Skip to main content

Enable SMM3 secure boot

Use this information to enable the SMM3 secure boot.

Check SMM3 primary firmware version

  1. User the following Redfish command to check if the SMM3 primary firmware version is Q4SM06F-1.0.05 or later versions.
    curl -k -H "Content-Type: application/json" -X GET https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/UpdateService/FirmwareInventory/SMM_Primary
    Note
    SMM3 primary firmware version must be Q4SM06F-1.0.05 or later versions. To update the primary firmware, see SMM3 firmware update commands.

Enable IPMI and check secure boot status

  1. Enable the IPMI interface.
    1. Use the following Redfish command to enable the IPMI interface.
      curl -k -H "Content-Type: application/json" -X PATCH -d '{"IPMI": {"ProtocolEnabled" : true}}' https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/Managers/bmc/NetworkProtocol
    2. Use the following Redfish command to query the IPMI interface status.
      curl -k -H "Content-Type: application/json" -X GET https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/Managers/bmc/NetworkProtocol
  2. Use the following IPMI command to check whether Secure Boot is enabled.
    Ipmitool -I lanplus -U [USERNAME] -P [PASSW0RD] -H [SMM3_IP] -C 17 raw 0x32 0xfc 0x00

Enable SMM3 secure boot

  1. If the query result is 00 00, the Secure Boot is disable. Use the following IPMI command to enable Secure Boot.
    ipmitool -I lanplus -U [USERNAME] -P [PASSW0RD] -H [SMM3_IP] -C 17 raw 0x32 0xfc 0x01
  2. Physically reseat the SMM3.
  3. Use the following Redfish command to reset to default.
    curl -k -H "Content-Type:application/json" -X POST -d '{"ResetType": "ResetAll"}' https://[USERNAME]:[PASSW0RD]@[SMM3_IP]/redfish/v1/Managers/bmc/Actions/Manager.ResetToDefaults

    Note
    After resetting SMM3 to default, first login requires changing password, see Change the password for the first login in Logging in to the SMM3.
  4. Enable the IPMI interface.
    1. Use the following Redfish command to enable the IPMI interface.
      curl -k -H "Content-Type: application/json" -X PATCH -d '{"IPMI": {"ProtocolEnabled" : true}}' https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/Managers/bmc/NetworkProtocol
    2. Use the following Redfish command to query the IPMI interface status.
      curl -k -H "Content-Type: application/json" -X GET https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/Managers/bmc/NetworkProtocol
  5. Use the following IPMI command to check whether Secure Boot is enabled.
    Ipmitool -I lanplus -U [USERNAME] -P [PASSW0RD] -H [SMM3_IP] -C 17 raw 0x32 0xfc 0x00

Check SMM3 backup firmware version

  1. If the query result is 00 01, the Secure Boot is enabled. Use the following Redfish command to check if the SMM3 backup firmware version is Q4SM06F-1.0.05 or later versions.
    curl -k -H "Content-Type: application/json" -X GET https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/UpdateService/FirmwareInventory/SMM_Backup
    Note
    SMM3 backup firmware version must be Q4SM06F-1.0.05 or later versions. To update the backup firmware, see SMM3 firmware update commands.
  2. Use the following Redfish command to disable IPMI or reset to default.
    1. Use the following Redfish command to disable IPMI.
      curl -k -H "Content-Type: application/json" -X PATCH -d '{"IPMI": {"ProtocolEnabled" : false}}' https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/Managers/bmc/NetworkProtocol
    2. Use the following Redfish command to reset to default.
      curl -k -H "Content-Type:application/json" -X POST -d '{"ResetType": "ResetAll"}' https://[USERNAME]:[PASSW0RD]@[SMM3_IP]/redfish/v1/Managers/bmc/Actions/Manager.ResetToDefaults

      Note
      After resetting SMM3 to default, first login requires changing password, see Change the password for the first login in Logging in to the SMM3.
SMM3 firmware update commands

SMM3 firmware update OneCli commands

Use the following OneCli command to update SMM3 firmware
OneCli.exe update flash --dir <folder path> --smm [USERNAME]:[PASSWORD]@[SMM3_IP][:port] --log 5

SMM3 firmware update Redfish commands

  1. Upload SMM3 Image File (.uxz)

    curl -k -H "Content-Type: application/octet-stream" -X POST -T [SMM3_UXZ_IMAGE] https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/UpdateService/update

  2. Start updating firmware.

    curl -k -H "Content-Type: application/json" -X POST -d '{"target": "/redfish/v1/Managers/bmc"}' https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/UpdateService/Actions/UpdateService.StartUpdate

  3. Query update progress.

    curl -k -H "Content-Type: application/json" https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/TaskService/Tasks/0

  4. After the Task State shows “Completed” in Step 3, restart SMM3.

    curl -k -H "Content-Type: application/json" -X POST https://[USERNAME]:[PASSWORD]@[SMM3_IP]/redfish/v1/Managers/bmc/Actions/Manager.Reset -d '{"ResetType": "GracefulRestart"}'