Latest T10 IPMI firmware (4302685)

This Knowledgebase Article will always contain the latest supported IPMI firmware, so please re-visit this page every once in a while.

This article will only contain the differences of the IPMI's fixes and vulnerabilities.

3.39

1. Add feature of enable/disable services, i.e. http, http over SSL, WSMan, KVM, VM, and SSH
2. On User page, when adding/modifying user, the password field allows special character
3. Fix the bug the I.E browser is unable to show bbp information properly
4. Fix the bug that, on SMTP web page, port number is not being displayed properly after refresh action is performed.
5. Add KVM reset command, raw 0x30 0x68 0x7 0x1
6. Fix the bug that SMC RAKP is intermittently turn on
7. For SSL, disable the SSLv3
8. Fix the bug that receiver email got extra equal sign at the front
9. On website update page, fix the backward display of progress bar
10. Fix the commands for those "Restore To Default"
11. Improve connection of KVM
12. On SMTP web page, fix the issue that error pop up message randomly display forever
13. Correct the display information on the use of Cipher 0
14. On AD setup, allow space entered in AD Group Name
15. On firmware upgrading web page, fix the display of progress bar
16. On web page of upgrade firmware, add the display of progress bar to indicate the progress
17. Add SDR replacement option
18. Add LSI HDD Media, Other and PredFail error count in series to avoid the false alarm of HDD fault error.
19. Disable status queries and restrict informational access
20. Add the time stamp to iKVM and library jar file
21. Fix the issue that Java iKVM Viewer is hang when open file dialog is performed in virtual storage on Mac OS
22. Add the feasibility of gateway to be set as 0.0.0.0.
23. Fix the KVM reset (thru Web Interface) is not functioning properly under Window OS
24. Fix the Issue ID #59228, Existing BIOS date not showing during OOB BIOS update
25. Fix the bug that IPv6 is not functioning
26. Fix the issue that the time is not properly displayed on Power Consumption web page

3.31

1. Change the feature that network setting is always preserved when fw update
2. Fix the issue that iKVM connection is drop while doing installation of OS whose file size is more than 3GB or above.
3. [WS-MAN] Fix the issue that user/password is not working correctly.
4. [SSL Certification] Add the SSL key & CERT mismatch detection while deploying new certification.
5. [Security] Improve the security protection on storage of root user account.
6. Fix the Network Privilege settings.
7. Improve KVM on MAC is intimately unable to launch after several retry of close/open on Mac OS.
8. On login page, increase max allowable length of password field to 64
9. Add a feature that can log AC Power On event.
10. Prevent security key being exposed while using save/restore IPMI configuration file on the web.
11. Setting of Daylight Saving Time can be adjusted while using OEM Get/Set Config function
12. [OOB] Fix the display of Activate BIOS Product Key
13. Fix the failure of login while using AD server that is configured to have longer length of user domain
14. Fix Self-Signed Certificate works, and signed Certificate by CA.

3.20

1. Description: IPMI BMCs being abused for NTP amplification DDoS attacks
2. Fix the security issue: Don't allow inputting the special characters on the user name and password field.
3. Fix the issue that SOL is not working over SMASH.
4. Fix the issue that, when using I.E browser, on Radius Web Page, the settings values are intermittently missing.
5. Fix the issue that some valid character is not accepted on LDAP web page.
6. Add feature of SMC OEM RMCP, available on Miscellaneous->RAKP web page.
7. [X9DRW-7TPF+] Add Heavy I/O mode to fan control.
8. [OOB BIOS Update]
9. Add bios revision when doing bios update through web and SMCIPMItool
10. Enhance security function on the web.
11. Dynamic SSL Key is generated.

3.15

1. Fix the issue that ADMIN account cannot be logged in after the passwords have been changed a few times.
2. Add signed java certification to avoid Oracle blocking the java use in the future.
3. Operator user can't see any Administrator activity on ikvm console-> User List
4. Fix OOB command fail after MAC address change
5. Fix issue on Type anything in pwd field with 20 chars or more ==> see blank page
6. Fix SSL upload function unable to work properly
7. Correct spelling mistake from Product to Product @ BIOS Update page
8. Fix network connection fails after change setting from Network page
9. Fix System MAC address unavailable from System Information page
10. Disable Anonymous user being modified
11. Fix CD-ROM unable to mount when username/password required for the share folder
12. Auto-generated default certificate at factory default
13. Allow IPMI cmd to change default(ADMIN) user name
14. Fix unable to save AD server setting
15. Fix unable to save DDNS setting
16. Fix No Access user can't be configured
17. Allow default user ADMIN able to be modified
18. Fix power consumption graph not displayed on IE browser
19. Fix power status didn't get updated after power down @ sys info page
20. Add RAKP2 username randomly response when username does not exist in order to avoid the hacker hacking the pwd using username
21. Correct wording, "Please select an image file" @ page of vm-> floppy.
22. IP Access control/System Event Log: disable buttons when the feature is disabled
23. Configuration-> DDNS: go back to configuration page when NTP is disabled
24. Fix restore IPMI configuration fail to work
25. Fix ADMIN-user can't change user's privilege without password changes
26. Fix NTP can't be enabled @ page of Date & Time configuration
27. Fix operator-user can't issue command through ipmitool
28. Apply IPMI security fix