kasuganosoras / SuperMicro-IPMI-LicenseGenerator

🔑 SuperMicro 超微主板 IPMI 高级功能授权解锁 Key 生成工具
MIT License
443 stars 101 forks source link

What about SFT-DCMS-SINGLE License key? #7

Open fueradeservicio opened 2 years ago

fueradeservicio commented 2 years ago

Is it prossible to als get the SFT-DCMS-SINGLE license hey, in order to be able to use html5

helixzz commented 2 years ago

Bump!

Yes SFT-DCMS-SINGLE key is mandatory for using HTML5 iKVM with remote media on newer Supermicro boards. I'm really looking forward to a keygen for this. The SFT-DCMS-SINGLE key is different from SFT-OOB-LIC which this project generates.

Conkernel commented 2 years ago

I was unable to find a kerygen for it

Please, let me know if you fin somethin usefull

Regards

helixzz commented 2 years ago

image FYI there is a comparison table of different types of licenses.

Conkernel commented 2 years ago

Thanks for the pic.

The one I'm looking for is DCMS-Single, but I'm still unable to find a keygen or patch in order to generate my serial number and activate it on my server.

guruevi commented 1 year ago

Use the other key https://peterkleissner.com/2018/05/27/reverse-engineering-supermicro-ipmi/

Conkernel commented 1 year ago

Hi,

My board is a X9SRL-F. I tried to follow the steps in the previous post but it seems that my firmware is not very similar to the one in the tutorial.

Is there any way to get sure that my board is compatible with html5, and that I can enable/use it?

Here is a pic of IPMIView in windows. The html button is greyed out. image

Thanks very much!!

zsrv commented 1 year ago

Check here: https://github.com/zsrv/supermicro-product-key

LittleNewton commented 1 year ago

@zsrv

Unfortunately, this script and your utility both do not support the SuperMicro H12SSL-i platform. Is there an easy way to generate a signature? I find a method to make it by changing the MAC address of BMC, and I am going to try it.

zsrv commented 1 year ago

@zsrv

Unfortunately, this script and your utility both do not support the SuperMicro H12SSL-i platform. Is there an easy way to generate a signature? I find a method to make it by changing the MAC address of BMC, and I am going to try it.

@LittleNewton unfortunately no. The signature field in the JSON format keys used by most 12th generation platforms is an RSA signature of a hash of the BMC MAC address + "LicenseID" value + "LicenseName" value + "CreateDate" value. We cannot generate the signatures without Supermicro's RSA private key.

Please tell me the results of your experiment, I am interested to know. In my utility's README are some JSON licenses I found, along with their associated BMC MAC addresses, if this helps.

LittleNewton commented 1 year ago

@zsrv Now I make it!

My H12SSL-i got an SFT-DCMS-SINGLE license with MAC address modification and related license importing.

You can use ipmitools to change the MAC address and then import a known license bonded with the new MAC address over the web BMC.

image

image

I can give you a simple tutorial to change the MAC address.

Backup the old MAC address.

ipmitool.exe -H %bmc_ip% -U admin -P %pwd% lan print 1 | findstr /C:"MAC Address" > ..\record_mac.txt

Change MAC address

%mac% = <YOUR NEW MAC ADDR>
ipmitool.exe -H %bmc_ip% -U admin -P %pwd% lan set 1 macaddr %mac%

Upload a related license

The license file should be named license.lic with contents like the following (maybe you should convert it to compact JSON format):

{
  "ProductKey": {
    "Node": {
      "LicenseID": "2",
      "LicenseName": "SFT-DCMS-SINGLE",
      "CreateDate": "20221127"
    },
    "Signature": "G+TytC4djqOPofRQ8oADSAu6E6HebjOB4YrlVngSQSrappFfNmrPIIcdQsjYux/d8zNHLAaCQl9njtW14GSrjFz2E0YNqRwehvmn9KUAt9RaQHaOSggabCeNvrvlcjre9dkoK44Nn/I4GPzDpymPFUCPi77kf0MxrTqm67vxcMq9BvMxTe7IQWajfYW9brQsTKx9foKsppK+tFjkO5hZMtTqix+9pzDCEqzGUt93EwnJC5CxbhSIZqbV2yrAuvTz06oXfv78CF1gSRImawoarHQ5tKno7BVG+1kRwLwjzKYpPDGLVGkFI+Yhx15A76ASUym1NcO/kWJAhfhw899NMA=="
  }
}
zsrv commented 1 year ago

@LittleNewton very nice, thank you for sharing!

llity commented 1 year ago

@LittleNewton 新的mac地址在哪里找哦

vinson0231 commented 1 year ago

@zsrv Now I make it!

My H12SSL-i got an SFT-DCMS-SINGLE license with MAC address modification and related license importing.

You can use ipmitools to change the MAC address and then import a known license bonded with the new MAC address over the web BMC.

image

image

I can give you a simple tutorial to change the MAC address.

Backup the old MAC address.

ipmitool.exe -H %bmc_ip% -U admin -P %pwd% lan print 1 | findstr /C:"MAC Address" > ..\record_mac.txt

Change MAC address

%mac% = <YOUR NEW MAC ADDR>
ipmitool.exe -H %bmc_ip% -U admin -P %pwd% lan set 1 macaddr %mac%

Upload a related license

The license file should be named license.lic with contents like the following (maybe you should convert it to compact JSON format):

{
  "ProductKey": {
    "Node": {
      "LicenseID": "2",
      "LicenseName": "SFT-DCMS-SINGLE",
      "CreateDate": "20221127"
    },
    "Signature": "G+TytC4djqOPofRQ8oADSAu6E6HebjOB4YrlVngSQSrappFfNmrPIIcdQsjYux/d8zNHLAaCQl9njtW14GSrjFz2E0YNqRwehvmn9KUAt9RaQHaOSggabCeNvrvlcjre9dkoK44Nn/I4GPzDpymPFUCPi77kf0MxrTqm67vxcMq9BvMxTe7IQWajfYW9brQsTKx9foKsppK+tFjkO5hZMtTqix+9pzDCEqzGUt93EwnJC5CxbhSIZqbV2yrAuvTz06oXfv78CF1gSRImawoarHQ5tKno7BVG+1kRwLwjzKYpPDGLVGkFI+Yhx15A76ASUym1NcO/kWJAhfhw899NMA=="
  }
}

最大的问题就是没有MAC

llity commented 1 year ago

只能等完美的激活方式?估计难了

vinson0231 commented 1 year ago

只能等完美的激活方式?估计难了

如果不能解决JSON签名问题那应该很难实现吧,之前只有少数的X12可以使用non-json,X13已经全部使用json key了。主要是超微支持KVM和raid在线管理的[SFT-DCMS-SINGLE key太贵了150刀,比起戴尔的授权贵太多了,而且戴尔的基本授权除了KVM不能用其他都可以用,感觉超微特别小气。

renjieliu1 commented 1 year ago

so sad.

artlessknave commented 1 year ago

Hi,

My board is a X9SRL-F. I tried to follow the steps in the previous post but it seems that my firmware is not very similar to the one in the tutorial.

X9 boards do not have HTML5. there is no way to license it because it doesn't exist. HMTL5 is only available on x10 and newer.

d3dx9 commented 1 year ago

https://github.com/zsrv/supermicro-product-key - you can take this one, generate it with for example:

supermicro-product-key.exe nonjson encode --sku SFT-DCMS-SINGLE ac1f6bexxxx

Take that string and install it with Supermicro SUM like that

.\sum.exe -i 172.18.1.236 -u ADMIN -p ADMIN -c ActivateProductKey --key {insert-key-from-above}

After that you should see Node product key (SFT-DCMS-SINGLE) is activated for 172.18.1.236.

It worked for me on H11SSL-i

scjtqs2 commented 1 year ago

My h12ssl-nt worked fine

1. change your bmc mac address to 3CECEF72FC46

ipmitool -H $host -U ADMIN -P $password lan set 1 macaddr 3C:EC:EF:72:FC:46

2. use this license.lic

{"ProductKey":{"Node":{"LicenseID":"2","LicenseName":"SFT-DCMS-SINGLE","CreateDate":"20220614"},"Signature":"ZKFCkgKEYh9+8MNZW7RfPlt/nRxQJGJ0kLHLkalLt1tpgs4MTLHrXvp/eZzfhSPUb5qMNu9RkFn9MaukK6vNXlOIG7ijbR+vjkxVcdIIkMnhzHFLxE/0ws74/lJyGLkSO1jHRQRaczSDuHgzSgsWivjHejB/tRlSpnAEM7FplgyuBSbisek8pEgSKua5jCf7Zn4sjYXXO7T9rTV4aFq090XgRbEay45eBSGpun9pcyGs8UIeNH93qzqCmlkcjj+bFSNcm3VeucEjScE3fzqG93NMEQQWYEdsYcuJb4a+kWP/ffFvyVRWvqSWvPgD5N+eNqKAmmC4MmjykRy3DWw4fA=="}}
scjtqs2 commented 1 year ago
image
NekoYyang commented 11 months ago
图像

X12DAI-N6 worked well

OMSKremer commented 9 months ago

My h12ssl-nt worked fine

1. change your bmc mac address to 3CECEF72FC46

ipmitool -H $host -U ADMIN -P $password lan set 1 macaddr 3C:EC:EF:72:FC:46

2. use this license.lic

{"ProductKey":{"Node":{"LicenseID":"2","LicenseName":"SFT-DCMS-SINGLE","CreateDate":"20220614"},"Signature":"ZKFCkgKEYh9+8MNZW7RfPlt/nRxQJGJ0kLHLkalLt1tpgs4MTLHrXvp/eZzfhSPUb5qMNu9RkFn9MaukK6vNXlOIG7ijbR+vjkxVcdIIkMnhzHFLxE/0ws74/lJyGLkSO1jHRQRaczSDuHgzSgsWivjHejB/tRlSpnAEM7FplgyuBSbisek8pEgSKua5jCf7Zn4sjYXXO7T9rTV4aFq090XgRbEay45eBSGpun9pcyGs8UIeNH93qzqCmlkcjj+bFSNcm3VeucEjScE3fzqG93NMEQQWYEdsYcuJb4a+kWP/ffFvyVRWvqSWvPgD5N+eNqKAmmC4MmjykRy3DWw4fA=="}}

Do u change the mac address back to the original one, or is this detected and key is invalid after that?

Sieboldianus commented 9 months ago

https://github.com/zsrv/supermicro-product-key - you can take this one, generate it with for example:

supermicro-product-key.exe nonjson encode --sku SFT-DCMS-SINGLE ac1f6bexxxx

Take that string and install it with Supermicro SUM like that

.\sum.exe -i 172.18.1.236 -u ADMIN -p ADMIN -c ActivateProductKey --key {insert-key-from-above}

After that you should see Node product key (SFT-DCMS-SINGLE) is activated for 172.18.1.236.

It worked for me on H11SSL-i

Does not work on: Supermicro X12STL-IF

Output:

Supermicro Update Manager (for UEFI BIOS) 2.13.0 (2023/08/25) (x86_64)
Copyright(C) 2013-2023 Super Micro Computer, Inc. All rights reserved.
......
********************************<<<<<ERROR>>>>>*********************************

ExitCode                = 11
Description             = Invalid command line data
Program Error Code      = 216.48
Error message:
        Product key format error!!

********************************************************************************

@scjtqs2 This worked! 184 EUR saved.

I used ipmi tool and had to reduce my password length to 16, otherwise I would get lan: password is longer than 16 bytes..

@OMSKremer Note that it is not possible to revert back to the original MAC address. The license file tab would still show SFT-DCMS-SINGLE license, but HTML5 Virtual Media says it requires a SFT-DCMS-SINGLE license.

BrianInAz commented 8 months ago

Hi,

My board is a X9SRL-F. I tried to follow the steps in the previous post but it seems that my firmware is not very similar to the one in the tutorial.

Is there any way to get sure that my board is compatible with html5, and that I can enable/use it?

The html button is greyed out.

Did you get this to work? HTML on x9 board?

artlessknave commented 8 months ago

there is no html5 on x9 boards. it's impossible to get it work, because the functionality is not present. x10 and higher is required for html5

0xlitf commented 6 months ago

My h12ssl-nt worked fine

1. change your bmc mac address to 3CECEF72FC46

ipmitool -H $host -U ADMIN -P $password lan set 1 macaddr 3C:EC:EF:72:FC:46

2. use this license.lic

{"ProductKey":{"Node":{"LicenseID":"2","LicenseName":"SFT-DCMS-SINGLE","CreateDate":"20220614"},"Signature":"ZKFCkgKEYh9+8MNZW7RfPlt/nRxQJGJ0kLHLkalLt1tpgs4MTLHrXvp/eZzfhSPUb5qMNu9RkFn9MaukK6vNXlOIG7ijbR+vjkxVcdIIkMnhzHFLxE/0ws74/lJyGLkSO1jHRQRaczSDuHgzSgsWivjHejB/tRlSpnAEM7FplgyuBSbisek8pEgSKua5jCf7Zn4sjYXXO7T9rTV4aFq090XgRbEay45eBSGpun9pcyGs8UIeNH93qzqCmlkcjj+bFSNcm3VeucEjScE3fzqG93NMEQQWYEdsYcuJb4a+kWP/ffFvyVRWvqSWvPgD5N+eNqKAmmC4MmjykRy3DWw4fA=="}}

Do u change the mac address back to the original one, or is this detected and key is invalid after that?

Thank you, works on X13DEi!

bankroft commented 3 months ago

My h12ssl-nt worked fine

1. change your bmc mac address to 3CECEF72FC46

ipmitool -H $host -U ADMIN -P $password lan set 1 macaddr 3C:EC:EF:72:FC:46

2. use this license.lic

{"ProductKey":{"Node":{"LicenseID":"2","LicenseName":"SFT-DCMS-SINGLE","CreateDate":"20220614"},"Signature":"ZKFCkgKEYh9+8MNZW7RfPlt/nRxQJGJ0kLHLkalLt1tpgs4MTLHrXvp/eZzfhSPUb5qMNu9RkFn9MaukK6vNXlOIG7ijbR+vjkxVcdIIkMnhzHFLxE/0ws74/lJyGLkSO1jHRQRaczSDuHgzSgsWivjHejB/tRlSpnAEM7FplgyuBSbisek8pEgSKua5jCf7Zn4sjYXXO7T9rTV4aFq090XgRbEay45eBSGpun9pcyGs8UIeNH93qzqCmlkcjj+bFSNcm3VeucEjScE3fzqG93NMEQQWYEdsYcuJb4a+kWP/ffFvyVRWvqSWvPgD5N+eNqKAmmC4MmjykRy3DWw4fA=="}}

x12sca-f can be activated,, thanks!

maxpain commented 2 months ago

Is it possible to return the Mac address after activating the license?

Sieboldianus commented 2 months ago

Note that it is not possible to revert back to the original MAC address. The license file tab would still show SFT-DCMS-SINGLE license, but HTML5 Virtual Media says it requires a SFT-DCMS-SINGLE license.

ann4belle commented 2 months ago

https://github.com/zsrv/supermicro-product-key - you can take this one, generate it with for example:

supermicro-product-key.exe nonjson encode --sku SFT-DCMS-SINGLE ac1f6bexxxx

Take that string and install it with Supermicro SUM like that

.\sum.exe -i 172.18.1.236 -u ADMIN -p ADMIN -c ActivateProductKey --key {insert-key-from-above}

After that you should see Node product key (SFT-DCMS-SINGLE) is activated for 172.18.1.236.

It worked for me on H11SSL-i

Want to say that this works perfectly on X10QBi, just replace "ac1f6bexxxx" with your board's MAC address.