Failed UEFI ESRT device firmware: P15 Gen 2i

[aaroncarlucci]

fwupdmgr get-devices is reporting a failed UEFI ESRT device firmware. No available firmware updates reported. Is this something to be concerned about? Not super fluent with managing the system firmware, but willing to provide more information with some guidance. Thanks!

LENOVO 20YQCTO1WW
│
├─Battery:
│     Device ID:          f95c9218acd12697af946874bfe4239587209232
│     Summary:            UEFI ESRT device
│     Current version:    1.3.10246
│     Minimum Version:    0.0.1
│     Vendor:             Lenovo (DMI:LENOVO)
│     Update State:       Success
│     GUID:               a5aea3ab-1b50-4943-b6c9-04c041980f50
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─Embedded Controller:
│     Device ID:          2292ae5236790b47884e37cf162dcf23bfcd1c60
│     Summary:            UEFI ESRT device
│     Current version:    0.1.10
│     Minimum Version:    0.1.10
│     Vendor:             Lenovo (DMI:LENOVO)
│     Update State:       Success
│     GUID:               e8dddfb5-175b-4ca5-b77a-ddb98c30f0c0
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─GA104GLM [RTX A4000 Mobile]:
│     Device ID:          ce4c74a5188d5b9cdb1e72ed32dad2d313c1c999
│     Current version:    a1
│     Vendor:             NVIDIA Corporation (PCI:0x10DE, PCI:0x8086)
│     GUIDs:              27fac98c-fd14-5cab-91ec-9e8608cd66c3 ← PCI\VEN_10DE&DEV_24B7
│                         44d0f2cd-a579-58e2-a0f1-80008342d4e3 ← PCI\VEN_10DE&DEV_24B7&REV_A1
│                         3b61d91d-d429-5da9-b98c-5463b0d83c8f ← PCI\VEN_10DE&DEV_24B7&SUBSYS_17AA22DD
│                         e1ed92df-18d5-59d0-8622-9fe758f1ed97 ← PCI\VEN_10DE&DEV_24B7&SUBSYS_17AA22DD&REV_A1
│                         c7dac7da-12ca-57be-ba1d-8617ec295689 ← PCI\VEN_8086&DEV_9A01
│                         7305c01c-2139-594e-ace6-16ab469a5d85 ← PCI\VEN_8086&DEV_9A01&REV_05
│                         7fb4d435-3c86-5696-9909-4b1490b280fc ← PCI\VEN_8086&DEV_9A01&SUBSYS_17AA22D8
│                         848f553c-eb2d-5a8d-af50-9469cc7a25b3 ← PCI\VEN_8086&DEV_9A01&SUBSYS_17AA22D8&REV_05
│     Device Flags:       • Internal device
│                         • Cryptographic hash verification is available
│   
├─Integrated Camera:
│     Device ID:          23d940eac81a886d3523a7d731f2b68a2bedb0f7
│     Current version:    61.18
│     Vendor:             Chicony Electronics Co.,Ltd. (USB:0x04F2)
│     Serial Number:      0001
│     GUIDs:              5e9afdd3-1159-5da5-9b47-113b031f5409 ← USB\VID_04F2&PID_B6BE
│                         63fb795d-b37a-5ade-a07e-0d3df89769e3 ← USB\VID_04F2&PID_B6BE&REV_6118
│     Device Flags:       • Updatable
│   
├─Intel Management Engine:
│     Device ID:          349bb341230b1a86e5effe7dfe4337e1590227bd
│     Summary:            UEFI ESRT device
│     Current version:    240.42.2235
│     Minimum Version:    0.0.1
│     Vendor:             Lenovo (DMI:LENOVO)
│     Update State:       Success
│     GUID:               666705ce-0624-4943-8738-09829a26c8ee
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─Prometheus:
│ │   Device ID:          7c5b6dadf8126e3820c86cb56d9e1777084a98a8
│ │   Summary:            Fingerprint reader
│ │   Current version:    10.01.3478575
│ │   Vendor:             Synaptics (USB:0x06CB)
│ │   Install Duration:   2 seconds
│ │   Serial Number:      132018439291606
│ │   GUIDs:              8088f861-6318-5b1e-9ce4-fbddbedb09ac ← USB\VID_06CB&PID_00BD
│ │                       09e8bf16-3e69-50f5-bb66-c7a040248352 ← USB\VID_06CB&PID_00BD&REV_0000
│ │   Device Flags:       • Updatable
│ │                       • Supported on remote server
│ │                       • Cryptographic hash verification is available
│ │                       • Signed Payload
│ │ 
│ └─Prometheus IOTA Config:
│       Device ID:        2190699a239ed026ceb57c8cba9b179789491640
│       Summary:          Fingerprint reader config
│       Current version:  0030
│       Minimum Version:  0030
│       Vendor:           Synaptics (USB:0x06CB)
│       GUIDs:            7c5a1e62-38fa-5859-9337-09dbac6377e4 ← USB\VID_06CB&PID_00BD-cfg
│                         8a12a1dd-5e54-5cb8-9607-c3a4e3e9a7e4 ← USB\VID_06CB&PID_00BD&CFG1_3462&CFG2_500
│       Device Flags:     • Updatable
│                         • Supported on remote server
│                         • Only version upgrades are allowed
│                         • Signed Payload
│     
├─SSD 970 EVO Plus 2TB:
│     Device ID:          04e17fcf7d3de91da49a163ffe4907855c3648be
│     Summary:            NVM Express solid state drive
│     Current version:    2B2QEXM7
│     Vendor:             Samsung (NVME:0x144D)
│     Serial Number:      S4J4NX0R839196J
│     GUIDs:              47335265-a509-51f7-841e-1c94911af66b ← NVME\VEN_144D&DEV_A808
│                         6e54c992-d302-59ab-b454-2d26ddd63e6d ← NVME\VEN_144D&DEV_A808&REV_00
│                         c9d531ea-ee7d-5562-8def-c64d0d144813 ← NVME\VEN_144D&DEV_A808&SUBSYS_144DA801
│                         0b4d773a-7ac3-58c1-a541-e22ef1cdfe02 ← NVME\VEN_144D&DEV_A808&SUBSYS_144DA801&REV_00
│                         66cc31b5-6dc4-55da-9008-bf73c91a0826 ← Samsung SSD 970 EVO Plus 2TB
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Signed Payload
│   
├─SSD 970 EVO Plus 2TB:
│     Device ID:          0fba4a8bedba53076fc9b147655e59455bc25a87
│     Summary:            NVM Express solid state drive
│     Current version:    2B2QEXM7
│     Vendor:             Samsung (NVME:0x144D)
│     Serial Number:      S4J4NX0R811637H
│     GUIDs:              47335265-a509-51f7-841e-1c94911af66b ← NVME\VEN_144D&DEV_A808
│                         6e54c992-d302-59ab-b454-2d26ddd63e6d ← NVME\VEN_144D&DEV_A808&REV_00
│                         c9d531ea-ee7d-5562-8def-c64d0d144813 ← NVME\VEN_144D&DEV_A808&SUBSYS_144DA801
│                         0b4d773a-7ac3-58c1-a541-e22ef1cdfe02 ← NVME\VEN_144D&DEV_A808&SUBSYS_144DA801&REV_00
│                         66cc31b5-6dc4-55da-9008-bf73c91a0826 ← Samsung SSD 970 EVO Plus 2TB
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Signed Payload
│   
├─SSD 970 EVO Plus 2TB:
│     Device ID:          310f45f1f223064b5c16bf6dff31146755a64480
│     Summary:            NVM Express solid state drive
│     Current version:    2B2QEXM7
│     Vendor:             Samsung (NVME:0x144D)
│     Serial Number:      S4J4NX0R811644K
│     GUIDs:              47335265-a509-51f7-841e-1c94911af66b ← NVME\VEN_144D&DEV_A808
│                         6e54c992-d302-59ab-b454-2d26ddd63e6d ← NVME\VEN_144D&DEV_A808&REV_00
│                         c9d531ea-ee7d-5562-8def-c64d0d144813 ← NVME\VEN_144D&DEV_A808&SUBSYS_144DA801
│                         0b4d773a-7ac3-58c1-a541-e22ef1cdfe02 ← NVME\VEN_144D&DEV_A808&SUBSYS_144DA801&REV_00
│                         66cc31b5-6dc4-55da-9008-bf73c91a0826 ← Samsung SSD 970 EVO Plus 2TB
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Signed Payload
│   
├─System Firmware:
│ │   Device ID:          a45df35ac0e948ee180fe216a5f703f32dda163f
│ │   Summary:            UEFI ESRT device
│ │   Current version:    0.1.25
│ │   Vendor:             Lenovo (DMI:LENOVO)
│ │   Update State:       Success
│ │   GUIDs:              a1392d82-62d5-4e24-863a-0f682993408f
│ │                       230c8b18-8d9b-53ec-838b-6cfc0383493a ← main-system-firmware
│ │   Device Flags:       • Internal device
│ │                       • Updatable
│ │                       • System requires external power source
│ │                       • Supported on remote server
│ │                       • Needs a reboot after installation
│ │                       • Cryptographic hash verification is available
│ │                       • Device is usable for the duration of the update
│ │ 
│ ├─AMT [unprovisioned]:
│ │     Device ID:        8d5470e73fd9a31eaa460b2b6aea95483fe3f14c
│ │     Summary:          Hardware and firmware technology for remote out-of-band management
│ │     Current version:  15.0.42.2235
│ │     Bootloader Version:15.0.42.2235
│ │     Vendor:           Intel Corporation (MEI:0x8086)
│ │     GUIDs:            12f80028-b4b7-4b2d-aca8-46e0ff65814c
│ │                       0ad638e6-06cd-51c3-ab0d-d7f8f7d49418 ← MEI\VEN_8086&DEV_43E0
│ │                       6f7f3333-51b2-5cbe-8c8f-5b7d8032258d ← MEI\VEN_8086&DEV_43E0&REV_11
│ │                       2bac3a17-317d-5c15-b4f5-a710c188af35 ← MEI\VEN_8086&DEV_43E0&SUBSYS_17AA22D8
│ │                       449cdfc8-627f-5a11-879c-fe822324bfa5 ← MEI\VEN_8086&DEV_43E0&SUBSYS_17AA22D8&REV_11
│ │     Device Flags:     • Internal device
│ │   
│ ├─BootGuard Configuration:
│ │     Device ID:        b0d4430dfa6bde9f0c22680df36dbc8c15c80753
│ │     Current version:  11
│ │     Vendor:           Intel Corporation (MEI:0x8086)
│ │     GUIDs:            dd17041c-09ea-4b17-a271-5b989867ec65
│ │                       0ad638e6-06cd-51c3-ab0d-d7f8f7d49418 ← MEI\VEN_8086&DEV_43E0
│ │                       6f7f3333-51b2-5cbe-8c8f-5b7d8032258d ← MEI\VEN_8086&DEV_43E0&REV_11
│ │                       2bac3a17-317d-5c15-b4f5-a710c188af35 ← MEI\VEN_8086&DEV_43E0&SUBSYS_17AA22D8
│ │                       449cdfc8-627f-5a11-879c-fe822324bfa5 ← MEI\VEN_8086&DEV_43E0&SUBSYS_17AA22D8&REV_11
│ │     Device Flags:     • Internal device
│ │   
│ └─UEFI dbx:
│       Device ID:        362301da643102b9f38477387e2193e57abaa590
│       Summary:          UEFI revocation database
│       Current version:  217
│       Minimum Version:  217
│       Vendor:           UEFI:Linux Foundation
│       Install Duration: 1 second
│       GUIDs:            14503b3d-73ce-5d06-8137-77c68972a341 ← UEFI\CRT_A9087D1044AD18F7A94916D284CBC01827CF23CD8F60B79072C9CAA1FEF4D649
│                         5971a208-da00-5fce-b5f5-1234342f9cf7 ← UEFI\CRT_A9087D1044AD18F7A94916D284CBC01827CF23CD8F60B79072C9CAA1FEF4D649&ARCH_X64
│                         c6682ade-b5ec-57c4-b687-676351208742 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503
│                         f8ba2887-9411-5c36-9cee-88995bb39731 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_X64
│       Device Flags:     • Internal device
│                         • Updatable
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Only version upgrades are allowed
│                         • Signed Payload
│     
├─TPM:
│     Device ID:          c6a80ac3a22083423992a3cb15018989f37834d6
│     Current version:    7.2.2.0
│     Vendor:             Nuvoton Technology (TPM:NTC)
│     GUIDs:              ff71992e-52f7-5eea-94ef-883e56e034c6 ← system-tpm
│                         fac1c8f3-73c8-5cd6-8330-07a3690b5140 ← TPM\VEN_NTC&DEV_0000
│                         e4a6bfd6-81ba-5d6a-bb28-84be07ee7a29 ← TPM\VEN_NTC&MOD_NPCT75x"!!4rls
│                         e9ccc1dc-960a-5e09-afe9-e59a904b776d ← TPM\VEN_NTC&DEV_0000&VER_2.0
│                         5a6b5ab6-c483-5eec-8a34-23a6d6d120bd ← TPM\VEN_NTC&MOD_NPCT75x"!!4rls&VER_2.0
│     Device Flags:       • Internal device
│   
├─Tiger Lake-H GT1 [UHD Graphics]:
│     Device ID:          5792b48846ce271fab11c4a545f7a3df0d36e00a
│     Current version:    01
│     Vendor:             Intel Corporation (PCI:0x8086)
│     GUIDs:              a8de746a-5e87-5e0d-b546-d58484229fe9 ← PCI\VEN_8086&DEV_9A70
│                         6dd7321c-23ee-5079-b69f-18ef8bd54591 ← PCI\VEN_8086&DEV_9A70&REV_01
│                         020fa351-4b0a-5657-8877-b6c66b9596c6 ← PCI\VEN_8086&DEV_9A70&SUBSYS_17AA22D8
│                         71e17c94-e13d-55a8-88db-19216615c1dd ← PCI\VEN_8086&DEV_9A70&SUBSYS_17AA22D8&REV_01
│                         eab97dfd-8f6d-5224-96f4-d2aa7dade187 ← PCI\VEN_8086&DEV_9A70&REV_00
│                         a7dfeb7d-9745-5976-8fd2-3488f4760356 ← PCI\VEN_8086&DEV_9A70&SUBSYS_17AA22D8&REV_00
│     Device Flags:       • Internal device
│                         • Cryptographic hash verification is available
│   
├─UEFI Device Firmware:
│     Device ID:          d96de5c124b60ed6241ebcb6bb2c839cb5580786
│     Summary:            UEFI ESRT device
│     Current version:    0
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               52c9711e-7a5d-4e8d-ac4a-ba4d920a1008
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:          f37fb01122dd62c773f4e84ec89737e059712d59
│     Summary:            UEFI ESRT device
│     Current version:    28
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               e97c0e4d-defe-4d92-a079-24ebc5168046
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:          36efb79c255f402f619fa9eb53cd659db51f2a04
│     Summary:            UEFI ESRT device
│     Current version:    117572096
│     Minimum Version:    117572096
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               d9185083-864d-41de-87c6-59b01acb51d5
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:          11a7fbdd09ce583e58b899660fe10f147fd155a2
│     Summary:            UEFI ESRT device
│     Current version:    0
│     Vendor:             DMI:LENOVO
│     Update State:       Failed
│     GUID:               2f45f824-5964-4cf7-a20e-6b2a1e3e69f0
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:          a083ebc5138e5e071ef7270cc9a8280722cc7adf
│     Summary:            UEFI ESRT device
│     Current version:    2754747
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               072c0411-31b3-4e4f-85bc-1e1b5ed55223
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:          5bfc5b91c18ef8b751d3d052af77b69ebf738038
│     Summary:            UEFI ESRT device
│     Current version:    24856
│     Minimum Version:    1
│     Vendor:             DMI:LENOVO
│     Update State:       Success
│     GUID:               2bece6a9-392e-48de-9cd1-67dc82dcfead
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│   
└─Xeon W-11955M CPU @ 2.60GHz:
      Device ID:          4bde70ba4e39b28f9eab1628f9dd6e6244c03027
      Current version:    0x00000042
      Vendor:             Intel
      GUIDs:              b9a2dd81-159e-5537-a7db-e7101d164d3f ← cpu
                          30249f37-d140-5d3e-9319-186b1bd5cac3 ← CPUID\PRO_0&FAM_06
                          a6bd4ca5-75a6-5796-b564-66b5cab1b11b ← CPUID\PRO_0&FAM_06&MOD_8D
                          d9dd5e77-df17-5bab-b5ec-22827598bfed ← CPUID\PRO_0&FAM_06&MOD_8D&STP_1
      Device Flags:       • Internal device

[mrhpearson]

That's strange.... As far as I can tell - that particular device does not have any FW on LVFS (I scanned the cached metadata for the GUID). I'm assuming the system is working fine? Do you have Windows dual booted on it, or had Windows installed on it before and done any FW updates from there?

@hughsie - how does fwupd determine the Update state? Is this something I should chase up with the FW team or is it just a benign oddness?

[aaroncarlucci]

@mrhpearson Indeed, this machine dual boots Windows, and some firmware updates have been run using Lenovo Service manager (or whatever) in the past. The machine works "okay", but I've been experiencing other issues related to Nvidia drivers, Wayland and Ubuntu 23.04, which I don't assume are correlated to this issue. I'm not super experienced with managing firmware updates manually - how do you suggest to manage firmware under dual booting?

I appreciate the follow up!

edit: Ubuntu 23.04

[mrhpearson]

OK - that makes sense. I am curious what that device is - but it must have been something Windows messed up the update for. We cover most devices from Linux but panels still aren't covered - maybe it was that (though that seems unlikely as panel updates after shipping are exceedingly rare)

I suggest checking from Vantage under Windows and seeing if you can figure out what it is and hopefully completing the update there. If you figure out what the device is let me know :)

For Nvidia issues - suggest trying xorg. The Wayland support with Nvidia is still spotty - in our 22.04 preloads Canonical are still using xorg when the Nvidia driver is used (and Wayland if no Nvidia) because of issues during certification.

For managing FW and dual boot - I don't think I have any recommendations really. We work to make sure the FW updates are available in Linux so I think do whatever works best for your workflow. I personally avoid booting Windows whenever possible - but that's just me :)

Mark

[aaroncarlucci]

@mrhpearson I booted into Windows 11 and installed Vantage, but all system diagnostics checkout and there are no pending system updates. I was unaware of Vantage previously and had been using Lenovo System Update to manage firmware, which also has been reporting no updates. I'll keep an eye when I (rarely ;) boot into Windows and let you know if I see the issue resolve itself on the Linux side.

Thank you so must for the kind and informative reply. I've been trying to narrow down the hardware issues with Nvidia and Wayland, but I think a combination of the 6.2 kernel, recent Nvidia drivers with IBT support and Gnome 44.0 are a bad mix at the moment. I'm looking forward to getting this combination ironed out on my P15, so let me know if there's somewhere else I could help out with testing as you work toward the next Lenovo-certified stack!

Kind regards, Aaron

[mrhpearson]

Thanks for the update. I'm pretty clueless about how things are done in Windows but I think Vantage and System update all end up doing the same thing - guessing though....Windows world is weird.

Nividia drivers have been going through some instability recently but I think 5.25 (hope I have that right) has fixes in. My understanding is that wayland support is still iffy though :(

Mark

[hughsie]

how does fwupd determine the Update state

We're reading out the status from the ESRT table -- so it could have been the last factory preload failed and then fwupd is just reporting that. I'd be included to ignore it if there are no pending updates in either windows or linux.

[aaroncarlucci]

Ok, thanks. Good enough for me at the moment! If I ever figure out if there's a component responsible on the Windows side, I'll update here.