search

fwupd / firmware-lenovo

Missing firmware for Lenovo Thinkpad hardware
121 stars 4 forks source link

Thinkpad X1 Carbon Gen 6 - Unable to apply Intel Management Engine updates #58

Closed belminf closed 4 years ago

belminf commented 4 years ago

Describe the bug

I perform an update and reboot but the update is still seen as available despite Update State showing success in fwupdmgr get-updates output.

This is to upgrade Intel Management Engine from 184.55.3510 to 184.70.3626.

Steps to Reproduce

  1. Run fwupdmgr refresh --force && fwupdmgr update
  2. Reboot
  3. Check fwupdmgr get-updates

Expected behavior

I expect the update to apply or see something helpful in the debug output.

fwupd version information

$  fwupdmgr --version
client version: 1.4.0
compile-time dependency versions
        gusb:   0.3.4
        efivar: 37
daemon version: 1.4.0

Installed via pacman: https://www.archlinux.org/packages/?name=fwupd

fwupd device information

$ fwupdmgr get-devices --show-all-devices

20KH002KUS
│
├─Thunderbolt Controller:
│     Device ID:           76755e859785d05252ff0ed3740d95e4dea9e1f7
│     Summary:             Unmatched performance for high-speed I/O
│     Current version:     43.00
│     Vendor:              Lenovo (TBT:0x0109)
│     GUIDs:               5ff9544e-fce2-5fd9-9cd2-671c95ac91dc
│                          b8360cb5-b152-506a-9990-49d7bbbc3b88
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Device stages updates
│   
├─Embedded Controller:
│     Device ID:           9698faabddf0d7b18925cfbbda95f8b0d0dacc53
│     Current version:     0.1.20
│     Minimum Version:     0.1.20
│     Vendor:              DMI:LENOVO
│     GUID:                3babca5f-b2bf-4f4b-a72e-2bdc84eb4019
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Device is usable for the duration of the update
│   
├─Intel AMT [unprovisioned]:
│     Device ID:           e2623122c99d58220498aacbfcfdb1baebbae3c5
│     Summary:             Hardware and firmware technology for remote out-of-band management
│     Current version:     11.8.55.3510
│     Bootloader Version:  11.8.55.3510
│     Vendor:              Intel Corporation
│     GUID:                2800f812-b7b4-2d4b-aca8-46e0ff65814c
│     Device Flags:        • Internal device
│   
├─Intel Management Engine:
│     Device ID:           e563ad307df81c99f0de8c26292afd71cf409673
│     Current version:     184.55.3510
│     Minimum Version:     0.0.1
│     Vendor:              DMI:LENOVO
│     Update State:        success
│     Last modified:       2020-04-27 02:40
│     GUIDs:               42a0a96e-c9f3-438f-9687-7826be33e4ce
│                          375afb87-ea51-5a6e-96d5-c35cc342dc65
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Device is usable for the duration of the update
│   
├─Intel(R) Core™ i7-8650U CPU @ 1.90GHz:
│     Device ID:           4bde70ba4e39b28f9eab1628f9dd6e6244c03027
│     Current version:     0xca
│     Vendor:              GenuineIntel
│     GUID:                b9a2dd81-159e-5537-a7db-e7101d164d3f
│     Device Flags:        • Internal device
│   
├─LENSE30512GMSP34MEAT3TA:
│     Device ID:           04e17fcf7d3de91da49a163ffe4907855c3648be
│     Summary:             NVM Express Solid State Drive
│     Current version:     2.5.0412
│     Vendor:              Lenovo (NVME:0x17AA)
│     GUIDs:               124c38ac-0100-5a50-aac8-89602d99769f
│                          70cc283d-bc6c-5b87-9977-17c5f95c3168
│                          0a2bdb12-23de-5728-829f-b1674e12dde0
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Device is usable for the duration of the update
│   
├─System Firmware:
│     Device ID:           1c53551e7da69d896138fac1ae131c83ad46d923
│     Current version:     0.1.46
│     Minimum Version:     0.0.1
│     Vendor:              LENOVO (DMI:LENOVO)
│     Update Message:      Platform firmware measurement unavailable. Secure boot is disabled in BIOS setup, enabling it may fix this issue
│     GUID:                a4b51dca-8f97-4310-8821-3330f83c9135
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Cryptographic hash verification is available
│                          • Device is usable for the duration of the update
│   
├─TPM:
│     Device ID:           c6a80ac3a22083423992a3cb15018989f37834d6
│     Current version:     7.63.13.6400
│     Vendor:              Infineon (TPM:IFX)
│     GUIDs:               ff71992e-52f7-5eea-94ef-883e56e034c6
│                          5eebb112-75ad-5536-b173-a11eb3399402
│                          ddf995da-1b32-5a8a-bc1b-8d5af4b38b51
│                          6d81ab63-db2e-50ac-934f-6be9accf5e02
│                          301555de-680d-5ddc-b995-7553fc9138f1
│     Device Flags:        • Internal device
│   
├─UHD Graphics 620:
│     Device ID:           bbbf1ce3d1cf15550c3760b354592040292415bb
│     Current version:     07
│     Vendor:              Intel Corporation (PCI:0x8086)
│     GUIDs:               fed2efa4-7045-55a1-b4fc-b29283d59fe5
│                          8b72a10c-1279-5f8e-a28a-34fb11a58240
│     Device Flags:        • Internal device
│                          • Cryptographic hash verification is available
│   
├─USB 2.0 BILLBOARD:
│     Device ID:           f5fdd0fbd4f9d9178f8242646a9ca13dc7c18e82
│     Summary:             USB PD
│     Current version:     135.36.8.3
│     Vendor:              VIA Technologies Inc. (USB:0x2109)
│     GUIDs:               474609c1-31b5-5369-9026-52d54d4b5f1f
│                          f93e1236-4fcc-58d2-84a1-772870e3d609
│                          f4681e09-eb1a-58e1-811a-851bfee8d210
│     Device Flags:        • Updatable
│                          • Cryptographic hash verification is available
│   
├─USB2.0 Hub:
│     Device ID:           1f914e619b232dc4da68ec3389b98b20163003a2
│     Summary:             USB 2.x Hub
│     Current version:     3.83
│     Vendor:              VIA Labs, Inc. (USB:0x2109)
│     Install Duration:    15 seconds
│     GUIDs:               db31bd61-b70f-553d-a94f-c579fa11bf40
│                          3f0581b6-15ed-5f87-91eb-296db71e0838
│                          4ae82b4d-0b4c-537a-b242-f689010b7571
│                          21f194f1-3152-5555-b816-a7596f49e897
│                          bd26f184-e083-5c0c-89c0-0b84d5092660
│                          8453111a-0e73-51f4-877f-fa340d8b2c03
│     Device Flags:        • Updatable
│                          • Cryptographic hash verification is available
│                          • Device stages updates
│                          • Device can recover flash failures
│   
├─USB3.0 Hub:
│     Device ID:           da77984c82b59c6fc69516431f467fd9a8d39a7f
│     Summary:             USB 3.x Hub
│     Current version:     3.83
│     Vendor:              VIA Labs, Inc. (USB:0x2109)
│     Install Duration:    15 seconds
│     GUIDs:               95d09348-73f7-5964-ae90-54c6b1ad5bbf
│                          26f33695-3a3e-5c08-badb-f6141390ebd9
│                          10eb3a15-c177-5810-af53-1963e9200e65
│                          9b27397e-3d9d-5466-bb1c-592066d7a037
│                          9e4db2b9-3a4f-5548-84e7-d8f71b68c1bb
│                          022d2f73-4826-546a-ba0f-62579ea848ea
│     Device Flags:        • Updatable
│                          • Cryptographic hash verification is available
│                          • Device stages updates
│                          • Device can recover flash failures
│   
└─Unifying Receiver:
  │   Device ID:           159fd929f7a8953aa5c72ab84ca4a0dfb570a304
  │   Summary:             A miniaturised USB wireless receiver
  │   Current version:     RQR12.09_B0030
  │   Bootloader Version:  BOT01.04_B0016
  │   Vendor:              USB:0x046D
  │   Install Duration:    30 seconds
  │   GUIDs:               9d131a0c-a606-580f-8eda-80587250b8d6
  │                        fcf55bf5-767b-51ce-9c17-f6f538c4ee9f
  │                        279ed287-3607-549e-bacc-f873bb9838c4
  │   Device Flags:        • Updatable
  │ 
  └─Logitech MX Ergo:
        Device ID:         0725f56fcc31166728ee7869f0271627456a7330
        Summary:           Unifying Trackball
        Current version:   MPM06.03_B0022
        Bootloader Version:BOT49.00_B0001
        Vendor:            USB:0x046D
        GUIDs:             1b0b15e1-ecfb-5b35-b93a-6c43d6dcced3
                           e0979ae2-dcd4-55ea-81b1-7508cc6b0ea1
                           f132524b-dca0-5ea4-9f59-fde02c7361ac
        Device Flags:      • Updatable

System UEFI configuration

$ efibootmgr -v

BootNext: 0000
BootCurrent: 0002
Timeout: 0 seconds
BootOrder: 0000,0002,001A,0018,0019,001B,001D,001E,001F,0024,001C
Boot0000* Linux-Firmware-Updater    HD(1,GPT,7d8d2739-7f31-4c57-b0e0-5f3341858b11,0x800,0x95801)/File(\EFI\arch\fwupdx64.efi)
Boot0002* Arch  HD(1,GPT,7d8d2739-7f31-4c57-b0e0-5f3341858b11,0x800,0x95801)/File(\EFI\Arch\grubx64.efi)
Boot0010  Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9)
Boot0011  Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850)
Boot0012  Diagnostic Splash Screen  FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380)
Boot0013  Lenovo Diagnostics    FvFile(3f7e615b-0d45-4f80-88dc-26b234958560)
Boot0014  Regulatory Information    FvFile(478c92a0-2622-42b7-a65d-5894169e4d24)
Boot0015  Startup Interrupt Menu    FvFile(f46ee6f4-4785-43a3-923d-7f786c3c8479)
Boot0016  Rescue and Recovery   FvFile(665d3f60-ad3e-4cad-8e26-db46eee9f1b5)
Boot0017  MEBx Hot Key  FvFile(ac6fd56a-3d41-4efd-a1b9-870293811a28)
Boot0018  USB CD    VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,86701296aa5a7848b66cd49dd3ba6a55)
Boot0019  USB FDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,6ff015a28830b543a8b8641009461e49)
Boot001A* NVMe0 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a400)
Boot001B  ATA HDD0  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f601)
Boot001C* USB HDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,33e821aaaf33bc4789bd419f88c50803)
Boot001D  PCI LAN   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)
Boot001E  Other CD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a35406)
Boot001F  Other HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f606)
Boot0020* USBR BOOT CDROM   PciRoot(0x0)/Pci(0x14,0x0)/USB(11,1)
Boot0021* USBR BOOT Floppy  PciRoot(0x0)/Pci(0x14,0x0)/USB(11,0)
Boot0022* ATA HDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f6)
Boot0023* ATAPI CD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a354)
Boot0024* PCI LAN   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)
$ efivar -l | grep fw

0abba7dc-e516-4167-bbf5-4d9d1c739416-fwupd-42a0a96e-c9f3-438f-9687-7826be33e4ce-0
0abba7dc-e516-4167-bbf5-4d9d1c739416-fwupd-ux-capsule
$ tree /boot/EFI

/boot/EFI
└── Arch
    ├── fw
    │   ├── fwupd-3b8c8162-188c-46a4-aec9-be43f1d65697.cap
    │   └── fwupd-42a0a96e-c9f3-438f-9687-7826be33e4ce.cap
    ├── fwupdx64.efi
    └── grubx64.efi

Additional questions

Additional info

$ sudo fwupdate -L
../fwupd-1.4.0/plugins/uefi/efi/fwupdate.c:158:fwup_populate_update_table(): Found update fwupd-ux-capsule
../fwupd-1.4.0/plugins/uefi/efi/fwupdate.c:158:fwup_populate_update_table(): Found update fwupd-42a0a96e-c9f3-438f-9687-7826be33e4ce-0
../fwupd-1.4.0/plugins/uefi/efi/fwupdate.c:564:efi_main(): No updates to process.  Called in error
keithy999 commented 4 years ago

I have the same laptop as above and am experiencing the same issue :(

dubinsky commented 4 years ago

I see the same on ThinkPad X1 Yoga 3rd Gen

renffah commented 4 years ago

I'm experiencing the same issue with my X1 Carbon 6th Gen. Except Version 184.70.3626 is already installed and the new Version is 184.77.3664.

When updating to 184.77.3664, the Bootscreen is showing that it is applying the capsule and after another reboot it shows for a second that it is updating the firmware.

But if I reinstall 184.70.3626, the updating firmware message is shown for about half a minute.

The regular System firmware update from 1.46 to 1.48 worked as expected, but no change to the UEFI Device firmware update process.

$ fwupdmgr get-devices 
20KGS2A900
│
├─ […]
│   
├─System Firmware:
│     Device ID:           1c53551e7da69d896138fac1ae131c83ad46d923
│     Current version:     0.1.48
│     Minimum Version:     0.0.1
│     Vendor:              LENOVO (DMI:LENOVO)
│     GUID:                a4b51dca-8f97-4310-8821-3330f83c9135
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Cryptographic hash verification is available
│                          • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:           e563ad307df81c99f0de8c26292afd71cf409673
│     Current version:     184.70.3626
│     Minimum Version:     184.70.3626
│     Vendor:              DMI:LENOVO
│     Update State:        success
│     GUID:                42a0a96e-c9f3-438f-9687-7826be33e4ce
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Device is usable for the duration of the update
│   
└─ […]
ozbenh commented 4 years ago

Same problem here on ThinkPad X1 gen 6

ankostis commented 4 years ago

@renfahh reports about 184.77.3664, dupe of fwupd/firmware-lenovo-thinkpad#57 & fwupd/firmware-lenovo-thinkpad#56

ackerleytng commented 4 years ago

Same issue here. I was able to update all the other packages by installing them individually using fwupdmgr install [FILE].

$ fwupdmgr get-updates
• Thunderbolt Controller has the latest available firmware version
• Embedded Controller has the latest available firmware version
• System Firmware has the latest available firmware version
• UEFI Device Firmware has no available firmware updates
• WDC PC SN720 SDAQNTW-512G-1001 has the latest available firmware version
20KHCTO1WW
│
└─Intel Management Engine:
  │   Device ID:           29749712e93b58730ecd1b8537a5503ff5b7fb27
  │   Current version:     184.70.3626
  │   Minimum Version:     184.70.3626
  │   Vendor:              DMI:LENOVO
  │   Update State:        success
  │   GUID:                9c9d9769-32fa-4841-b550-ea998e754e99
  │   Device Flags:        • Internal device
  │                        • Updatable
  │                        • Requires AC power
  │                        • Supported on remote server
  │                        • Needs a reboot after installation
  │                        • Device is usable for the duration of the update
  │ 
  └─ThinkPad X1 Carbon 6th Consumer ME Update:
        New version:       184.77.3664
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad X1 Carbon 6th Consumer ME Firmware
        License:           Proprietary
        Size:              2.2 MB
        Created:           2016-07-08
        Urgency:           High
        Vendor:            Lenovo Ltd.
        Flags:             is-upgrade
        Description:       Version 11.8.77.3664 (LVFS: 184.77.3664)

        2020.01 Q1 Intel Platform Update (IPU), formerly known as Quarterly security release (QSR)

        Several security fixes and enhancements are on this release.

        Security issues fixed:

         • CVE-2020-0531
         • CVE-2020-0532
         • CVE-2020-0533
         • CVE-2020-0535
         • CVE-2020-0536
         • CVE-2020-0537
         • CVE-2020-0538
         • CVE-2020-0539
         • CVE-2020-0540
         • CVE-2020-0545
         • CVE-2020-0594
         • CVE-2020-0595
         • CVE-2020-0596
         • CVE-2020-8674

My boot order lock is disabled, and I'm using an NVMe disk.

hughsie commented 4 years ago

Deduping with https://github.com/fwupd/firmware-lenovo-thinkpad/issues/56 as it has more debugging there.