BIOS update package for UCS C220M3 - Where to download from?

[SAM MUNZANI]

Hi,

I have a UCS 220M3 server where running ucs-c220-huu-3.0.1c.iso update-all corrupted my bios. Now it's unable to boot and asking me to recover using recovery.cap file on an USB flash stick root folder. I can't seem to find that file anywhere on the Cisco.com site. Can someone please point me to it?

I found following document as an instruction for the recovery however it doesn't tell me where to download the BIOS update package.

http://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/hw/C220/install/C220/install.html#88948

On download page for UCS 220M3, I see following options and the BIOS update utility is not an option. Neither it seems to be embedded inside any other ISO files. Please help.

[olivier.nicolas]

Decryption will fail when openssl1.1 is installed on the system.

The default hash used by openssl enc for password-based key derivation changed in 1.1.0 to SHA256 versus MD5 in lower versions.

You could try to put an old version of openssl in your path (not tested but should work)

Manually extract the files

Mount the iso, copy the firmware.squashfs.enc 

Decipher the file:(the password cannot be posted here)

openssl enc -aes-256-cbc -md md5 -d -in firmware.squashfs.enc  -out firmware.squashfs -k "<some password>"

Mount the squafs filesystem:

mount -oro,loop firmware.squashfs /mnt/

Browse the filesystem

ls /mnt/
bios broadcom cimc emulex fusionio hdd intel lsi qlogic

[umartin]

Hallo,

i have the same problem. Wehre can I geht the password of the Firmware.squash.enc?

Kind regards 

Uwe

[mohrahma]

Just to check if we found a solution to extract the cimc bin file

[mohrahma]

Hi Uwe,

I was able the run the getfw cli on a Rhel7.3 with openssl ver 1:1.0.1e

Best of Luck,

Muneeb

[rmongeon]

More than a year later and the answer is still no.

[ac_lp]

I got getfw running using an old Debian 7.0 version using OpenSSL 1.0.1t.

However, this does not give me the LSI firmware that I need. 

What is the way to extract that firmware? Any chance to post that password in a PM ?

[ac_lp]

Alright - when you run getfw and use 'killall getfw' immediately, the decrypted squashfs file is still on the disk:

/mnt/TEFW/firmware.squashfs

In that moment, you can mount this image as mentioned by olivier.nicolas and have access to the firmware.

[Ray167]

Hi, any luck getting the Cisco version of the LSI firmware?

Thanks

[StarTrekkie17]

Cisco won’t release / bless it but you can dl it from LSI and install it yourself

[Ray167]

Hi, is the password in the MD5 file?

Thanks

[Oleg Barkov]

But why all this suffering? Can't CISCO just give us the updated BIOS and CIMC FILES, not a disk image? The disk image can only be used after the complete shutdown of the server and everything what is on it. It is rediculous. CIMS simply has a bug that cause it to hang up so it could be working again only after the POWER is OFF and on again. However, CIMS interface has an option to update both BIOS and IMC from files, so then it is the CIMC only that has to reboot. Why don't we get just those files? The problem gives people a lot of pain.

[StarTrekkie17]

because its Cisco and anything that should take 3 minutes takes hours.

[ucflumm]

Hi im also wondering where the password is? 
I'm hoping that someone has it and I don't have to brute force it.

[AndrewPiroli]

The password for the C240 M3 is topspin@123cis@123co+  

It might be the same for others, but if it's not I found this by running getfw under strace like this:

sudo -i
cd /path/to/getfw_and_iso
mkdir temp
strace -f -e trace=execve ./getfw -s ucs240-huu-3.0.4p.iso -d temp 2>&1 | grep openssl

Replace the .iso with the one you need and in there you should see the exec call to openssl with the password as the option after -k

You can then simply recreate the openssl command to decrypt.