search

fwupd / firmware-lenovo

Missing firmware for Lenovo Thinkpad hardware
121 stars 4 forks source link

'authentication signing error' for Intel Thinkpad L14/L15 Gen 3 #408

Open VictorGob opened 9 months ago

VictorGob commented 9 months ago

Thinkpad L14/L15 Gen 3. Unable to update:

$ fwupdmgr --version
runtime   org.freedesktop.fwupd         1.7.9
runtime   com.dell.libsmbios            2.4
compile   org.freedesktop.gusb          0.3.10
compile   com.hughsie.libjcat           0.1.9
runtime   org.kernel                    6.5.0-14-generic
compile   org.freedesktop.fwupd         1.7.9
runtime   org.freedesktop.gusb          0.3.10
fwupdmgr get-devices --show-all-devices ``` 21C1002SSP │ ├─12th Gen Intel Core™ i7-1255U: │ Device ID: 4bde70ba4e39b28f9eab1628f9dd6e6244c03027 │ Current version: 0x00000430 │ Vendor: Intel │ GUID: b9a2dd81-159e-5537-a7db-e7101d164d3f │ 30249f37-d140-5d3e-9319-186b1bd5cac3 │ ab855c04-4ff6-54af-8a8a-d8193daa0cd8 │ d49f8285-de61-572f-ae6d-b83795576416 │ Device Flags: • Internal device │ ├─Display controller: │ Device ID: 5792b48846ce271fab11c4a545f7a3df0d36e00a │ Current version: 0c │ Vendor: Intel Corporation (PCI:0x8086) │ GUID: 4d8d65f2-65ba-5333-b5ec-ab226494fed7 │ 5ec24b2a-3bc3-548b-befa-7f65a3dec395 │ a67b547a-8ece-5f7d-a489-0d75d0f2eaf6 │ 7fc247b0-a7a8-55a7-b29c-ffb9725436dc │ Device Flags: • Internal device │ • Cryptographic hash verification is available │ ├─Embedded Controller: │ Device ID: ae1abd099407b1d95698d69b7273f7fed5c6f35c │ Summary: UEFI ESRT device │ Current version: 0 │ Vendor: Lenovo (DMI:LENOVO) │ Update State: Failed │ Update Error: failed to update to 0: authentication signing error │ GUID: 61b65ccc-0116-4b62-80ed-ec5f089ae523 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─Integrated Camera: │ Device ID: 54dda0fbfd5ac0dee5efc0ec4baefc9190d666ac │ Current version: 56.20 │ Vendor: Chicony Electronics Co.,Ltd. (USB:0x04F2) │ GUID: b687616d-e0bc-58d3-9022-8f0065eed4ca │ bcd2c020-e315-55aa-b7e1-7d2d7108037e │ Device Flags: • Updatable │ ├─Intel Management Engine: │ Device ID: 97b6fe9b220c7b9e1a3a1d9f404c00d4fe77ae7e │ Summary: UEFI ESRT device │ Current version: 1.27.2176 │ Minimum Version: 0.0.1 │ Vendor: Lenovo (DMI:LENOVO) │ Update State: Success │ GUID: 10cba2e7-8db3-411e-957a-ab83c2083f25 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─Intel Management Engine: │ Device ID: f95c9218acd12697af946874bfe4239587209232 │ Summary: UEFI ESRT device │ Current version: 1.27.2176 │ Vendor: Lenovo (DMI:LENOVO) │ Update State: Success │ GUID: 23192307-d667-4bdf-af1a-6059db171246 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─Prometheus: │ │ Device ID: aa4b7bf130da693bbf1a8a785ad830190788233b │ │ Summary: Fingerprint reader │ │ Current version: 10.01.3478575 │ │ Vendor: Synaptics (USB:0x06CB) │ │ Install Duration: 2 seconds │ │ GUID: d67c4925-e30f-53e6-abc6-e7af0e4c5884 │ │ 659f7e45-8d45-528d-b3c7-0695eed055f6 │ │ Device Flags: • Updatable │ │ • Supported on remote server │ │ • Cryptographic hash verification is available │ │ • Signed Payload │ │ │ └─Prometheus IOTA Config: │ Device ID: 9382250e49c47a2854a1485dbbb221b39853bacd │ Summary: Fingerprint reader config │ Current version: 0008 │ Minimum Version: 0008 │ Vendor: Synaptics (USB:0x06CB) │ GUID: 49a675dd-c0d7-5c08-b19a-78fdfb9ea399 │ d2e397c9-fe28-5506-bf0d-b5860baa33ba │ Device Flags: • Updatable │ • Only version upgrades are allowed │ • Signed Payload │ ├─System Firmware: │ │ Device ID: 632acf4927c0b5fb53519d6beed3b60adb73f1d5 │ │ Summary: UEFI ESRT device │ │ Current version: 0.1.10 │ │ Vendor: Lenovo (DMI:LENOVO) │ │ Update State: Failed │ │ Update Error: failed to update to 0: authentication signing error │ │ GUID: 562a0522-d1a0-4b88-ad34-3cfda8788412 │ │ 230c8b18-8d9b-53ec-838b-6cfc0383493a │ │ Device Flags: • Internal device │ │ • Updatable │ │ • System requires external power source │ │ • Supported on remote server │ │ • Needs a reboot after installation │ │ • Cryptographic hash verification is available │ │ • Device is usable for the duration of the update │ │ │ └─UEFI dbx: │ Device ID: 362301da643102b9f38477387e2193e57abaa590 │ Summary: UEFI revocation database │ Current version: 267 │ Minimum Version: 267 │ Vendor: UEFI:Linux Foundation │ Install Duration: 1 second │ GUID: 14503b3d-73ce-5d06-8137-77c68972a341 │ 5971a208-da00-5fce-b5f5-1234342f9cf7 │ c6682ade-b5ec-57c4-b687-676351208742 │ f8ba2887-9411-5c36-9cee-88995bb39731 │ Device Flags: • Internal device │ • Updatable │ • Needs a reboot after installation │ • Only version upgrades are allowed │ • Signed Payload │ ├─TPM: │ Device ID: c6a80ac3a22083423992a3cb15018989f37834d6 │ Current version: 1.512.0.0 │ Vendor: ST Microelectronics (TPM:STM) │ GUID: ff71992e-52f7-5eea-94ef-883e56e034c6 │ 84df3581-f896-54d2-bd1a-372602f04c32 │ bfaed10a-bbc1-525b-a329-35da2f63e918 │ 70b7b833-7e1a-550a-a291-b94a12d0f319 │ 06f005e9-cb62-5d1a-82d9-13c534c53c48 │ Device Flags: • Internal device │ ├─UEFI Device Firmware: │ Device ID: a45df35ac0e948ee180fe216a5f703f32dda163f │ Summary: UEFI ESRT device │ Current version: 17111571 │ Minimum Version: 15 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 67daef6c-6765-4aa3-be06-529c3b3ce6c6 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 349bb341230b1a86e5effe7dfe4337e1590227bd │ Summary: UEFI ESRT device │ Current version: 70151 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 4e88068b-41b2-4e05-893c-db0b43f7d348 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 4b78f537b7d3e281a2ecbc83048b8856fb9eb98e │ Summary: UEFI ESRT device │ Current version: 16777223 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 094484f0-204d-488c-99db-a8426117cbcc │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 2656b5b7e7c4f91fef1537f93095449cda5fb264 │ Summary: UEFI ESRT device │ Current version: 0 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 3a244308-4c8e-4abf-adcc-c99e4f37363f │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: de4826630a1fc5be5355c9b6b2c4052051f350c6 │ Summary: UEFI ESRT device │ Current version: 1 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: d855de5e-0293-4cd7-be42-0bbcb7e3b394 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 2292ae5236790b47884e37cf162dcf23bfcd1c60 │ Summary: UEFI ESRT device │ Current version: 1 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 69585d92-b50a-4ad7-b265-2eb1ae066574 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: d96de5c124b60ed6241ebcb6bb2c839cb5580786 │ Summary: UEFI ESRT device │ Current version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 76ca0ad8-4a14-4389-b7e5-fd88791762ad │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: f37fb01122dd62c773f4e84ec89737e059712d59 │ Summary: UEFI ESRT device │ Current version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 626d93db-2c42-48c3-915a-71f968a81b04 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 36efb79c255f402f619fa9eb53cd659db51f2a04 │ Summary: UEFI ESRT device │ Current version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 86a885ee-d71e-2ed6-0fc1-9d6ccc9677eb │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 11a7fbdd09ce583e58b899660fe10f147fd155a2 │ Summary: UEFI ESRT device │ Current version: 22048 │ Minimum Version: 1 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 08aaac05-25b8-4cd1-97b2-d19748d00d74 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: a083ebc5138e5e071ef7270cc9a8280722cc7adf │ Summary: UEFI ESRT device │ Current version: 196608 │ Minimum Version: 57374 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 09f77c9f-1c5d-4616-bafb-bbb19f557480 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UEFI Device Firmware: │ Device ID: 5bfc5b91c18ef8b751d3d052af77b69ebf738038 │ Summary: UEFI ESRT device │ Current version: 532 │ Vendor: DMI:LENOVO │ Update State: Success │ GUID: 88523ddf-3aac-41f6-b15f-dc7bea434b39 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─UMIS RPJTJ512MGE1QDQ: │ Device ID: 03281da317dccd2b18de2bd1cc70a782df40ed7e │ Summary: NVM Express solid state drive │ Current version: 1.5Q0630 │ Vendor: Union Memory (Shenzhen) (NVME:0x1CC4) │ GUID: c3fe86aa-308e-53bc-aa93-00faaac3ef75 │ 437d6904-49e7-551e-bbe9-1ae691ea1a37 │ 6df6872d-19f7-5035-b85c-7c760034c77d │ 1d6b808f-3aac-5c20-8496-8a1433de5b80 │ 918e52f5-17f2-5b89-b030-6eef6ff9ffd9 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ └─USB4 host controller: Device ID: b69e952bfa5a911d1b49b7aad938e33e06abcda2 Summary: Unmatched performance for high-speed I/O Vendor: INTEL (THUNDERBOLT:0x8087) GUID: d651f364-21d8-5cc3-9790-dd019a8958ef 5041b15d-6e1c-5681-86b3-bb1d56993357 e72e778e-94f7-5ed2-b560-1c1262ee217c Device Flags: • Internal device • System requires external power source • Signed Payload ```

OS: Ubuntu 22.04.3 LTS CPU: 12th Gen Intel(R) Core(TM) i7-1255U

hughsie commented 9 months ago

@mrhpearson are we tracking this already?

mrhpearson commented 9 months ago

Thanks Richard.

Two separate issues going on here I think

1 - @kmauleon - I'm assuming you're already working on the ME update issue as that's common across a lot of platforms. Please confirm.

2 - For the EC: The EC version 0 is very wrong - your system cannot have version zero. Can you please go into the BIOS setup screen (F1 during early boot) and confirm what you see there and we'll figure out the next steps based on that.

Just an advance note that I'm travelling this week so replies may be delayed.

kmauleon commented 9 months ago

for MEFW, ODM owner still working on this... i'll check with them again... thank you

VictorGob commented 9 months ago

2 - For the EC: The EC version 0 is very wrong - your system cannot have version zero. Can you please go into the BIOS setup screen (F1 during early boot) and confirm what you see there and we'll figure out the next steps based on that.

EC = Embbedded Controller Version? in BIOS: R1XHT25W (1.08)

Other info in BIOS:

VictorGob commented 9 months ago

Lenovo ThinkPad L14/L15 Gen 3 Consumer ME: R1XMA13W/R1XMA13N Firmware has been updated (or at least no longer appears as updatable).

Any update on the rest of the issues? Do you need more information from me?

Note: the laptop is connected via USB-C to a Lenovo Gen2 dock, but it does not appear listed in fwupdmgr get-devices --show-all-devices (I think).

kmauleon commented 8 months ago

@VictorGob can you please confirm MEFW version via fwupdmgr get-devices shows the correct one >>> 1.27.2176

VictorGob commented 8 months ago

Correct version:

├─Intel Management Engine: │ Device ID: f95c9218acd12697af946874bfe4239587209232 │ Summary: UEFI ESRT device │ Current version: 1.27.2176 │ Vendor: Lenovo (DMI:LENOVO) │ Update State: Success │ GUID: 23192307-d667-4bdf-af1a-6059db171246 │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ Device Requests: • Message

kmauleon commented 8 months ago

thank you very much for the confirmation @VictorGob! I guess MEFW version issue was fixed already. let's wait for @mrhpearson for BIOS/EC updates

mrhpearson commented 8 months ago

What happens if you try and update only the BIOS?

I checked the FW release notes and I couldn't see anything highlighted as update issues or steps needed. If you're not able to update the BIOS from LVFS we can work thru doing it manually as you are on a quite old version.

Maybe - if the BIOS update to latest doesn't work you can try BIOS 1.11 - https://fwupd.org/downloads/0d328386f2dd531d2189b89ccde0e5b1dddffb4912d219d2bc4d44f728cd48d6-Lenovo-ThinkPad-L14Gen3-SystemFirmware-0.1.11.cab I think we need to get the BIOS updated first so the EC version is not reported as zero.

Mark

VictorGob commented 8 months ago

I've tried to install it, but it throws an error:

$ fwupdmgr local-install 0d328386f2dd531d2189b89ccde0e5b1dddffb4912d219d2bc4d44f728cd48d6-Lenovo-ThinkPad-L14Gen3-SystemFirmware-0.1.11.cab invalid handle

hughsie commented 8 months ago

invalid handle

@superm1 is that a snap issue?

superm1 commented 8 months ago

That's probably https://github.com/fwupd/fwupd/issues/6730

superm1 commented 8 months ago

Put it in the local automatic repo instead for a workaround.

VictorGob commented 8 months ago

I've tried the "copy to root" workaround

$ sudo fwupdmgr install /root/0d328386f2dd531d2189b89ccde0e5b1dddffb4912d219d2bc4d44f728cd48d6-Lenovo-ThinkPad-L14Gen3-SystemFirmware-0.1.11.cab Decompressing… [ - ] No supported devices found

superm1 commented 8 months ago

I've tried the "copy to root" workaround

$ sudo fwupdmgr install /root/0d328386f2dd531d2189b89ccde0e5b1dddffb4912d219d2bc4d44f728cd48d6-Lenovo-ThinkPad-L14Gen3-SystemFirmware-0.1.11.cab Decompressing… [ - ] No supported devices found

This is no longer a snap issue afaict. It means the cab isn't matching the device or device not found.

mrhpearson commented 8 months ago

Hmmm - your GUID doesn't match what is in the capsule metadata.

├─System Firmware: │ │ Device ID: 632acf4927c0b5fb53519d6beed3b60adb73f1d5 │ │ GUID: 562a0522-d1a0-4b88-ad34-3cfda8788412 │ │ 230c8b18-8d9b-53ec-838b-6cfc0383493a

vs (from the capsule metadata)

5dc5d695-c24f-4723-aa17-1b30f79c6d19

I'll need to ask the FW team about this I'm afraid (I'm not on the VPN right now - will try and remember to do it later on with my regular work PC - but nag me if I haven't posted a ticket number by Tuesday). I'm guessing we'll need to update from UEFI shell, but would like to get the FW team to review first.

If there's any history to the updates that might explain why this system is in this strange state that would be useful. Mark