users     : See [Target Users for Update] below
Type             : System ROM
================================================================================


[About the software]
The Express5800/R110k-1 System ROM (BIOS) update module supports the following
changes in the Express5800/R110k-1 models:

 Enhancements and problem fixes:
 - Updated microcode for Processor.
    Intel(R) Xeon(R) E Processor
    Intel(R) Pentium(R) Gold Processor Series

 - Addressed following security vulnerabilities.
    CVE-2022-21151, CVE-2022-0005, CVE-2021-33122, CVE-2021-33123,
    CVE-2021-33124, CVE-2021-33103

  ** Program and data included in this software **
 Following program and data are included in this software.
 Use one of them according to the way of installation.

  a) Flash image for System Utilities/iLO Web User Interface
      firmware\U60_1.58_04_18_2022.signed.flash

  b) Executables for Windows(R)
      winx64\cp051957.exe

  c) RPM package for Linux(R)
      Linux\firmware-system-oem-u60-1.58_2022_04_18-1.1.x86_64.rpm

-------------------------------------------------------------------------------
[ Target Users for Update ]
This software is available for the users who use the following models with the
following System ROM version.

  - Models to be supported

     1. Express5800/R110k-1

  - System ROM Versions to be supported

     1. U60 v1.54 (01/13/2022)

Note: In case of using newer System ROM from the above version, it has already
      applied equivalent enhancements. Updating the System ROM isn't needed.

Be sure to check the System ROM version and date with the following procedures.
Select an arbitrary procedure and check the version before and after the update.

 ** System Utilities **

 You can check the System ROM version and date by the following procedure.

    1. Power on the system and the contents of process by POST (Power On Self-
       Test) will be shown on the screen. After a short time, the following
       message is shown. Press <F9> key, "System Utilities" is started.

                        [F9] System Utilities

    2. After starting "System Utilities", select "System Information".

    3. Select "Firmware Information".

    4. Each firmware version is shown on the screen. The System ROM version and
       date can be seen at "System ROM" option.

  Note: After checking the System ROM version, press the <ESC> key or
        select "Exit" to exit the System Utilities.

  Note: About detail of "System Utilities" usage, refer to "1. System
        Utilities" section in the chapter of "Useful Features" of the
        maintenance guide.

 ** Windows(R) OS **

 You can check the System ROM date by a following procedure.

    1. Hold down <Windows> key and press <R> key.

    2. In the "Run" dialog box, type "msinfo32" and then click "OK".

    3. After "System Information" has started, select "System Summary".

    4. Check the System ROM version by the profile of "BIOS Version/Date".

 ** Linux(R) OS **

 You can check the System ROM date by a following procedure.

    1. Launch the terminal such as xterm.

    2. Execute the command as follows.

        # /usr/sbin/dmidecode | less

        Note: "#" means prompt. You do not need to input "#".

    3. Check the System ROM date by "BIOS Information->Release Date".

    Note: The dmidecode command has to be installed.

================================================================================
 System ROM Installation Procedure
================================================================================

 ** System Utilities **

 [ Preparation ]
  - USB memory x1

  1. Preparation of flash image (*.flash)
   (1) Prepare the USB memory that is formatted with FAT or FAT32.
   
   (2) Copy "a) Flash image for System Utilities/iLO Web User Interface file"
       (approx. size 32MB) to a USB memory.

  2. System ROM installation procedure
     Install the System ROM by a following procedure.

   (1) Attach the USB memory created in the procedure of "1" and power on the
       system.

   (2) In POST, press <F9> key to enter System Utilities.
   
   (3) Select "Embedded Applications > Firmware Update > System ROM" menu.

   (4) Choose "Select Firmware File", and then select the device in which flash
       image was copied.
   
   (5) Select flash image (i.e. *.flash).

   (6) Select "Start Firmware Update".

   (7) When the popup message of "Press ENTER to start firmware update.
       This process might take a few minutes..." is shown, press <ENTER> key.
       Update process is started.

   (8) The progress of the update is shown. When it's completed, the popup
       message of "Firmware update completed successfully." is shown. Press
       <ENTER> key, the message is closed.

   (9) Detach the Installation USB memory from the system.
   
   (10) Reboot the system; Select the "Reboot the System" option at top
        level menu of System Utilities.

   (11) Wait reboot completion for update to take effect.

     The installation is successfully finished.

 ** iLO Web User Interface **

  1. Preparation of flash image (*.flash)

   (1) Copy "a) Flash image for System Utilities/iLO Web User Interface file"
       (i.e. *.flash) to any location which is accessible from the remote PC.

  2. System ROM installation procedure

   (1) Start the Web Browser on remote PC. And log-in to the iLO Web User
       Interface by a "Configure to iLO Settings" privilege user.

   (2) Select "Firmware & OS Software tab" from the right menu.

   (3) Select "Update Firmware" from the left menu.

   (4) Select the flash image, copied by a procedure of "1."

   (5) Press "Flash" to begin update process.

   (6) Wait for the "Firmware Update Completed." message to display.

   (7) Reboot the system.

   (8) Wait reboot completion for update to take effect.

     The installation is successfully finished.

 ** Windows(R) OS **

  1. Preparation of Installation

   (1) Log on to the system as a user with administrator privilege.

   (2) Terminate all running application.

   (3) Copy "b) Executables for Windows(R) file" to a suitable
       folder.

  2. System ROM installation procedure

   (1) Double-click "b) Executables for Windows(R) file" (i.e. *.exe).
       The System ROM Update Program will start.

   (2) Follow the messages will be shown and complete the operation.

   (3) If the messages requesting reboot will be shown, select "yes" to reboot
       of the system.

   (4) Wait reboot completion for update to take effect.
       
     The installation is successfully finished.

 ** Linux(R) OS **

  1. Preparation of Installation

   (1) Log-in as root. Or switch to root with "su" command.

   (2) Terminate all running application.

   (3) Copy "c) RPM package for Linux(R) file" to a suitable directory.

       e.g. /root 

  2. System ROM installation procedure

   (1) Install the RPM package of this System ROM update module by the command
       below.

        # rpm -Uvh <filename>.rpm

        Note: The "<filename>.rpm" should replace to RPM package name which
              is described at above "Binaries of this release" section.

        Note: "#" means prompt. You do not need to input "#".
 
   (2) See where the files land by the command below.

        # rpm -qlp <filename>.rpm

   (3) Change to the directory you see in the previous step.

   (4) Run setup by the command below.

        # ./setup

   (5) Follow the messages will be shown and complete the operation.

   (6) If a reboot inquiry is appear then press "y" to trigger reboot.

   (7) Wait reboot completion for update to take effect.
        
      The installation is successfully finished.

 ** Other OSes (e.g. VMware(R), etc.) **
 Use the one of following procedures to update:
 - Install the System ROM from System Utilities
 - Install the System ROM from iLO Web User Interface

================================================================================
 Notes
================================================================================
  ** Notes in general **

  * Refer to "license_en.txt" about the user license agreement.

  * When you install the system ROM, the flashing mechanism writes over the
    backup ROM and saves current ROM as a backup, enabling you to switch easily
    to the alternate ROM version if the new ROM becomes corrupted for any
    reason. This feature protects the existing ROM version, even if you
    experience a power failure while flashing the ROM.

  * When Windows(R) BitLocker(TM) function is set to "Enabled", install the
    System ROM after making the function "Disabled". Then make the function
    "Enabled" after install and reboot of the system. If you install the system
    ROM without making the function "Disabled", you may need the recovery
    password when you boot the system.

  * This software does not support a virtualized environment such as hyper
    visor, guest OS, etc. Please install either on the OS which this software
    supports or with the method of offline installation.

  * To meet firmware dependencies, you can update iLO firmware by latest
    Starter Pack. And you can update Server Platform Services(SPS) firmware by
    latest "Server Platform Services(SPS) firmware update module".
    You can download latest update module(s) from the following web site.
    https://www.nec.com/express
    ("Support & Downloads" of the page top - PCs & Servers - Servers - Downloads
    - Select Model)

  ** Note for Windows(R) OS environment and Linux(R) OS environment **

  * This software will access to iLO5 (Baseboard Management Controller). It is
    required that the "iLO 5 Channel Interface Driver" (CHIF) must be installed.
    The CHIF driver can be installed by using EXPRESSBUILDER or "Starter Pack".

--------------------------------------------------------------------------------
[Revision history]
Version:1.58 (04/18/2022)

 Enhancements and problem fixes:
 - Updated microcode for Processor.
    Intel(R) Xeon(R) E Processor
    Intel(R) Pentium(R) Gold Processor Series

 - Addressed following security vulnerabilities.
    CVE-2022-21151, CVE-2022-0005, CVE-2021-33122, CVE-2021-33123,
    CVE-2021-33124, CVE-2021-33103

Version:1.56 (03/24/2022)

 Enhancements and problem fixes:
 - Updated microcode for Processor.
    Intel(R) Xeon(R) E Processor
    Intel(R) Pentium(R) Gold Processor Series
 
 - Addressed an issue where Windows Server 2022 has a unknown device in
   Microsoft(R) Device Manager when Microsoft(R) Secured-core Support option or
   Intel(R) TXT Support option is enabled.
         System Configuration > BIOS/Platform Configuration (RBSU)
         > Server Security > Microsoft(R) Secured-core Support

         System Configuration > BIOS/Platform Configuration (RBSU)
         > Server Security > Intel Security Options > Intel(R) TXT Support

--------------------------------------------------------------------------------
[Copyright and Trademark]

All contents on this software are the copyright of NEC Corporation or the
third-party software developer. All other contents mentioned herein are
copyright of their respective owners.

Microsoft, Windows, Windows Server are trademarks or registered trademarks of
Microsoft Corporation in the United States and other countries.
Linux(R) is a registered trademark of Linus Torvalds in the United States and
other countries.
Red Hat is a trademark or a registered trademark of Red Hat Inc. in the United
States and other countries.

All other company names and product names mentioned herein are registered
trademarks or trademarks of their respective owners.

--------------------------------------------------------------------------------
   Copyright NEC Corporation 2022

