Prerequisites to update firmware

Before performing firmware analysis, compliance checks, or firmware update operations, ensure that the target servers meet the following requirements.

Privileges

  • You have administrative or root privileges.

Managed servers

  • One or more servers are added to Smart Update Manager (SUM) and are reachable.

  • The servers are onboarded successfully and available on the Servers page.

  • A firmware baseline is available in SUM.

Firmware baselines

  • Upload a supported Service pack for HPE ProLiant (SPP) before performing compliance analysis or firmware updates.

  • When using a custom SPP, include all required firmware components and variants for the target environment.

  • An SPP containing only Smart Component RPM packages is not supported.

AMS and iSUT requirements

If you plan to deploy OS drivers and software together with firmware updates, ensure:

  • Agentless Management Service (AMS) is installed and running on the target server.

  • Integrated Smart Update Tools (iSUT) is installed and running on the target server.

  • The installed iSUT version is supported for the target server generation and OS.

Supported iSUT versions

  • Gen12 servers with iLO 7: Version 6.0.0 or later

  • Gen10, Gen10 Plus, Gen11, and Gen12 servers with iLO 6: Version 2.9.3 or later

  • VMware ESXi servers: Version 4.1.0 or later

iSUT configuration requirements

  • Enable iLO queued updates in iSUT.

    sut -set enableiloqueuedupdates=true

  • Do not configure iSUT in OnDemand mode.

  • If iSUT on a VMware ESXi server was upgraded from a version earlier than 2.9.3, run the following commands after the upgrade:
    sut -deregister
sut -register
sut -set mode=autodeploy

VMware ESXi requirements

For VMware ESXi servers:

  • Verify that a supported iSUT version is installed.

  • Place ESXi hosts in maintenance mode.

  • If iSUT was upgraded from an earlier unsupported version, re-register iSUT according to iSUT documentation. For more information, see the Learn more link under HPE drivers and software in Update Firmware Baseline.

HPE ProLiant Gen12 servers and later

  • Firmware updates are not supported when CNSA mode is enabled.

  • Change the security mode to FIPS or Production (Standard) before performing firmware updates.

  • Optional virtual NIC (vNIC) configuration:

    • Create iSUT application account using the command:

      sut appaccount create -u <ilo_username> -p <ilo_password>

    • Configure AMS communication over vNIC using the command:

      amscli appaccount create -u <ilo_username> -p <ilo_password>

Downgrade operations

If you enable Downgrade Components to Match Baseline, verify that the iLO Downgrade Policy is set to Allow Downgrades.

Operational readiness

  • Ensure target servers are powered on when HPE Drivers and Software updates are required.

  • Review workloads running on the target servers.

  • Plan for maintenance windows and potential server restarts.