Firmware update fails with "start_image() returns unsupported" on Lenovo T470s

aravindhp commented 4 years ago

$ fwupdmgr --version
client version: 1.3.3
compile-time dependency versions
    gusb:   0.3.0
    efivar: 37
daemon version: 1.3.3

$ fwupdmgr get-devices
20HGS22D00
│
├─Thunderbolt Controller:
│     Device ID:           9829435011463170d5c4af2a48d441d23f4f7a2e
│     Summary:             Unmatched performance for high-speed I/O
│     Current version:     20.00
│     Vendor:              Lenovo (TBT:0x0109)
│     GUIDs:               96c3f95f-611a-56f8-be95-0f912cb84657 ← TBT-01091609
│                          e2b1fec6-8e86-51f6-89a6-afd49e79c64b ← TBT-01091609-0000:03:00.0
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Device stages updates
│   
├─Samsung SSD 960 EVO 500GB:
│     Device ID:           e11623b2caa18fee292058a5c09ca4e6152f7ecf
│     Summary:             NVM Express Solid State Drive
│     Current version:     3B7QCXE7
│     Vendor:              Samsung Electronics Co Ltd (NVME:0x144D)
│     Serial Number:       S3X4NB0K232179V
│     GUIDs:               5b3df2da-f745-5fd0-81de-5dafd7f0bf8c ← NVME\VEN_144D&DEV_A804
│                          841f7890-a450-5aa7-8e16-9a4ad2bffedb ← Samsung SSD 960 EVO 500GB
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Needs a reboot after installation
│                          • Device is usable for the duration of the update
│   
├─System Firmware:
│     Device ID:           84149fb78009cf27cc1dd5520911f46f8792dbfe
│     Current version:     0.1.35
│     Minimum Version:     0.1.7
│     Vendor:              LENOVO
│     GUID:                7a176688-0960-47ba-931b-7829849e8347
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Cryptographic hash verification is available
│                          • Device is usable for the duration of the update
│   
├─UEFI Device Firmware:
│     Device ID:           cbede50560aaa37366326cd54923421517427f39
│     Current version:     184.50.3425
│     Minimum Version:     0.0.1
│     Update State:        success
│     GUID:                e9124c4a-fdff-42e5-b2ad-f745db345953
│     Device Flags:        • Internal device
│                          • Updatable
│                          • Requires AC power
│                          • Supported on remote server
│                          • Needs a reboot after installation
│                          • Device is usable for the duration of the update
│   
└─UEFI Device Firmware:
      Device ID:           03a6930fc4c833443a7502dde379b98b961c8c57
      Current version:     0.1.20
      Minimum Version:     0.0.1
      GUID:                e2acd8e4-a376-47bb-a316-4f1e62a8ca1f
      Device Flags:        • Internal device
                           • Updatable
                           • Requires AC power
                           • Supported on remote server
                           • Needs a reboot after installation
                           • Device is usable for the duration of the update

$ efibootmgr -v
~ efibootmgr -v
BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0000,001B,0019,0017,0018,001A,001C,001D,001E,0001
Boot0000* Fedora    HD(1,MBR,0x664cffaa,0x800,0x12c000)/File(\EFI\fedora\shimx64.efi)
Boot0001* Linux-Firmware-Updater    HD(1,MBR,0x664cffaa,0x800,0x12c000)/File(\EFI\fedora\shimx64.efi)\.f.w.u.p.d.x.6.4...e.f.i...
Boot0010  Setup FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9)
Boot0011  Boot Menu FvFile(126a762d-5758-4fca-8531-201a7f57f850)
Boot0012  Diagnostic Splash Screen  FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380)
Boot0013  Lenovo Diagnostics    FvFile(3f7e615b-0d45-4f80-88dc-26b234958560)
Boot0014  Startup Interrupt Menu    FvFile(f46ee6f4-4785-43a3-923d-7f786c3c8479)
Boot0015  Rescue and Recovery   FvFile(665d3f60-ad3e-4cad-8e26-db46eee9f1b5)
Boot0016  MEBx Hot Key  FvFile(ac6fd56a-3d41-4efd-a1b9-870293811a28)
Boot0017* USB CD    VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,86701296aa5a7848b66cd49dd3ba6a55)
Boot0018* USB FDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,6ff015a28830b543a8b8641009461e49)
Boot0019* NVMe0 VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a400)
Boot001A* ATA HDD0  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f600)
Boot001B* USB HDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,33e821aaaf33bc4789bd419f88c50803)
Boot001C* PCI LAN   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)
Boot001D  Other CD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a35406)
Boot001E  Other HDD VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f606)
Boot001F* IDER BOOT CDROM   PciRoot(0x0)/Pci(0x14,0x0)/USB(11,1)
Boot0020* IDER BOOT Floppy  PciRoot(0x0)/Pci(0x14,0x0)/USB(11,0)
Boot0021* ATA HDD   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f6)
Boot0022* ATAPI CD  VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a354)
Boot0023* PCI LAN   VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)

$ efivar -l | grep fw
0abba7dc-e516-4167-bbf5-4d9d1c739416-fwupd-e9124c4a-fdff-42e5-b2ad-f745db345953-0
0abba7dc-e516-4167-bbf5-4d9d1c739416-fwupd-ux-capsule

$ tree /boot
/boot
├── config-5.3.11-300.fc31.x86_64
├── config-5.3.12-300.fc31.x86_64
├── config-5.3.8-300.fc31.x86_64
├── efi
│   └── EFI
│       ├── BOOT
│       │   ├── BOOTX64.EFI
│       │   └── fbx64.efi
│       └── fedora
│           ├── BOOTX64.CSV
│           ├── fonts
│           ├── fw
│           │   ├── fwupd-3b8c8162-188c-46a4-aec9-be43f1d65697.cap
│           │   └── fwupd-e9124c4a-fdff-42e5-b2ad-f745db345953.cap
│           ├── fwupdx64.efi
│           ├── grub.cfg
│           ├── grubenv
│           ├── grubx64.efi
│           ├── mmx64.efi
│           ├── shim.efi
│           ├── shimx64.efi
│           └── shimx64-fedora.efi
├── grub2
│   ├── grubenv -> ../efi/EFI/fedora/grubenv
│   └── themes
│       └── system
│           ├── background.png
│           └── fireworks.png
├── initramfs-0-rescue-f1da7094709c4b7ab443e426b51af756.img
├── initramfs-5.3.11-300.fc31.x86_64.img
├── initramfs-5.3.12-300.fc31.x86_64.img
├── initramfs-5.3.8-300.fc31.x86_64.img
├── loader
│   └── entries
│       ├── f1da7094709c4b7ab443e426b51af756-0-rescue.conf
│       ├── f1da7094709c4b7ab443e426b51af756-5.3.11-300.fc31.x86_64.conf
│       ├── f1da7094709c4b7ab443e426b51af756-5.3.12-300.fc31.x86_64.conf
│       └── f1da7094709c4b7ab443e426b51af756-5.3.8-300.fc31.x86_64.conf
├── lost+found
├── System.map-5.3.11-300.fc31.x86_64
├── System.map-5.3.12-300.fc31.x86_64
├── System.map-5.3.8-300.fc31.x86_64
├── vmlinuz-0-rescue-f1da7094709c4b7ab443e426b51af756
├── vmlinuz-5.3.11-300.fc31.x86_64
├── vmlinuz-5.3.12-300.fc31.x86_64
└── vmlinuz-5.3.8-300.fc31.x86_64

Please answer the following questions:

Operating system and version: Fedora 31
How did you install fwupd (ex: from source, pacman, apt-get, etc): dnf install
Have you tried rebooting? Yes
Are you using an NVMe disk? Yes
Is secure boot enabled (only for the UEFI plugin)? Yes

I am running Fedora 31 on a Lenovo T470s. fwupdmgr shows that I have updates available.

~ sudo fwupdmgr refresh
Fetching metadata https://cdn.fwupd.org/downloads/firmware.xml.gz
Downloading…             [***************************************]
Fetching signature https://cdn.fwupd.org/downloads/firmware.xml.gz.asc

Successfully downloaded new metadata: 4 local devices supported

~ sudo fwupdmgr update
No upgrades for Thunderbolt Controller, current is 20.00: 20.00=same
No upgrades for System Firmware, current is 0.1.35: 0.1.35=same, 0.1.34=older, 0.1.33=older, 0.1.32=older, 0.1.31=older
Upgrade available for UEFI Device Firmware from 184.50.3425 to 184.70.3626
20HGS22D00 must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: Y
Downloading 184.70.3626 for UEFI Device Firmware...
Decompressing…           [***************************************]
Authenticating…          [***************************************]
Updating UEFI Device Firmware…                                   ]
Scheduling…              [***************************************]
Successfully installed firmware
No upgrades for UEFI Device Firmware, current is 0.1.20: 0.1.20=same

An update requires a reboot to complete. Restart now? [Y|n]: Y

On the reboot, I see the following which I have transcribed below:

dpath: \EFI\fedora\shimx64.efi
path: \fwupdx64.efi
Found update fwupd-e9124c4a-fdff-42e5-b2ad-f745db345953-0
Adding new capsule
Adding new capsule
Adding new capsule
WARNING: Could not query capsule capabilities: Unsupported
WARNING: Could not apply capsules: Unsupported
start_image() returned Unsupported

On rebooting I see the same available firmware update. Is there a workaround or fix for this?

joakim-tjernlund commented 4 years ago

vaguely rembering something similar, you might need fwupd >= 1.3.4

hughsie commented 4 years ago

Unsupported means the existing uefi firmware is unable to update. If you update to something newer using a CD-RW from Lenovo manually, then the bios will be new enough to use with fwupd.

aravindhp commented 4 years ago

I already did that for the BIOS (system-firmware) and am at the latest version.

aravindhp commented 4 years ago

I don't see a way to update the UEFI Device Firmware using an ISO, and this is what is failing for me through fwupdatemgr.

joakim-tjernlund commented 4 years ago

download the ISO ig, use geteltorito to convert it to USB format, then in BIOS mode you update from your USB stick

aravindhp commented 4 years ago

There is no ISO for updating the UEFI Device Firmware at Lenovo support. I could only find an ISO for System Firmware and I already used the ISO to update that.

joakim-tjernlund commented 4 years ago

hmm, and there is no EFI mode you can select in that BIOS ?

aravindhp commented 4 years ago

There is and that is what I am using. Otherwise I wouldn't even get far enough for fwupdmgr to pick up that there are updates available.

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

cryptomilk commented 4 years ago

I'm running into the same issue with a Lenovo X1 Carbon Gen6!

fwupd is version 1.3.6. Updating the firmware fails with the described error from above.

I've updated the BIOS via the CD image from the Lenovo website a month ago. Updating to the latest version fails again.

cryptomilk commented 4 years ago

The System Firmware update with fwupd got correctly installed. However the UEFI Firmware always fails.

Upgrade available for UEFI Device Firmware from 184.55.3510 to 184.70.3626
Upgrade available for UEFI Device Firmware from 0.1.18 to 0.1.19

It could also be a bug in the Lenovo update routine. Is there a way to report bugs to Lenovo?

cryptomilk commented 4 years ago

Just updated with BIOS Update from Bootable CD and if I run fwupdmgr update it offers an update for:

20KGS23S10                                                                                    
│                                                                                                                                                                                            
└─UEFI Device Firmware:                                                                       
  │   Device ID:           e563ad307df81c99f0de8c26292afd71cf409673
  │   Current version:     184.55.3510

If I try to update this it fails with the mentioned error.

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

cryptomilk commented 4 years ago

...

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

Jamstah commented 4 years ago

Seeing the same error on a Lenovo P52:

dpath: \EFI\fedora\shimx64.efi
path: \fwupdx64.efi
Found update fwupd-<id>
Adding new capsule
Adding new capsule
Adding new capsule
WARNING: Could not query capsule capabilities: Unsupported
WARNING: Could not apply capsules: Unsupported
start_image() returned Unsupported

Running Fedora 31:

[jammy@ibm007470 ~]$ rpm -qa | grep fwupd
fwupd-1.3.9-2.fc31.x86_64

Based on the recommendations here I updated the BIOS with ISO to make sure it was up to date, so that's at latest.

This one says it updated, then on reboot, I get the message above:

[jammy@ibm007470 ~]$ sudo fwupdmgr get-updates
[sudo] password for jammy: 
• Thunderbolt Controller has the latest available firmware version
• CT500BX100SSD1 has no available firmware updates
• SAMSUNG MZVLB512HAJQ-000L7 has the latest available firmware version
• System Firmware has the latest available firmware version
• UEFI Device Firmware has the latest available firmware version
• UEFI Device Firmware has no available firmware updates
20MAS1721M
│
└─UEFI Device Firmware:
  │   Device ID:           619057f1d0da67b3fa4e9f74e09fc9218ce32643
  │   Current version:     192.10.1127
  │   Minimum Version:     0.0.1
  │   Vendor:              DMI:LENOVO
  │   Update State:        success
  │   GUID:                971682af-21a0-46e3-91c0-825702c2ba70
  │   Device Flags:        • Internal device
  │                        • Updatable
  │                        • Requires AC power
  │                        • Supported on remote server
  │                        • Needs a reboot after installation
  │                        • Device is usable for the duration of the update
  │ 
  ├─ThinkPad P52/ThinkPad P72 Corporate ME Update:
  │     New version:       192.47.1524
  │     Remote ID:         lvfs
  │     Summary:           Lenovo ThinkPad P52/P72 Corporate ME Firmware
  │     Licence:           Proprietary
  │     Size:              12.2 MB
  │     Vendor:            Lenovo Ltd.
  │     Flags:             is-upgrade
  │     Description:       • 0 Q2'19 Intel Platform Update (Hot Fix Release)
  │     
  │     Version 12.0.47.1524 (LVFS: 192.47.1524)
  │     
  │     Problem Fixes
  │     
  │      • Intel CSME PSIRT-TA-201905-011 Q2 2019 IPU:
  │      • Mitigated the following security vulnerabilities under issues:
  │     
  │     Security issues fixed:
  │     
  │      • CVE-2019-0086
  │      • CVE-2019-0090
  │      • CVE-2019-0092
  │      • CVE-2019-0093
  │      • CVE-2019-0094
  │      • CVE-2019-0096
  │      • CVE-2019-0097
  │      • CVE-2019-0098
  │      • CVE-2019-0153
  │      • CVE-2019-0170
  │   
  └─ThinkPad P52/ThinkPad P72 Corporate ME Update:
        New version:       192.35.1427
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad P52/P72 Corporate ME Firmware
        Licence:           Proprietary
        Size:              12.2 MB
        Vendor:            Lenovo Ltd.
        Flags:             is-upgrade
        Description:       • 0 Quarterly Security Release

        Version 12.0.35.1427 (LVFS: 192.35.1427)

        Problem Fixes

         • Intel CSME PSIRT-TA-201901-002 Q1 2019 QSR:

        Security issues fixed:

         • CVE-2019-0086
         • CVE-2019-0090
         • CVE-2019-0092
         • CVE-2019-0093
         • CVE-2019-0094
         • CVE-2019-0096
         • CVE-2019-0097
         • CVE-2019-0098
         • CVE-2019-0153
         • CVE-2019-0170

aravindhp commented 4 years ago

Continue to see this issue with newer versions of fwupdmgr

 ~  fwupdmgr --version
client version: 1.4.1
compile-time dependency versions
    gusb:   0.3.4
    efivar: 37
daemon version: 1.4.1

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

mmckinst commented 4 years ago

It is still happening.

bliemli commented 4 years ago

Same problem here on a Lenovo Thinkpad T480s:

../plugins/uefi/efi/fwupdate.c:158:fwup_populate_update_table(): Found update fwupd-ux-capsule
../plugins/uefi/efi/fwupdate.c:158:fwup_populate_update_table(): Found update fwupd-676af093-2a5c-4238-9c29-db8063a33532-0
../plugins/uefi/efi/fwupdate.c:577:efi_main(): Adding new capsule
../plugins/uefi/efi/fwupdate.c:198:fwup_search_file(): Searching Device Path: HD(1,MBR,0xE222E51F)/\EFI\fedora\fw\fwupd-3b8c8162-188c-46a4-aec9-be43f1d65697.cap...
../plugins/uefi/efi/fwupdate.c:218:fwup_search_file(): Device Path prepared: HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:228:fwup_search_file(): Device supporting SFSP: PciRoot(0)/Pci(0x1D,0x0)/Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and PciRoot(0)/Pci(0x1D,0x0)/Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and Pci(0x1D,0x0)/Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:240:fwup_search_file(): Match up! Returning \EFI\fedora\fw\fwupd-3b8c8162-188c-46a4-aec9-be43f1d65697.cap
../plugins/uefi/efi/fwupdate.c:300:fwup_open_file(): Found device
../plugins/uefi/efi/fwupdate.c:307:fwup_open_file(): Found volume
../plugins/uefi/efi/fwupdate.c:315:fwup_open_file(): Found file
../plugins/uefi/efi/fwupdate.c:415:fwup_add_update_capsule(): Read file; 57538 bytes
../plugins/uefi/efi/fwupdate.c:416:fwup_add_update_capsule(): updates guid: 3B8C8162-188C-46A4-AEC9-BE43F1D65697
../plugins/uefi/efi/fwupdate.c:417:fwup_add_update_capsule(): File guid: 3B8C8162-188C-46A4-AEC9-BE43F1D65697
../plugins/uefi/efi/fwupdate.c:434:fwup_add_update_capsule(): Checking GOP for ux capsule
../plugins/uefi/efi/fwupdate.c:577:efi_main(): Adding new capsule
../plugins/uefi/efi/fwupdate.c:198:fwup_search_file(): Searching Device Path: HD(1,MBR,0xE222E51F)/\EFI\fedora\fw\fwupd-676af093-2a5c-4238-9c29-db8063a33532.cap...
../plugins/uefi/efi/fwupdate.c:218:fwup_search_file(): Device Path prepared: HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:228:fwup_search_file(): Device supporting SFSP: PciRoot(0)/Pci(0x1D,0x0)/Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and PciRoot(0)/Pci(0x1D,0x0)/Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and Pci(0x1D,0x0)/Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and Pci(0x0,0x0)/Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and Path(131,23,0x01000000A0329941DA01129684012C00)/HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:231:fwup_search_file(): Comparing: HD(1,MBR,0xE222E51F) and HD(1,MBR,0xE222E51F)
../plugins/uefi/efi/fwupdate.c:240:fwup_search_file(): Match up! Returning \EFI\fedora\fw\fwupd-676af093-2a5c-4238-9c29-db8063a33532.cap
../plugins/uefi/efi/fwupdate.c:300:fwup_open_file(): Found device
../plugins/uefi/efi/fwupdate.c:307:fwup_open_file(): Found volume
../plugins/uefi/efi/fwupdate.c:315:fwup_open_file(): Found file
../plugins/uefi/efi/fwupdate.c:415:fwup_add_update_capsule(): Read file; 2210336 bytes
../plugins/uefi/efi/fwupdate.c:416:fwup_add_update_capsule(): updates guid: 676AF093-2A5C-4238-9C29-DB8063A33532
../plugins/uefi/efi/fwupdate.c:417:fwup_add_update_capsule(): File guid: 676AF093-2A5C-4238-9C29-DB8063A33532
../plugins/uefi/efi/fwupdate.c:593:efi_main(): n_updates: 2
../plugins/uefi/efi/fwupdate.c:458:fwup_apply_capsules(): Could not query capsule capabilities: Unsupported
../plugins/uefi/efi/fwupdate.c:608:efi_main(): Could not apply capsules: Unsupported

Running Fedora 32:

rpm -q fwupd
fwupd-1.4.2-2.fc32.x86_64

Manually updated BIOS so everything else is on the latest version except the "ThinkPad T480s Consumer ME Update" which cannot be applied because of above error.

sudo fwupdmgr get-updates 
• Thunderbolt Controller has the latest available firmware version
• Embedded Controller has the latest available firmware version
• LENSE30512GMSP34MEAT3TA has the latest available firmware version
• System Firmware has the latest available firmware version
• UEFI Device Firmware has no available firmware updates
20L7001LMZ
│
└─Intel Management Engine:
  │   Device ID:           cf3ad1e5e6838b09cba64bb5ccb1142dd44995d2
  │   Current version:     184.70.3626
  │   Minimum Version:     184.70.3626
  │   Vendor:              DMI:LENOVO
  │   Update State:        success
  │   GUID:                676af093-2a5c-4238-9c29-db8063a33532
  │   Device Flags:        • Internal device
  │                        • Updatable
  │                        • Requires AC power
  │                        • Supported on remote server
  │                        • Needs a reboot after installation
  │                        • Device is usable for the duration of the update
  │ 
  └─ThinkPad T480s Consumer ME Update:
        New version:       184.77.3664
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad T480s Consumer ME Firmware
        License:           Proprietary
        Size:              2.2 MB
        Created:           2016-07-08
        Urgency:           High
        Vendor:            Lenovo Ltd.
        Flags:             is-upgrade
        Description:       Version 11.8.77.3664 (LVFS: 184.77.3664)

        2020.01 Q1 Intel Platform Update (IPU), formerly known as Quarterly security release (QSR)

        Several security fixes and enhancements are on this release.

        Security issues fixed:

         • CVE-2020-0531
         • CVE-2020-0532
         • CVE-2020-0533
         • CVE-2020-0535
         • CVE-2020-0536
         • CVE-2020-0537
         • CVE-2020-0538
         • CVE-2020-0539
         • CVE-2020-0540
         • CVE-2020-0545
         • CVE-2020-0594
         • CVE-2020-0595
         • CVE-2020-0596
         • CVE-2020-8674

joakim-tjernlund commented 4 years ago

Maybe the Consumer ME Update is broken? My T480s works with the Enterprise ME Update

bliemli commented 4 years ago

Maybe the Consumer ME Update is broken? My T480s works with the Enterprise ME Update

Firmware updates using fwupd haven't been working for me for several months now with the exact same error message as I reported above.

kmauleon commented 4 years ago

Hi.... ThinkPad T480s Latest Version: 184.77.3664 has been reuploaded... please check... thank you very much.

aravindhp commented 4 years ago

I am still seeing the same issue on a Lenovo T470s

kmauleon commented 4 years ago

I am still seeing the same issue on a Lenovo T470s

hi @aravindhp ...called the attention of the owner... please wait for update...thank you very much

Crapshit commented 4 years ago

Having the exact same issue on my ThinkPad X1 Carbon G7 running on Manjaro with latest fwupdmgr:

WARNING: Could not query capsule capabilities: Unsupported
WARNING: Could not apply capsules: Unsupported

[root@myhost ~]# fwupdmgr --version
client version: 1.4.5
compile-time dependency versions
    gusb:   0.3.4
    efivar: 37
daemon version: 1.4.5

kmauleon commented 4 years ago

hi @Crapshit .. i am not familiar with Manjaro but can you please submit results of below command? thank you very much...

fwupdmgr get-devices

Crapshit commented 3 years ago

@kmauleon Sorry for replying so late.

Here are my results:

20QD00L7GE
│
├─Thunderbolt Controller:
│     Device ID:          6a48cb173143bfe843d2bd9b94eec6cd18663676
│     Zusammenfassung:    Unmatched performance for high-speed I/O
│     Current version:    44.00
│     Vendor:             Lenovo (TBT:0x0109)
│     GUIDs:              74cdddba-f7b6-5a31-a3dc-64186b5a5491 ← THUNDERBOLT\VEN_0109&DEV_1801&REV_00
│                         18bb00e3-5d7a-55d3-831e-0e000c184b0e ← THUNDERBOLT\VEN_0109&DEV_1801
│                         c7920601-0cda-507f-851e-92229eb1d370 ← TBT-01091801-native
│                         96c6512b-0138-51da-b02f-f44f2c4c7744 ← TBT-01091801-native-controller0-0
│     Device Flags:       • Internal device
│                         • Updatable
│                         • Requires AC power
│                         • Supported on remote server
│                         • Device stages updates
│   
├─Touchpad:
│     Device ID:          91961e6ddc950eb21e71db6f33ec09a133933a95
│     Current version:    1.3.3013412
│     Bootloader Version: 8.0.0
│     Vendor:             Synaptics (HIDRAW:0x06CB)
│     GUIDs:              10010313-27c0-5c7f-bd99-955028fd3a01 ← HIDRAW\VEN_06CB&DEV_CD8C&REV_00
│                         71463ccd-7553-5d7d-9fac-7ed8073a7853 ← HIDRAW\VEN_06CB&DEV_CD8C
│                         981824ee-4283-595b-a2e4-46eae92dba40 ← SYNAPTICS_RMI\TM3468-010
│                         0957b08b-b580-5c3a-8073-98b9bb15bc7f ← SYNAPTICS_RMI\TM3468
│     Device Flags:       • Internal device
│                         • Updatable
│                         • Supported on remote server
│   
├─UEFI dbx:
│     Device ID:          362301da643102b9f38477387e2193e57abaa590
│     Zusammenfassung:    UEFI Revocation Database
│     Current version:    77
│     Minimum Version:    77
│     Vendor:             UEFI:Linux Foundation
│     Install Duration:   1 second
│     GUIDs:              14503b3d-73ce-5d06-8137-77c68972a341 ← UEFI\CRT_A9087D1044AD18F7A94916D284CBC01827CF23CD8F60B79072C9CAA1FEF4D649
│                         5971a208-da00-5fce-b5f5-1234342f9cf7 ← UEFI\CRT_A9087D1044AD18F7A94916D284CBC01827CF23CD8F60B79072C9CAA1FEF4D649&ARCH_X64
│                         c6682ade-b5ec-57c4-b687-676351208742 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503
│                         f8ba2887-9411-5c36-9cee-88995bb39731 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_X64
│     Device Flags:       • Internal device
│                         • Updatable
│                         • Needs a reboot after installation
│   
└─WDC PC SN720 SDAQNTW-512G-1001:
      Device ID:          3743975ad7f64f8d6575a9ae49fb3a8856fe186f
      Zusammenfassung:    NVM Express Solid State Drive
      Current version:    10190101
      Vendor:             Sandisk Corp (NVME:0x15B7)
      Serial Number:      192649806942
      GUIDs:              137520ce-3603-53e6-9165-56694ed744e7 ← NVME\VEN_15B7&DEV_5002&REV_00
                          ff2112dc-038c-596d-90ca-d43c5077c6ec ← NVME\VEN_15B7&DEV_5002
                          63af1441-fb24-5368-b450-886fbc98610b ← WDC PC SN720 SDAQNTW-512G-1001
      Device Flags:       • Internal device
                          • Updatable
                          • Requires AC power
                          • Supported on remote server
                          • Needs a reboot after installation
                          • Device is usable for the duration of the update

EDIT: @kmauleon One more info I updated in the meantime my bios via Boot ISO from Lenovo. Now I'm on BIOS version 1.38 with Embedded Controller version 1.21. This version is from "2020-08-24" according to the BIOS main page.

kmauleon commented 3 years ago

hi @Crapshit ... it seems you already have the latest system firmware. you may want to run the following commands as well to check for additional firmware updates if any... thank you very much

fwupdmgr refresh fwupdmgr update

Crapshit commented 3 years ago

@kmauleon: Right, I was on the latest and greatest bios 1.38 for my Thinkpad X1 7th Gen. Today I saw an update for my Thinkpad and today I tried updating it with Ubuntu 20.04 instead of Manjaro. Ubuntu is using an older version of fwupdmgr, because it is not a rolling release and this was the first time I did an update via fwupdmgr for my bios.

So right now I don't have any version numbers for you for fwupdmgr and other stuff, but I could do a lookup if you can say me what I should share for you. The last bios from September was not possible to install on distribution Manjaro with latest and greatest patch status:

Package (ID) UEFI BIOS (BIOS ID) ECP (ECP ID) Rev. Issue Date

1.40 (N2HUR32W) 1.40 (N2HET57W) 1.21 (N2HHT38W) 01 2020/10/16 1.38-1.21 (N2HUR30W) 1.38 (N2HET55W) 1.21 (N2HHT38W) 01 2020/09/24

And I also reset my bios to defaults before I tried to update it to 1.38 with Manjaro as read in other posts.

kmauleon commented 3 years ago

hi @Crapshit ... i will forward your concern to owner but can you please show results of below command in Ubuntu... thank you very much...

fwupdmgr get-devices

kmauleon commented 3 years ago

new versions target to be released within november... please wait.. thank you very much

kmauleon commented 3 years ago

hi @Crapshit X1 Carbon 7th latest firmware available here >> https://fwupd.org/lvfs/search?value=X1+carbon+7th thank you very much

fwupd / firmware-lenovo

Firmware update fails with "start_image() returns unsupported" on Lenovo T470s #59