hughsie
commented
2 years ago @mrhpearson a mixup perhaps?
Closed mczuchnowski closed 2 years ago
hughsie
commented
2 years ago @mrhpearson a mixup perhaps?
mrhpearson
commented
2 years ago @hughsie - I'm not sure - but the file has been downloaded 167539..with 81 success reports and been available for 8M. It would seem to me the FW file itself should be fine right? I don't have a T480 to try on myself...but I feel like I'm missing something more subtle (or obvious) here.
I wonder if this is a vPro vs non-vPro issue as there are two different updates depending on which model you have. @mczuchnowski - could you confirm which you have and I'll see what I can track down here.
Mark
johnnywalls
commented
2 years ago I can confirm the same behavior on my T480, same specs and versions as the original reporter, the downloaded file is:
Upgrade available for System Firmware from 0.1.36 to 0.1.41
20L5S1HU00 must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]:
(fwupdmgr:11007): Fwupd-DEBUG: 10:32:40.066: downloading https://fwupd.org/downloads/bba2be0e31eb23d9217e6c26e26d4596065cd61ccbb03c3564ab0292500b8b84-Lenovo-ThinkPad-T480-SystemFirmware-1.41.cabLaptop model: 20L5S1HU00 (LENOVO_MT_20L5_BU_Think_FM_ThinkPad T480). All previous updates were successfully made using linux (Ubuntu 20.04, current kernel 5.11.0-46-generic).
Let me know if I can provide additional information for diagnosing the problem. Thanks again!
ida-greuelr
commented
2 years ago Same here for me on model t480 (20L5-0005GE), since months. fwupd shows ME Consumer update version 184.86.3909 (N24RN17W):
Devices with no available firmware updates:
• CT480BX500SSD1
• TOSHIBA-RC100
• Thunderbolt host controller
• UEFI Device Firmware
• UEFI Device Firmware
• UEFI dbx
Devices with the latest available firmware version:
• Embedded Controller
• System Firmware
• USB-C Dock G5
20L50005GE
│
└─Intel Management Engine:
│ Device ID: 349bb341230b1a86e5effe7dfe4337e1590227bd
│ Summary: UEFI ESRT device
│ Current version: 184.83.3874
│ Minimum Version: 184.83.3874
│ Vendor: Lenovo (DMI:LENOVO)
│ Update State: Success
│ GUIDs: 9e21f98b-fe98-455c-b388-da5450ab6979
│ b4c101ff-035f-54a0-9147-23a9954dc8e0 ← UEFI\RES_{9E21F98B-FE98-455C-B388-DA5450AB6979}
│ Device Flags: • Internal device
│ • Updatable
│ • System requires external power source
│ • Supported on remote server
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│
└─ThinkPad T480:
New version: 184.86.3909
Remote ID: lvfs
Release ID: 8333
Summary: Lenovo ThinkPad T480 Consumer ME Firmware
License: Proprietary
Size: 2,2 MB
Created: 2016-07-08
Urgency: High
Details: https://pcsupport.lenovo.com/de/en/search?query=N24RN17W
Vendor: Lenovo
Flags: is-upgrade
Description:
Lenovo ThinkPad T480 ME Firmware Version 11.8.86.3909(LVFS: 184.86.3909)
The computer will be restarted automatically after updating completely. Do NOT turn off your computer or remove the AC adaptor while update is in progress.
This stable release fixes the following issues:
• Intel CSME IPU 2021.1:
Addressed several critical security vulnerabilities.Update is starting after reboot with a blank screen, but stops with Reset system and no error message at all. When checking the results:
fwupdmgr get-results -v 349bb341230b1a86e5effe7dfe4337e1590227bd
I get the following report:
DeviceId: 349bb341230b1a86e5effe7dfe4337e1590227bd
Name: Intel Management Engine
Guid: 9e21f98b-fe98-455c-b388-da5450ab6979
Plugin: uefi_capsule
Flags: internal|updatable|require-ac|needs-reboot|reported|historical|usable-during-update
Version: 184.83.3874
Created: 2022-02-02
Modified: 2022-02-02
UpdateState: failed
UpdateError: failed to run update on reboot
[Release]
Version: 184.86.3909
Checksum: SHA1(40218561f1bf267fcfcbf57645023e6a38afb2a0)
Flags: none
LastAttemptStatus: 0x0
TpmFamily: 2.0
LastAttemptVersion: 0xb8530f22
RuntimeVersion(org.kernel): 5.16.2-1-MANJARO
HostSku: LENOVO_MT_20L5_BU_Think_FM_ThinkPad T480
RuntimeVersion(org.freedesktop.fwupd): 1.7.4
Pcr0_SHA1: 82ee06b1ea9123e10f86407b365a26411e09a365
BootMgrDesc: legacy
UEFIUXCapsule: Enabled
CpuArchitecture: x86_64
SecureBoot: Disabled
HostFamily: ThinkPad T480
CompileVersion(com.redhat.fwupdate): 12
HostVendor: LENOVO
FwupdTainted: False
RuntimeVersion(org.freedesktop.gusb): 0.3.10
RuntimeVersion(com.dell.libsmbios): 2.4
MissingCapsuleHeader: False
KernelVersion: 5.16.2-1-MANJARO
FwupdSupported: True
CompileVersion(org.freedesktop.gusb): 0.3.10
EspPath: /boot/efi
HostProduct: 20L50005GE
BootTime: 1643657489
KernelName: Linux
CapsuleApplyMethod: nvram
LinuxLockdown: none
Pcr0_SHA256: acee7afb4bec8a201cc36c20731c12eac44a505bad541e01589f0e9f46684867
EfivarNvramUsed: 29580
KernelCmdline: intel_iommu=on nvidia-drm.modeset=1 apparmor=1 security=apparmor udev.log_priority=3
DistroId: manjaro
CompileVersion(org.freedesktop.fwupd): 1.7.4
(null)%If there's anything helpful I could provide, please let me know.
mrhpearson
commented
2 years ago Cleaning up my inbox and realised this was still open. I believe the FW has been updated and is all correct - version N24RN19W (11.8.90.3987) is posted.
Hopefully when you update you don't hit the ESRT table update issue that is plaguing ME updates right now...
I'll go ahead and close the bug - let me know if any objections or concerns.
ida-greuelr
commented
2 years ago Finally,
an update for the BIOS to version 0.1.45 fixed the wrong version reporting for Intel ME and my fwupdmgr get-updates is not showing any outstanding (but already applied) upgrades.
Thanks for the ongoing work on this device.
Describe the bug fwupd shows a new version of ME available. When trying to update it, on reboot the text on splash screen says "image provided is not supported by the platform".
NOTE: BIOS shows ME version as 11.8.90.3987 which seems to be the latest version as shown on Lenovo support site for this model. Last successful ME update was in fact made using Windows, not sure if this has anything to do with the issue.
get-updatescommand shows the update as N24RN17W. fwupd.org site https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadN24RN.firmware shows the update as N24RN18W. Downloading the .cab file manually and installing it results in the same error.downgradecommand returnsNo downgrades for Intel Management Engine: current version is 184.82.3838: 184.86.3909=newer, 184.83.3874=newer, 184.82.3838=same, 184.80.3746=lowest, 184.79.3722=lowest.Steps to Reproduce Install new ME version using fwupdmgr and reboot
Expected behavior 184.86.3909 is installed and should be displayed accordingly.
fwupd version information
Please note how you installed it apt
fwupd device information
BootCurrent: 0000 Timeout: 0 seconds BootOrder: 0000,001C,0003,0017,0018,0019,001A,001B,001D,001E,001F,0024,0002 Boot0000 ubuntu HD(1,GPT,6beeb1f0-3589-407a-a421-139fb6f437c0,0x800,0x100000)/File(\EFI\ubuntu\shimx64.efi) Boot0002 Linux-Firmware-Updater HD(1,GPT,6beeb1f0-3589-407a-a421-139fb6f437c0,0x800,0x100000)/File(\EFI\ubuntu\fwupdx64.efi) Boot0003 Fedora HD(1,GPT,026fb60c-1ee3-49a0-983b-96deee8bb8b9,0x800,0x12c000)/File(\EFI\fedora\shimx64.efi) Boot0010 Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9) Boot0011 Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850) Boot0012 Diagnostic Splash Screen FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380) Boot0013 Lenovo Diagnostics FvFile(3f7e615b-0d45-4f80-88dc-26b234958560) Boot0014 Startup Interrupt Menu FvFile(f46ee6f4-4785-43a3-923d-7f786c3c8479) Boot0015 Rescue and Recovery FvFile(665d3f60-ad3e-4cad-8e26-db46eee9f1b5) Boot0016 MEBx Hot Key FvFile(ac6fd56a-3d41-4efd-a1b9-870293811a28) Boot0017 USB CD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,86701296aa5a7848b66cd49dd3ba6a55) Boot0018 USB FDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,6ff015a28830b543a8b8641009461e49) Boot0019 NVMe1 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a401) Boot001A NVMe0 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a400) Boot001B ATA HDD0 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f602) Boot001C USB HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,33e821aaaf33bc4789bd419f88c50803) Boot001D PCI LAN VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803) Boot001E Other CD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a35406) Boot001F Other HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f606) Boot0020 USBR BOOT CDROM PciRoot(0x0)/Pci(0x14,0x0)/USB(11,1) Boot0021 USBR BOOT Floppy PciRoot(0x0)/Pci(0x14,0x0)/USB(11,0) Boot0022 ATA HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f6) Boot0023 ATAPI CD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a354) Boot0024* PCI LAN VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)
0abba7dc-e516-4167-bbf5-4d9d1c739416-fwupd-9e21f98b-fe98-455c-b388-da5450ab6979-0