Firmware Version: 5.72.39
Firmware Name: SMT_MBAST2500_57239_V.bin
Firmware CRC: 4e4bf7c4
Build date: 08/25/2026
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
   [ENGINEERING] Fix Java iKVM, virtual media and Java SOL on modern JREs
   Affected Motherboard: ALL
   Affected functions: Java KVM, Virtual Media, Java SOL
Validation:
    1. Check iKVM and SOL jar download curl -sk -o /dev/null -w "%{http_code}" https://<bmc-ip>/iKVM__V1.69.22.0x0.jar Expect: 200, was 404
    2. Check both .jar.pack.gz the same way Expect: 404
    3. Check ikvm/vm certificate openssl s_client -connect <bmc-ip>:5900 and :623 Expect: valid to 2041-06-11
    4. Check webui certificate openssl s_client -connect <bmc-ip>:443 Expect: board's own certificate, independent of 5900/623
    5. Extract res/server.crt from the jar served by the BMC and handshake against port 5900 Expect: Verify return code: 0 (ok)
    6. Launch Java iKVM Expect: live video, keyboard and mouse working
    7. Mount an ISO via Virtual Media > Virtual Storage Expect: host sees the CD-ROM
    8. Launch Java SOL Expect: serial console. Requires host BIOS console redirection on the active boot path
    9. Launch HTML5 console Expect: no regression
       Additional: clear the Java cache first, the jar filename is unchanged
       Verified on B11SPE-CPU-TF and B2SS1(2)-MTF
--------------------------------------------------------------------------------
Firmware Version: 5.72.38
Firmware Name: SMT_MBAST2500_57238_V.bin
Firmware CRC: 240b2b8e
Build date: 08/17/2026
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
   [ENGINEERING] Java KVM "Connection failed" caused by expired application
   signing certificate. Re-signed Java AP packages with new certificate
   and added timestamp.
   Affected Motherboard: ALL
   Affected functions: Java KVM, Java SOL
Validation:
    1. Clear the Java cache on the client PC first: run "javaws -uninstall",
       or Java Control Panel > General > Temporary Internet Files >
       Settings > Delete Files.
       Without this, Java reuses the old cached applet and the same error
       will still appear.
    2. Web > Remote Control > Console Redirection > launch Java iKVM
       Expect: console opens, no "Connection failed" and no expired
       certificate warning. Repeat for Java SOL.
    3. Optional command-line check (needs JDK 8-13):
       curl -k -O https://<bmc-ip>/iKVM__V1.69.22.0x0.jar.pack.gz
       gunzip iKVM__V1.69.22.0x0.jar.pack.gz
       unpack200 iKVM__V1.69.22.0x0.jar.pack iKVM.jar
       jarsigner -verify -strict iKVM.jar
         Expect: "jar verified"     (old FW: "jar verified, with signer errors")
       keytool -printcert -jarfile iKVM.jar
         Expect: signer valid until Dec 2028, "Timestamp:" section present
                 (old FW: expired Nov 2024, no Timestamp section)
--------------------------------------------------------------------------------
Firmware Version: 5.72.37
Firmware Name: SMT_MBAST2500_57237_V.bin
Firmware CRC: a358e659
Build date: 07/08/2026
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
   [ENGINEERING] Fix stunnel certificate renewal feature
   Affected Motherboard: ALL
   Affected functions: Java KVM
Validation:
    1. Check webui's ssl certificate content and expiry date openssl s_client -connect <bmc-ip>:443
    2. Check ikvm's ssl certificate content and expiry date openssl s_client -connect <bmc-ip>:5900
    3. NotBefore and NotAfter should have the same date for step 1/2
    4. Upload new SSL certificate to webui and let bmc reboot
    5. Check webui's ssl certificate content and expiry date openssl s_client -connect <bmc-ip>:443
    6. Check ikvm's ssl certificate content and expiry date openssl s_client -connect <bmc-ip>:5900
    7. NotBefore and NotAfter should have the same date for step 5/6 Expect: both webui and ikvm ssl certificate updated
       Additional: Launch Java iKVM before and after SSL upload
--------------------------------------------------------------------------------
Firmware Version: 5.72.36
Firmware Name: SMT_MBAST2500_57236_V.bin
Firmware CRC: 74cb8deb
Build date: 05/07/2026
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
     [200939] - [Security] -- STD -- 19146 -- 05.72.34 -- Arbitrary File
   Infected Motherboard: ALL
   Affected functions: IPMI
   Validation:
     1) Refer to PB: 200939

1. Category: Fix
   Description:
   [226035] - CVE-2025-12006 SMC-2025100002 BRLY-2025-023 Supermicro BMC firmware update validation bypass on 8101MS
   Infected Motherboard: B11, ALL
   Affected Functions: BMC FW update validation
   Validation:
      1) Request lab to verify CVE-2025-12006.
--------------------------------------------------------------------------------
Firmware Version: 5.72.35
Firmware Name: SMT_MBAST2500_57235_V.bin
Firmware CRC: c7fa8677
Build date: 08/22/2025
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
     [190766, 190761, 190760, 190759, 190758, 190757, 190755] - Case 418135 for firmware update is Fail on H12/X12/X11/CMM3/CMM6/B11
   Infected Motherboard: H12/X12/X11/CMM3/CMM6/B11
   Affected functions: BMC FW update
   Validation:
     1) Refer to PB: 190766, 190761, 190760, 190759, 190758, 190757, 190755

2. Category: Fix
   Description:
     [ENGINEERING] - Stuck in Uncompressing Linux after FW update
   Infected Motherboard: H12/X12/X11/CMM3/CMM6/B11
   Affected functions:  BMC FW update
   Validation:
     1) Update BMC -> should not stuck in uncompressing linux when BMC boot

3. Category: Fix
   Description:
      [162092] [162093] [Security] - CSRF Token vulnerabilities
   Infected Motherboard: ALL
   Affected Functions: Web_Server
   Validation:
      Log in BMC Web UI -> Maintenance -> FW Upgrade -> upload
      FW in form with invalid or missing CSRF Token -> observe
      upgrade gets blocked
      Log in BMC Web UI -> uimapin.cgi now contains CSRF token
      header

4. Category: Fix
   Description:
      [206974][207181][Security][External](CVE-2025-7704) SMC-2025070002 Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability on B11
   Infected Motherboard: ALL
   Affected Functions: SMASH
   Validation:
      1) SSH into BMC to enter SMASH -> enter A.......Po^A control
      character -> observe code execution denied

5. Category: Fix
   Description:
   [207384] - CVE-2025-79367 SMC-20245070003 BRLY-2025-020 Supermicro BMC firmware
              update validation bypass on 8101MS
   Infected Motherboard: ALL
   Affected Functions: BMC FW update validation
   Validation:
      1) Acquire illegally modified BMC FW file from Ray Hong(SW)
      2) Update BMC using modified fw image
      3) Verify that the update fails and is successfully rejected.
--------------------------------------------------------------------------------
Firmware Version: 5.72.34
Firmware Name: SMT_MBAST2500_57234_V.bin
Firmware CRC: 7be2b1d5
Build date: 01/02/25
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Minor
   Description:
   [189501] [Security] [External](CVE-2024-10237)SMC-2024100039 BMC Firmware Image Authentication Design Issue.
   Infected Motherboard: B11
   Affected Functions: PDB Partition
   Validation:
     1) Refer to PB: 189501.

2. Category: Minor
   Description:
   [187560] [Security] [External](CVE-2024-10238)SMC-2024100040 fld->used_bytes without sanity check causes stack overflow.
   [187562] [Security] [External](CVE-2024-10239)SMC-2024100041 fat->fsd.max_fld without sanity check causes stack overflow
   Infected Motherboard: B11
   Affected Functions: PDB Partition
   Validation:
     1) Refer to PB: 187560 and 187562

3. Category: Fix
   Description:
   [174219] - User with USER privilege should only be able to view CPLD Update, and not be able to
              upload any FW.
   Infected Motherboard: B2SS1
   Affected functions: WebGui
   Validation:
    1) Create a user with USER privilege.
    2) Log in with new user.
    3) Go to Maintenance --> CPLD Update.
    4) An alert should pop up "You don't have privileges to perform this action",
       and the page should redirect you maintenance page.

4. Category: Fix
   Description:
   [184518] ECO -- 3.97 -- Web_Func -- IP Access Control able to add duplicate rules
   Infected Motherboard: X11/H11, B2SS2
   Affected functions: Configuration
   Validation:
     1) Login -> Configuration -> IP Access Control
     2) Add IP address: 10.10.10.10/32 (Accept)
     3) Click 'Save'
     3) Add same IP: 10.10.10.10/32 (Accept), NOTE: Prefix Length is 32
     4) Now will Prompt message: "There already is a rule with this IP Address: <ip_addr> please check or modify it."

5. Category: Fix
   Description:
   [187917] - [SSM 5.9.0_b1247] After adding node on SSM, the SEL log will pop-up Invalid Username or Password – Assertion log on the B11DPE
   Infected Motherboard: X11/H11, B2SS2
   Affected functions: Configuration
   Validation:
     1) get on redfish /redfish/v1/Systems/1/Bios
     2) should return 404 error code
--------------------------------------------------------------------------------
Firmware Version: 5.72.33
Firmware Name: SMT_MBAST2500_57233_V.bin
Firmware CRC: BA33FED1 
Build date: 7/26/2024
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
   [171775] Fix - Redfish automation test has failed test cases.
   Infected Motherboard: B2SS1
   Affected functions: RedFish
   Validation:
    1) POST redfish/v1/Managers/1/Actions/Oem/ManagerConfig.Reset with empty data should return 400.

2. Category: Fix
   Description:
   [179763] - [8721 -- ECO -- 3.96] Mashing Save button in IP Access Control allows the user to add multiple rules at a time.
   Infected Motherboard: B2SS2
   Affected functions: WebGUI
   Validation:
    1). Login -> Configuration -> IP Access Control
    2). Enable IP Access Control and add a new rule.
    3). When saving, mash the Save button, only one rule will be added.
    4). After saving, mash the Add button, the rule No. will not be Nan.

3. Category: Fix
   Description:
   [179686] - ECO -- 6378 -- 3.96 -- Dynamic DNS. Expecting success popup message after change and Save.
   Infected Motherboard: B2SS1
   Affected functions: WebGUI
   Validation:
    1). Login -> Configuration -> Dynamic DNS
    2). Toggle between Dynamic Update Enable and Dynamic Update Disable and Save.
    3). Enter valid Dynamic DNS Server IP and BMC Hostname if needed, or save without making any change.
    4). A success popup message will be displayed.

4. Category: Fix
   Description:
   [179727] - ECO -- 6378 -- 3.96 -- Faulty message "Please input the correct port number. (Port Range: 1 to 65535)".
   Infected Motherboard: B2SS1
   Affected functions: WebGUI
   Validation:
    1). Login -> Configuration -> Port
    2). In a port textfield, enter 0 or 65536.
    3). Click out of the textfield.
    4). The new message of "Please input the a valid port number. (Port Range: 1 to 65535)" will be displayed.

5. Category: Fix
   Description:
   [179696] - ECO 29622 ECO -- 6378 -- 3.96 -- Improve Add User with Invalid Password message. (Password must be at least 8 character long) should be (Password must be at least 8 characters long).
   Infected Motherboard: B2SS1
   Affected functions: WebGUI
   Validation:
    1). Login -> Configuration -> Users -> Add New User
    2). Enter a valid User Name, then enter a password less than 8 characters.
    3). Click "Add" button, the pop up message will have no grammar mistake.

6. Category: Fix
   Description:
   [162098] Fix - The authenticated attacker can execute OS command on BMC.
   Infected Motherboard: B11
   Affected functions: Syslog
   Validation:
    1) Login Web -> Configuration -> Syslog
    2) Edite the port value with other software will not get malicious script injected to our BMC.

7. Category: Fix
   Description:
   [174292] Fix - Failed to enable DDNS through SMCIPMITOOL
   Infected Motherboard: B2SS1
   Affected functions: Enable/Disable DDNS
   Validation:
    1) Login Web -> Configuration -> Date and Time
        Time Zone: (UTC-08:00) pacific Time (US & Canada)
        Time Update Mode: NTP
        Primary NTP Server: time.google.com
        Secondary NTP Server: 255.255.255.0
        Auto Daylight Savings Time: Checked
        Click the "Save" button
    2) Run command: SMCIPMITool.exe 10.135.169.95 ADMIN ADMIN ipmi oem x10cfg ddns state Enable
    3) Go to Configuration -> Dynamic DNS, the radio button for Dynamic Update Enable will be set to checked.
    4) Set the BMC Hostname with a string of 63 characters, click save.
    5) The BMC Hostname will be set successfully.

8. Category: fix
   Description:
   [170753] fix - Test case 0020 triggers eventlog with invalid NTP server after reset IPMI.
   Infeced Motherboard: ALL
   Affected functions: SEL
   Validation:
    1) Run SMSTC IPMIECO Test case 0020 to verify issue.

9. Category: fix
   Description:
   [162099] fix - RCE on Account Service API
   Infeced Motherboard: ALL
   Affected functions: IPMI
   Validation:
    1) Create/Delete user through web.

10. Category: fix
    Description:
    [162097] fix - RCE on Account Service API
    Infeced Motherboard: ALL
    Affected functions: IPMI
    Validation:
     1) Create/Delete user through web.

11. Category: fix
    Description:
    [174219] fix - When user logs in with "USER" privilege, user will be able to view ONLY in MEL page.
    Affected functions: Web_Server
    Validation:
     1) Go to Blade web GUI.
     2) Create User with "USER" Privilege.
     3) Login with new user, with "USER" privilege.
     4) Maintenance --> Maintenance Event Log.
     5) User will be able to view ONLY in MEL page.

12. Category: fix
    Description:
    [174094] fix - When user logs in with "USER" privilege, an alert should pop up on system page.
    Affected functions: Web_Server
    Validation:
     1) Go to Blade web GUI.
     2) Create User with "USER" Privilege.
     3) Login with new user, with "USER" privilege.
     4) An alert should pop up on system page stating
       "You don't have privileges to perform this action".

13. Category: fix
    Description:
    [174287] fix - When user logs in with "USER" privilege, an alert should pop up on system page.
    Affected functions: Web_Server
    Validation:
    1) Go to Blade web GUI.
    2) Create User with "USER" Privilege.
    3) Login with new user, with "USER" privilege.
    4) An alert should pop up on system page stating
      "You don't have privileges to perform this action".

14. Category: fix
    Description:
    [174282] Cannot download IPMI Configuration file
    Infected Motherboard: B2SS1
    Affected functions: Redfish, Web
    Validation:
     1) Download/Restore ipmi config through web

15. Category: Minor
    Description:
    [173131] [8721 -- ECO -- 05.72.31] Username in <> angle brackets appears blank in the Web UI MEL, but appears properly in the SMCIPMITool MEL
    Infected Motherboard: B11DPE-P
    Affected functions: Configuration
    Validation:
     1) IPMI Web -> Maintenance -> Maintenance Event Log

16. Category: fix
    Description:
    [173128] - Deleting a user with SMCIPMITool does not create the expected "User (X) was deleted" entry
    Infected Motherboard: B11DPE
    Affected functions: Redfish, IPMI
    Validation:
     1) SMCIPMITool create/delete account and check MEL information.

17. Category: fix
    Description:
    [162054] Fix - Stored XSS in FRU Reading in CMM
    Infected Motherboard: MICRO_BLADE
    Affected functions: Stored XSS in FRU Reading in CMM
    Validation:
     1) Login Web -> FRU Reading
     2) Edite the HTML script of web page will not get malicious HTML script injected to our FW.

18. Category: Enhancement
    Description:
    [Engineering] Remove weak cipher algorithms
    Infected Motherboard: X10_X11
    Affected functions: security
    Validation:
     1) Check port 443 and 623 for security info.
--------------------------------------------------------------------------------
Firmware Version: 5.72.32
Firmware Name: SMT_MBAST2500_57232_V.bin
Firmware CRC: 109fa390
Build date: 1/30/2024
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: fix
   Description:
    [ENGINEERING] - [Security] Account with null username cannot be deleted on web GUI on CMM
   Infected Motherboard: B1, B2, B10, B11
   Affected functions: IPMI command
   Validation:
    1) Find an un-used user ID by ipmitool user list
    2) Set User ID #9 Privilege to ADMINISTRATOR, ipmitool user priv 9 4
    3) Expected it can also Set User ID #9 Privilege to Unknown, ipmitool user priv 9 0

2. Category: Fix
   Description:
    [168756] Fix - Command injection through SMTP Username and Password should now be prevented
   Infected Motherboard: ALL
   Affected functions: SMTP
   Validation:
    1) Login the BMC
    2) Modify the request /redfish/v1/EventService/ Username or Password with evil payload
    3) Go to `Configuration->Notifications->Alerts`, Use SMTP protocol and fill in the required fields to modify the alert and enable it
    4) Send test alert

3. Category: Feature
   Description:
     Feature - Implement key obfuscation
   Infected Motherboard: B11
   Affected functions: Redfish, IPMI, Web
   Validation:
     1) POST request on /redfish/v1/UpdateService/IPMIConfig/Actions/IPMIConfig.Download and save IPMI config as save_config.bin
     2) POST request on /redfish/v1/UpdateService/IPMIConfig/Actions/IPMIConfig.Upload to upload save_config.bin

4. Category: fix
   Description:
     [166312] - M.2 not detected in sensor reading
    Infected Motherboard: B11DPT
    Infected function: IPMI
    Validation:
     1) install M.2 SSD on B11DPT -> check M.2 sensor reading

5. Category: fix
   Description:
     [163755] - changed the "Content-Security-Policy" located on the file "lighttpd.conf" by allowing "data" to be loaded from "frame-src"..
    Infected Motherboard: MBD-B1SD2-TF-P.
    Infected function: BMC Health Event Log on WebUI, BMC Sensor Log on WebUI.
   Validation:
     1)	open the BMC Webui using Firefox browser on the Web GUI -> Navigate to “System” -> “Health Event Log”.
     2)	Click on “Save” button.
     3)	Health Event Log should be downloaded successfully.
--------------------------------------------------------------------------------
Firmware Version: 5.72.31
Firmware Name: SMT_MBAST2500_57231_V.bin
Firmware CRC: 2f37c397
Build date: 10/06/2023
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: fix
   Description:
   [163552] fix - Blade wording changed accordingly, and alert message if value.length == 0
   Infected Motherboard: ALL
   Affected functions: Web_Server
   Validation:
	1) Go to Blade web GUI.
	2) Configuration --> Port
	3) Leave text input to empty an alert message should pop up to
	   enter a port range.
	4) Modify web port to 801, and SSL port to 4431 and click save.
	5) login to "BMC_IP":4431, and modify web port back to 80, and SSL port
 	   back to 443 within 1 minute. You should see correct alert message pop up
	   stating "This Port is in used"

2. Category: Fix
   Description:
    [163014] Fix - Setting to "IPv6 only" mode should now work
   Infected Motherboard: ALL
   Affected functions: Network
   Validation:
    1) Send raw command "raw 0xc 0x1 0x1 0x33 0x1" to set network mode to IPv6 only
    2) Should not return 0xCC

3. Category: Fix
   Description:
    [163012] Fix - Setting IPv6 to "disabled" mode should now work
   Infected Motherboard: ALL
   Affected functions: Network
   Validation:
    1) Send raw command "raw 0x30 0x68 0x9 0x1 0x2 0x1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0" to set IPv6 mode to "disabled"
    2) Should not return 0xCC
    3) Send raw command "raw 0x30 0x68 0x9 0x0 0x0" to read back the IPv6 mode setting. Return value should be "0x2" for "disabled".

4. Category: Fix
    Description:
      [163545] - user network privilege gets redirected in Remote Control iKVM/HTML5 and Firmware Update when it should have View Only
    Infected Motherboard: ALL
    Affected Functions: Web
    Validation:
      1) Login Web as USER privilege
      2) goto Console redirection, Power Control,iKVM/HTML5, Launch SOL, Firmware Update
      3) button should be grayed out

5. Category: Fix
    Description:
      [163277] - Not able restored cmmcfg file through the SUM utility
    Infected Motherboard: ALL
    Affected Functions: OEM cmd, IPMI
    Validation:
      1) sum -c getcmmcfg --file text.xml
      2) sum -c changecmmcfg --file text.xml should work as expected

6. Category: Enhancement
    Description:
      [Engineering] - upgrade odata.type of Managers and NTP since autoDST supported
    Infected Motherboard: ALL
    Affected Functions: Redfish
    Validation:
      1) GET /redfish/v1/Managers/1, /redfish/v1/Managers/1/NTP
      2) @odata.type should be #Manager.v1_0_1.Manager","#NTP.v1_0_1.NTP" if autoDST feature supported
--------------------------------------------------------------------------------
Firmware Version: 5.72.30
Firmware Name: SMT_MBAST2500_57230_V.bin
Firmware CRC: 3e685b42
Build date: 09/19/2023
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
    Description:
      [157681] - Cannot enable Dynamic Update when setting BMC Hostname with 63 characters
    Infected Motherboard: ALL
    Affected Functions: DDNS
    Validation:
      1) Login Web -> Goto Date and Time->Enable NTP mode-> Save
      2) Goto Dynamic DNS page->Select Dynamic Update Enable->Input BMC Hostname with 63 characters->save
      3) Should be enabled successfully

2. Category: Fix
    Description:
    [157729] - MEL event log shows Syslog server port was configured to 1 when whatever port is configured to
    Infected Motherboard: ALL
    Affected Functions: MEL
    Validation:
      1) Login Web -> Syslog page->Configure port to any valid number->save->Check MEL

3. Category: Fix
   Description:
    [ENGINEERING] - Fixed security vulnerabilities relating to CVE-2023-40288 and CVE-2023-40286
   Infected Motherboard: ALL
   Affected functions: Security
   Validation:
    1) Perform security testing for CVE-2023-40288 and CVE-2023-40286
--------------------------------------------------------------------------------
Firmware Version: 5.72.29
Firmware Name: SMT_MBAST2500_57229_V.bin
Firmware CRC: 2470b2bf
Build date: 05/26/2023
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
     [152119]- Active Directory AD can't log in using IPv6 and domain name DN
   Infected Motherboard: BLADE
   Affected functions: OpenLDAP WebLogin
   Validation:
      1) Web Login -> Configuration->Active Directory->Advanced Settings
      2) Enable Active Directory Authentication; Make sure LDAP and RADIUS are not enabled
      3) Configure Domanin Controller Server Address with IPv6 AD server address
      4) Should be able login with account which registered on this IPv6 AD server

2. Category: Fix
   Description:
     [156360]- User is able to set ip address with invalid mask under IP Access Control page
   Infected Motherboard: BLADE
   Affected functions: Web
   Validation:
      1) Web Login -> Configuration->IP Access Control->add ip address with invalid mask e.g. 1.1.1.1/032
      2) alert message prompt because subnet mask with leading zeros is invliad

3. Category: Fix
   Description:
     [156551] - BIOS update completes with a File Not Found screen
   Infected Motherboard: BLADE
   Affected functions: WebUI
   Validation:
     1) Go to Web page Maintenance->BIOS Update, click Cancel button, should go back to Maintenance page
     2) Go to Web page Maintenance->BIOS Update, proceed BIOS update, after update completing, it should go back to Maintenance page
     3) Disable NTP first, Go to Web page Configuration->Dynamic DNS, click OK on the pop out message, should go back to Configuration page
     4) Go to Web page Server Health->Health Event Log->advance page, click Cancel button, it should go back to Health Event Log page

4. Category: Fix
   Description:
     [156254] - B2SS1: SUM GetCpldInfo command failed
     [156257] - B11SRE: SUM GetCpldInfo command failed
     [156259] - B2SC1: SUM GetCpldInfo command failed
     [156503] - B11DPE: SUM failed GetCpldInfo command
   Infected Motherboard: BLADE
   Affected functions: IPMI OEM Command
   Validation:
     1) Run the command 0x30 0x68 0x29 to get the CPLD version.
     2) Check that CPLD version is the same as the CPLD version on the web dashboard
--------------------------------------------------------------------------------
Firmware Version: 5.72.28
Firmware Name: SMT_MBAST2500_57228_V.bin
Firmware CRC: 3e363e13
Build date: 04/24/2023
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------
1. Category: Fix
   Description:
    [155254] - Check CD-ROM path valid when mount button clicked
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
    1) Login WebUI->Goto Virtual Media->CD-ROM Image->Enter an invalid ISO path->mount
    2) error message is prompted

2. Category: Fix
   Description:
    [143586] - Windows SUM updateBIOS Fail
   Infected Motherboard: ALL
   Affected functions: BIOS update via CGI
   Validation:
     1) Update BIOS via SUM and WEB

3. Category: Fix
   Description:
    [152615] - Operator and User Network Privilege Suggestions and user 404 Not Found in Dynamic DNS and BIOS Update
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
    1) Login Web with user privilege account
    2) follow "BMC IPMI User's Guide" revision 1.1b page 2-55, privilege settings should be correct

4. Category: Fix
   Description:
   [153342] - Blade wording changed accordingly
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
   1) Go to Blade web GUI
   2) Configuration --> Date and Time
   3) Input incorrect date for february
   4) Correct messages will appear for leap year

5. Category: Fix
   Description:
    [152717] - CPLD Update page abnormal while bios is in update via SUM
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
     1) Update BIOS via SUM then check Maintenance -> CPLD Update when SUM interface progress is updating

6. Category: Fix
   Description:
     [152716] - Firmware update page abnormal while bios is in update via SUM
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
     1) Update BIOS via SUM then check Maintenance -> Firmware Update when SUM interface progress is updating

--------------------------------------------------------------------------------
Firmware Version: 5.72.27
Firmware Name: SMT_MBAST2500_57227_V.bin
Firmware CRC: 15c517d4
Build date: 03/10/2023
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: Fix
   Description:
    [152314] - Can launch iKVM/HTML5 after disabling ikvm server port
   Infected Motherboard: ALL
   Affected functions: Web iKVM
   Validation:
      1) make sure HTM5/iKVM disconnected when ikvm port is disable

2. Category: Fix
   Description:
    [152352] - Web port able to save as blank with no error message and reverts to previous value
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
      1) Login Web-> Configuration->Port->Web Port-> delete value to make blank -> save -> show alert message

3. Category: Fix
   Description:
    [153341] - Blade wording issue for "ADMINISTRATOR" privilege, and made "No Access" wording consistent
                  with web UI as using SMCIPMITool to change privileges
   Infected Motherboard: ALL
   Affected functions: Web_Server, IPMI
   Validation:
      1) Go to Blade web GUI
      2) Configuration --> Users
      3) Modify user and give user privilege "Administrator"
      4) Verify in MEL to see "Administrator" wording is displayed correctly
      5) Use SMCIPMITool to add a user with "No Access" privilege
      6) Use WEB UI to modify a user to have "No Access" privilege
      7) Verify in MEL to see "No Access" wording is consistent using web UI, or SMCIPMITool to change privilege

4. Category: Fix
   Description:
   [153320] - Blade cannot add users with full-width characters
   Infected Motherboard: ALL
   Affected functions: Web_Server
   Validation:
      1) Go to Blade web GUI
      2) Configuration --> Users --> Add User
      3) Input username with full-width char
      4) Alert message will pop up allowing ONLY half-width characters

5. Category: Fix
   Description:
   [153342] - Blade wording changed accordingly
   Infected Motherboard: ALL
   Affected functions: Web_Server
   Validation:
      1) Go to Blade web GUI
      2) Configuration --> Date and Time
      3) Input incorrect date for february, and input incorrect time for hour, minute, and seconds
      4) Correct message will appear for month, and time

6. Category: Fix
   Description:
   [153350] - Blade wording changed accordingly
   Infected Motherboard: ALL
   Affected functions: Web_Server
   Validation:
      1) Go to Blade web GUI
      2) Maintenance --> Factory Default
      3) Select Reset Default Configuration, and Reset Network Configuration
      4) Click Clear
      5) Correct message will appear "Please wait approximately 180 seconds..."

7. Category: New
   Description:
    [New] - Auto Daylight Saving Time
   Infected Motherboard: ALL
   Affected functions: IPMI OEMcmd Web
   Validation:
      ex. (UTC-08:00) Pacific Time (US & Canada)
      1) set time to '03/10/2024 01:59:50' -> wait 10s -> time change to 03/10/2024 03:00:00
      2) set time to '11/03/2024 01:59:50' -> wait 10s -> time change to 11/03/2024 01:00:00
      3) OEMcmd GET 0x30 0x68 0x01 0x0 0x0
                SET 0x30 0x68 0x01 0x1 0x0 0x1 0x0a 0x01 (last three bytes: ntp on, timezone index 0x0a, autoDST on)
--------------------------------------------------------------------------------
Firmware Version: 5.72.26
Firmware Name: SMT_MBAST2500_57226_V.bin
Firmware CRC: 43a615a4
Build date: 12/16/2022
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: Fix
   Description:
     [147400] - Intel regarding to power capping
   Infected Motherboard: ALL
   Affected functions: Power Capping setting
   Validation :
     1) set PwrCap to 50% from CMM Web Blade Status page
     2) wait 10 seconds then set to Read only
     3) delete power policy from Blade BMC side by SMCIPMITool "nm20 delpolicy 0 1"
     4) check on CMM Web, it should show N/A instead of XXX W

2. Category: Fix
   Description:
     [ENGINEERING] - Avoid Redfish fd leak and improve the error message and flow
   Infected Motherboard: ALL
   Affected functions: Redfish
   Validation:
     1) Run the session login /logout stress and no IPMI and WebUI unable to login after reproducing this issue

3. Category: Fix
   Description:
     [149087] - Port page shows blocking error message even when not saving
   Infected Motherboard: ALL
   Affected functions: Web Server
   Validation:
     1) Login to Microblade GUI.
     2) Go to to Configuration --> Port.
     3) Enter incorrect data, press "ok".
     4) Data will autocorrect itself to previous port number
 
4. Category: Fix
   Description:
     [149039] - Show correct username after user modifys name rather than ASCII code
   Infected Motherboard: ALL
   Affected functions: Web Server
   Validation:
     1) Login to Microblade GUI.
     2) Go to Configuration --> Users --> Select user to Modify
     3) Enter "#", "<", or ">" as username.
     4) Data will show correct username than oppose to ASCII code

5. Category: Fix
   Description:
     [ENGINEERING] - Fix MICRON 7400/7450 no temperature readings
   Infected Motherboard: ALL
   Affected functions: IPMI
   Validation:
     1) Login to Microblade GUI.
     2) Check Sensor Reading for 7400/7450 type SSD
     3) Check Sensor Reading for 7300 type SSD

6. Category: Fix
   Description:
     [149408] - Fix 03.88 Launch ikvm window, check User list, unable to show ip address
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
     1) Login to Microblade GUI.
     2) Launch IKVM via HTML5 under IPV6 address
     3) Check if the IPV6 address is displayed correctly

7. Category: Fix
   Description:
     [149662] - Fix full-width chars fails and gives LOADING message
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
   1) Login to Microblade GUI.
   2) Go to Configuration --> Users --> Select user to Modify
   3) Enter full-width character.
   4) A message will appear "Please use half-width characters"

8. Category: Fix
   Description:
     [ENGINEERING] - Redfish Session refine
   Infected Motherboard: ALL
   Affected functions: Redfish, lighttpd
   Validation:
    1) Run stress test on Blade over the weekend, no errors were generated

9. Category: Fix
   Description:
     [ENGINEERING] - HTML5 iKVM recorded video now plays back
   Infected Motherboard: Blade AST2500
   Affected functions: iKVM
   Validation:
    1) Navigate to "Remote Control" -> "iKVM/HTML5"
    2) Launch "iKVM/HTML5"
    3) Click on "Record" dropdown and click "Start"
    4) Recorded video will be downloaded after pressing "Stop" or 120 seconds have elapsed

10.Category: Fix
   Description:
     [149780] - Operator privilege fail to fully access Mouse Mode
   Infected Motherboard: ALL
   Affected functions: IPMI
   Validation:
    1) Login to blade GUI as Operator user
    2) Go to Configuration --> Mouse Mode
    3) User has option to chose from absolute, relative, and single mouse mode
    4) Choose, and save configuration.
    5) Refresh page, User configuration should be saved
--------------------------------------------------------------------------------
Firmware Version: 5.72.25
Firmware Name: SMT_MBAST2500_57225_V.bin
Firmware CRC: 7371d6d1
Build date: 11/04/2022
Supported Platform: B2SD1, B2SD2, B2SC1-CPU, B2SC2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: Fix
   Description:
     [147448] - Microblade Redfish login/logout error, and 500 internal error
   Infected Motherboard: ALL
   Affected functions: Redfish odata source
   Validation:
    1) build pass and tested overnight on microblade
    2) currently overnight, doesn't see /bin/index.fcgi being kill / restarted, and VmSize is not increased
    3) will continue running stress test over the weekends

2. Category: Fix
   Description:
     [ENGINEERING] - incorrect REDFISH API response for date time format.
   Infected Motherboard: ALL
   Affected functions: Logservices
   Validation:
    1) REDFISH API GET redfish/v1/Systems/1/LogServices/Log1
    2) Will display correct DateTime

3. Category: Fix
   Description:
     [146313] - ATT SUMECO TC3073 "Change LAN via BMC configuration"
   Infected Motherboard: ALL
   Affected functions: IPMI
   Validation:
     1) run SUMECO TC3073, should pass

4. Category: New
   Description:
     [ENGINEERING] - VRM protection sync with SW team
   Infected Motherboard: ALL
   Affected functions: CMD
   Validation:
     1) with battery raw 0x06 0x52 0x01 0x40 0x01 0 0x01 return 0xD6
     2) without battery  0x06 0x52 0x01 0x40 0x01 0 0x01 return 0x01

--------------------------------------------------------------------------------
Firmware Version: 5.72.24
Firmware Name: SMT_MBAST2500_57224_V.bin
Firmware CRC: 32c895ae
Build date: 09/14/2022
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: Fix
   Description:
     [141634] - Fix IPv6 autoconfig on web
   Infected Motherboard: ALL
   Affected functions: Web
   Validation:
     1) Change autoconfig setting from web
     2) Make sure autoconfig is set after factory default

2. Category: Fix
   Description:
     [143036][142926] - NTP does not set to zero when service is disabled
   Infected Motherboard: b11
   Affected functions: NTP

3. Category: Fix
   Description:
     [133119] Fix - Follow Redfish display common rule to show N/A or null on Web/Redfish
   Infected Motherboard: All
   Affected functions: Sensor Reading display on Redfish and Web
   Validation:
     1) Check CPU Temp on Web, expected to show Normal status but critical
     2) Check sensor threshold should show N/A/null on Web/Redfish for those threshold's mask bits are not set
     3) Redfish Get temperature/fan/voltage on /redfish/v1/Chassis/1/Thermal, and voltage on /redfish/v1/Chassis/1/Power

4. Category: Fix
   Description:
     [ENGINEERING] Fix - REDFISH API: redfish/v1/Chassis/1, modified "ChassisType" value
   Infected Motherboard: ALL
   Affected functions: RedFish
   Validation:
       1) HTTP GET redfish/v1/Chassis/1, check response for "ChassisType"

--------------------------------------------------------------------------------
Firmware Version: 5.72.23
Firmware Name: SMT_MBAST2500_57223_V.bin
Firmware CRC: a46755a3
Build date: 06/16/2022
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
    [ENGINEERING] - Unexpected Power Reset MEL on CMM when doing power/reset on Blade
   Infected motherboard: ALL
   Affected functions: Health Event Log on CMM
   Validation:
    1) Power on Blade
    2) Check HEL on CMM web gui, make sure there is only Blade Power On event but Power Reset event
    3) Power reset Blade
    4) Check HEL on CMM web gui, make sure there is only one Blade Power reset event log, if more than one, then it's an issue.

2. Category: fix
   Description:
    [140135] - SUM test case 373 change LAN setting via BMC fail.
   Infected motherboard: ALL
   Affected functions: Network
   Validation:
    1) Run SUMECO TC373 to verify it


--------------------------------------------------------------------------------
Firmware Version: 5.72.22
Firmware Name: SMT_MBAST2500_57222_V.bin
Firmware CRC: 15ef1eaa
Build date: 04/22/2022
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
    [ENGINEERING] - IPv6 RMCP command no response
   Infected motherboard: ALL
   Affected functions: RMCP
   Validation:
    1.) Run “ipmitool -I lanplus -H [IPv6] -U [name] -P [password] chassis status” successfully.

2. Category: fix
   Description:
    [139034] fix - issue #139034 Device doesn't send link event to IPMI.
   Infected motherboard: ALL
   Affected functions: Event log
   Validation:
    1) plug and un-plug dedicated lan then check healthy event log
    2) ipmitool raw 0x4 0x2 0x41 0x4 0xd0 0xff 0x6f 0xa0 0x01 0xff
        view on WebGUI and expected to see System NIC (1) IPv4 IP Change in healthy event log
    3) ipmitool raw 0x4 0x2 0x41 0x4 0xd0 0xff 0x6f 0xa1 0x01 0xff
        view on WebGUI and expected to see System NIC (1) Link Up in healthy event log
    4) ipmitool raw 0x4 0x2 0x41 0x4 0xd0 0xff 0x6f 0xa2 0x01 0xff
        view on WebGUI and expected to see System NIC (1) Link Down in healthy event log
    5) ipmitool raw 0x4 0x2 0x41 0x4 0xd0 0xff 0x6f 0xa3 0x01 0xff
        view on WebGUI and expected to see Dedicated LAN Link Up in healthy event log
    6) ipmitool raw 0x4 0x2 0x41 0x4 0xd0 0xff 0x6f 0xa4 0x01 0xff
        view on WebGUI and expected to see Dedicated LAN Link Down in healthy event log
    7) ipmitool raw 0x4 0x2 0x41 0x4 0xd0 0xff 0x6f 0xa8 0x01 0xff
        view on WebGUI and expected to see System NIC (1) IPv6 IP Change in healthy event log


--------------------------------------------------------------------------------
Firmware Version: 5.72.21
Firmware Name: SMT_MBAST2500_57221_V.bin
Firmware CRC: 3da24a33
Build date: 12/07/2021
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
    [134197] fix - issue #134197, #133189, #133117 B2SS1 KVM failed
   Infected motherboard: ALL
   Affected functions: HTML5 iKVM
   Validation:
    1.) Login BMC Web GUI, launch iKVM/HTML5

2. Category: fix
   Description:
    [133347] fix - issue #133347 [IPMI ECO] Redfish ATT test fail
   Infected motherboard: ALL
   Affected functions: Redfish
   Validation:
    1.) Test NTP offset, set primary NTP server to time.google.com, then set local offset through Redfish
    2.) Test virtual media, PATH VM1/CfgCD with body {"Host":"172.31.2.40","Path":"/swqa/Public/CD-IMAGE/pcck804.iso","Username":"tester001","Password":"Super123"}, then POST IsoConfig.Mount. GET VM1/CD1 make sure it works properly

3. Category: fix
   Description:
    [133345] fix - issue #133345, #133346 [IPMI ECO] IPMI ECO ATT fail
   Infected motherboard: ALL
   Affected functions: OEM Cmd
   Validation:
    1.) raw 0x30 0xAD 0x08 return fail (get smart power configuration)
    2.) raw 0x30 0xAD 0x09 return fail

4. Category: fix
   Description:
    [131033] fix - issue #133345 3.3VCC sensor reading drop when running BIOS ECO automation test
   Infected motherboard: B2SD2
   Affected functions: SDR
   Validation:
    1.) check 3.3V SDR


--------------------------------------------------------------------------------
Firmware Version: 5.72.20
Firmware Name: SMT_MBAST2500_57220_V.bin
Firmware CRC: ac1202de
Build date: 10/29/2021
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - #132533 Web session does not timeout
   Infected motherboard: ALL
   Affected functions: Web
   Validation:
     1.) login BMC Web, then set Web Session timeout value to 1 minute
     2.) BMC Web should timeout and automatically logout after 1 minute
     3.) Set timeout value to 0, make sure it would never timeout

2. Category: fix
   Description:
     [ENGINEERING] fix - #123307, Chassis type 0F is listed as 'Space-saving' in SMCIPMITool, but 'All in One' in the web UI
   Infected motherboard: ALL
   Affected functions: FRU displaying
   Validation:
     1.) Program BMC's FRU Chassis Type to 0xF (Space-saving)
     2.) Log-in BMC Web, go to FRU Information page, check the FRU chassis type should display Space-saving
     3.) Also, check thru IPMITool
               ipmitool -I lanplus -H 172.31.33.172 -U ADMIN -P ADMIN fru print
               FRU Device Description : Builtin FRU Device (ID 0)
               Chassis Type                    : Space-saving

3. Category: fix
   Description:
     [ENGINEERING] fix - #125865, CPU overheat alert(LED) failed to trigger and no event log after sensor reached 102C threshold
   Infected motherboard: ALL
   Affected functions: CPU event
   Validation 1 (For B2SC1/B2SC2 only):
     1.) use test cmd to manually adjust CPU Tempature to 100 degree
     2.) After CPU overheat event filtering conditions are met, CPU overheat alert should be created.
     3.) turn CPU temperature back to normal
     4.) deassertion CPU overheat alert should be created.

   Validation 2 (For all other blades B11/B1/B2/B10 except B2SC1/B2SC2):
     1.) Heating CPU until Process Hot event is triggered 
     2.) CPU Process Hot event should be created.

------------------------------------------------------------------------------------------------------------------------------
Firmware Version: 5.72.19
Firmware Name: SMT_MBAST2500_57219_V.bin
Firmware CRC: 97476409
Build date: 6/25/2021
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - #122395 Floppy Upload function will accept any file that ends in .ima or .img, without checking for size
   Infected motherboard: ALL
   Affected functions: Web Floppy Disck
   Validation:
     1.) select a ima file that file size is 0 or bigger than 1.44MB
     2.) Click Upload button
     3.) Check alert message box appeared.

2. Category: fix
   Description:
     [ENGINEERING] fix - issue #120642 and #124922, mount CD-ROM not support HTTP and HTTPs, AD page not filter illegal domain name
   Infected motherboard: ALL
   Affected functions: Mount Virtual Media CD-ROM, AD domain name setting
   Validation:
     1) Mount and unmount ISO image with http, https and SMB protocol on CD-ROM image BMC web page.
     2) Mount and unmount with HTTP via SUM tool.
              sum.exe -i 172.31.51.34 -u ADMIN -p ADMIN -c MountIsoImage --image_url 'http://10.135.176.204:8080/iso/Win2016.iso ' --id Administrator --pw 1234qwerASDF
              sum.exe -i 172.31.51.34 -u ADMIN -p ADMIN -c UnMountIsoImage
     3) Mount and unmount with SMB via SUM tool.
              sum.exe -i 172.31.51.34 -u ADMIN -p ADMIN -c MountIsoImage --image_url 'smb://172.29.1.248/tpm/CentOS7.iso' --id tpm --pw 1234
              sum.exe -i 172.31.51.34 -u ADMIN -p ADMIN -c UnMountIsoImage

3. Category: fix
   Description:
     [ENGINEERING] fix - issue #115824, iKVM unable open after that upgrade bios file in BMC web
   Infected motherboard: ALL
   Affected functions: iKVM
   Validation:
     1) Launch iKVM/HTML5 after BIOS upgrade.
     2) Manual 'killall -9 ikvmserver' in BMC debug shell, check ikvmserver task will be restored.
     3) Check iKVM/HTML5 status from Blade Status page of CMM Web, make sure the buttom will be gray out when BIOS updating, and buttom re-activate when BIOS update done.

4. Category: fix
   Description:
     [ENGINEERING] fix - issue #126088 Redfish automation test failed Copy Project Issue Link
   Infected motherboard: ALL
   Affected functions: alert config
   Validation:
     Testcase 1:
      1) .\SMCIPMITool.exe [BMCIP] [USER] [PASSWORD] shell
      2) ipmi oem x10cfg alert mail 15 tester@test.com
      3) ipmi oem x10cfg alert level 15 4
      4) ipmi oem x10cfg alert subject 15 subject
      5) check alert setting as expected
    Testcase 2:
      1) run SATC “Update Service” – “IPMIConfig” pass

5. Category: fix
   Description:
     [ENGINEERING] fix - issue #123031, Fail to accept valid SMTP Sender's Address
   Infected motherboard: ALL
   Affected functions: SMTP and Alert setting
   Validation:
     1) Use email 'a@123.com' in Sender's Address of SMTP Web page, click Save, then refresh page to make sure you can read it back as expected.
     2) Use email 'a@123.com' in Email Address of Modify Alert Web page, click Save, then refresh page to make sure you can read it back as expected.

6. Category: fix
   Description:
     [ENGINEERING] fix - issue #126959 Alert type of BMC configuration cannot be changed via SUM
   Infected motherboard: ALL
   Affected functions: Alerts
   Validation:
     1) Login BMC Web Alerts page, then add few Alert.
     2) Get BMC config by SUM tool
               sum.exe -i 172.31.32.68 -u ADMIN -p ADMIN -c GetBmcCfg --file bmcCfg_32.68.xml
     3) Login BMC Web Alerts page, then modify those Alerts to different setting.
     4) Set BMC config by SUM tool and make sure the Alert setting will remain the same as previous ones.
               sum.exe -i 172.31.32.68 -u ADMIN -p ADMIN -c ChangeBmcCfg --file bmcCfg_32.68.xml
     5) Use 30 68 OEMCmd below, to add Alert #3 with Information type and IP 3.5.7.1
               ipmitool -I lanplus -H 172.31.32.68 -U ADMIN -P ADMIN raw 0x30 0x68 0xb 0x1 2 2 2
               ipmitool -I lanplus -H 172.31.32.68 -U ADMIN -P ADMIN raw 0x30 0x68 0xb 0x1 2 3 3 5 7 1

7. Category: fix
   Description:
     [ENGINEERING] fix - issue #118619 [Redfish] Fail to use Get Method with AD SSL enable configuration
   Infected motherboard: ALL
   Affected functions: AD/LDAP
   Validation:
     1) Login BMC UI,  Configure AD setting with SSL enabled and AD group attribute
     2) Use Talend API with AD account to get /redfish/v1/Managers/1

8. Category: fix
   Description:
     [ENGINEERING] fix - issue #122741 SMT_MBIPMI_381_REDFISH-- Help info doesn’t match button
   Infected motherboard: ALL
   Affected functions: Help page of Alert
   Validation:
     1) Login BMC Web Alerts page, then chick Help to turn on Help page
     2) Check the content is consistent with buttons on Alert page, such as Clear Filter

----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.18
Firmware Name: SMT_MBAST2500_57218_V.bin
Firmware CRC: E1B76BEF
Build date: 5/5/2021
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - ipmieco tc fail 404 and 405
   Infected motherboard: ALL
   Affected functions: web
   Validation:
     1) run ipmieco tc 404 and 405
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.17
Firmware Name: SMT_MBAST2500_57217_V.bin
Firmware CRC: 5C51BE90
Build date: 4/29/2021
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - When set to NTP mode, ACPowerOn Log will not be generated
   Infected motherboard: ALL
   Affected functions: SEL/MEL
   Validation:
     [TestCase1] AC Cycle
       1. AC Cycle
       2. Wiat System boot to UEFI Shell
       3. Link to "Maintenance" tab > Maintenance Event Log"
          expect: SEL timestamp is same as system time
       4. Link to "Server Health" tab > "Health Event Log"
          expect: has AC Lost sel with system time,
          "First AC Power on - Assertion"
       5. Press UID button over 10 sec (go fatest flash rate)
          expect: BMC Reset and restore to factory default
       6. Wiat BMC connection, then login WebGUI
       7. Link to "Maintenance" tab > Maintenance Event Log"
          expect: SEL timestamp is continue based on previous system time
     [TestCase2] DC Cycle
       1. login WebGUI > Link to "Configuration" tab > "Date and Time"
       2. Modify date and need different than system time (ex: modify year to 2020) > Save
       3. Link to "Maintenance" tab > Maintenance Event Log"
          expect: SEL timestamp is update to new setting
       4. Press UID button over 10 sec
       5. Wiat BMC connection, then login WebGUI
       6. Link to "Maintenance" tab > Maintenance Event Log"
          expect: SEL timestamp is same as new setting
     [TestCase3] NTP Enable
       1. Login WebGUI
       2. Link to Configuration -> "Date and Time" -> "172.31.0.8" > Save
       3. Press UID button over 10 sec
       4. Wiat BMC connection, then login WebGUI
       5. Link to "Maintenance" tab > Maintenance Event Log"
          expect: SEL timestamp is same as NTP time

2. Category: fix
   Description:
     [ENGINEERING] fix - ACPowerOn(OEM) event did not send through Redfish EventService
   Infected motherboard: ALL
   Affected functions: SEL/Redfish
   Validation:
     1) Subscribe eventnotifier service through Redfish
     2) ACCycle Blade and check whether receive SEL notifer from Blade

3. Category: fix
   Description:
     [ENGINEERING] fix - No retry is found when the event receiver is available for a while then stop
   Infected motherboard: ALL
   Affected functions: Redfish
   Validation:
     1) Subscribe event receiver to BMC
     2) Insert an event to BMC
     3) Confirm the event has been received of the receiver and Wireshark
     4) Stop the event receiver to make HTTP connection timeout or let event receiver return HTTP 4XX response code
     5) Insert an event to BMC again
     6) Wireshark receive the TCP package
     7) Observe if there is a retry package of Wireshark

4. Category: fix
   Description:
     [ENGINEERING] fix - AD Web allow to save config when user enable RADIUS
   Infected motherboard: ALL
   Affected functions: web
   Validation:
     1) Enable RADIUS
     2) Enable AD -> It should show alert and uncheck the box

5. Category: fix
   Description:
     [ENGINEERING] fix - default web session time out is not 30 mins
   Infected motherboard: ALL
   Affected functions: web
   Validation:
     1) login Blade -> check web session timeout default value is 30 or not

6. Category: enhancement
   Description:
     [ENGINEERING] enhancement - IPv6 enhancement and support IP Protocol switches
   Infected motherboard: ALL
   Affected functions: network
   Validation:
     Case 1: WebUI - IP protocol status
       1) Login BMC WebUI. Go to the network page.
       2) Switch IP protocol to IPv4.
       3) Check if the IPv6 setting field is disabled
       4) Switch IP protocol to IPv6.
       5) Check if the IPv4 setting field, and the following items are disabled.
          - Obtain an IP address automatically (use DHCP)
          - Use the following IP address
       6) Switch IP protocol to Dual.
       7) Check both of IPv4 and IPv6 setting fields are not disabled.
       8) Switch IP protocol to IPv4 or IPv6. Save.
       9) Go to the Factory default page.
       10) Reset Network configuration.
       11) Check the default of IP protocol is dual.
     Case 2: WebUI - the IPv6 settings
       1) Login BMC WebUI. Go to the network page.
       2) Verify all the IPv6 settings work.
     Case 3: WebUI - the IPv6 static route
       1) Login BMC WebUI. Go to the network page.
       2) Verify all the IPv6 static route settings work.
     Case 4: Redfish - IP protocol switches
       1) Get https://{{bmcip}}/redfish/v1/Managers/1/EthernetInterfaces/1
       2) There is an attribute ¡°IPProtocolStatus¡± to switch IP protocol status
          "Oem": {
            "Supermicro": {
              "IPProtocolStatus": "Dual"
            }
          }
       3) PATCH https://{{bmcip}}/redfish/v1/Managers/1/EthernetInterfaces/1 with body
          {
            "Oem": {
               "Supermicro": {
                 "IPProtocolStatus": "IPv6"
               }
            }
          }
       4) Get https://{{bmcip}}/redfish/v1/Managers/1/EthernetInterfaces/1 again
       5) This attribute ¡°IPProtocolStatus¡± value become IPv6.
     Case 5: Add/remove IPv6 address of Blade by CMM through Web. (Need use the supported CMM FW)
       1) Login BMC WebUI. Go to the Blade status page.
       2) Choose and press the Blade note.
       3) Go to the Network Config page.
       4) Check if users can add/remove IPv6 address whether DHCPv4 is enabled.
       5) Go to Blade web page. Check if IPv6 address is added/removed.
     Case 6: Add/remove IPv6 address of Blade by CMM through redfish. (Need use the supported CMM FW)
       1) Get https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network
       2) Add an IPv6 static address.
          POST https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network with body
          {
            "IPv6Addresses":
            {
              "Address": "2001:aabb::145",
              "PrefixLength": 64
            }
          }
       3) Get https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network
       4) Check the address is added.
       5) Go to Blade web page. Check if the address is added.
       6) Delete an IPv6 static address.
          DELETE https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network with body
          {
            "IPv6Addresses":
            {
              "Address": "2001:aabb::145",
              "PrefixLength": 64
            }
          }
       7) Get https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network
       8) Check the address is removed.
       9) Go to Blade web page. Check if the address is removed.
     Case 7: Configurate IP Protocol status of Blade by CMM through Web. (Need use the supported CMM FW)
       1) Login BMC WebUI. Go to the Blade status page.
       2) Choose and press the Blade note.
       3) Go to the Network Config page.
       4) Change IP Protocol status. Save.
       5) Go to Blade web page. Check if IP Protocol status is updated.
     Case 8: Configurate IP Protocol status of Blade by CMM through redfish. (Need use the supported CMM FW)
       1) Get https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network
       2) Change the attribute of IPProtocolStatus to others like IPv6.
          PATCH https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network with body
          {
            "Oem": {
              "Supermicro": {
                "IPProtocolStatus": "IPv6"
              }
            }
          }
       3) Get https://{{bmcip}}/redfish/v1/Chassis/1/Blade/x/Node/x/Network again
       4) Check the attribute IPProtocolStatus is changed to IPv6.
     Case 9: IPMI lan6 print
       1) Set up RA and/or DHCPv6 environment.
       2) Enable IPv6 mode.
       3) Type "ipmitool lan6 print" and check it can run successfully.

7. Category: enhancement
   Description:
     [ENGINEERING] enhancement - change the rules for blade sending ipv6 to CMM
   Infected motherboard: ALL
   Affected functions: web
   Validation:
     1) Login CMM
     2) Check the Blade status of IPv6, it should be default link-local ipv6
     3) Set a static ipv6 address to Blade
     4) Check the Blade status of IPv6, it should change to that static ipv6
     5) Use DHCPv6 to assign ipv6 to blade
     6) Check the Blade status of IPv6, it should change to ipv6 get from DHCPv6 server
---------------------------------------------------------------------------------------

Firmware Version: 5.72.16
Firmware Name: SMT_MBAST2500_57216_V.bin
Firmware CRC: ABEEE327
Build date: 3/27/2021
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - M.2 and DIMM slave address conflict on I2C Bus3:0xA6
   Infected motherboard: B2SC1
   Affected functions: BIOS boot
   Validation:
     1) power reset, make sure BIOS boot post complete
     2) power off/on, make sure BIOS boot post complete
---------------------------------------------------------------------------------------

Firmware Version: 5.72.15
Firmware Name: SMT_MBAST2500_57215_V.bin
Firmware CRC: 7E7A8706
Build date: 1/15/2021 14:19:07
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - ssdp cannot disable properly
   Infected motherboard: ALL
   Affected functions: ssdp
   Validation:
     1) discover ssdp when service turn off

2. Category: fix
   Description:
     [ENGINEERING] fix - AD timeout reset to 0 if disable the function
   Infected motherboard: ALL
   Affected functions: active directory
   Validation:
     1) set timeout in AD config then save
     2) disable AD and save then check timeout should keep there

3. Category: fix
   Description:
     [ENGINEERING] fix - wrong 5V sensor type
   Infected motherboard: B2SC2
   Affected functions: sensor reading
   Validation:
     1) using SMCIPMITOOL to check if 5V sensor exist

4. Category: enhancement
   Description:
     [ENGINEERING] enhancement - modify non-critical threshold
   Infected motherboard: B2SC1, B2SC2
   Affected functions: sensor reading
   Validation:
     1) check non critical threshold

5. Category: enhancement
   Description:
     [ENGINEERING] enhancement - update lower sensor threshold for b10 and b11 based on new Superblade thremal spec
   Infected motherboard: ALL
   Affected functions: sensor reading
   Validation:
     1) check blade sensor lower threshold

6. Category: enhancement
   Description:
     [ENGINEERING] enhancement - modify sensor type 0xD1 string to NVMe
   Infected motherboard: ALL
   Affected functions: sel
   Validation:
     1) generate sel: NVMe - Drive Fault
        ipmitool raw 0x4 0x2 0x4 0xd1 0xff 0x6f 0xa2 0x00 0x00
     2) goto web sel page, sensor type show "NVMe"

7. Category: enhancement
   Description:
     [ENGINEERING] enhancement - synchnorize the SEL relative function with X11 behavior
   Infected motherboard: ALL
   Affected functions: sel
   Validation:
     1) comprehensive verify sel content

8. Category: enhancement
   Description:
     [ENGINEERING] enhancement - enlarge blade and node name size from 16 to 64
   Infected motherboard: ALL
   Affected functions: blade name
   Validation:
     1) compatible with CMM 3.58 or above
     2) set blade or node name from CMM

9. Category: enhancement
   Description:
     [ENGINEERING] enhancement - copyright 2021
   Infected motherboard: ALL
   Affected functions: web
   Validation:
     1) check copyright
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.14
Firmware Name: SMT_MBAST2500_57214_V.bin
Firmware CRC: 45404F5C
Build date: 11/14/2020 12:54:00
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - VCCIO VCCSA reading is incorrect
   Infected motherboard: B2SC1
   Affected functions: sensor reading
   Validation:
     1) check VCCSA/VCCIO sensor reading compare with DMM reading should within 2%
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.13
Firmware Name: SMT_MBAST2500_57213_V.bin
Firmware CRC: 590235D1
Build date: 10/30/2020 16:09:12
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - auto crash dump CATERR/IERR fail
   Infected motherboard: ALL
   Affected functions: crash dump
   Validation:
     1) trigger IERR happen -> download trouble shooting file from blade web

2. Category: fix
   Description:
     [ENGINEERING] fix - destination email address cannot receive alerts
   Infected motherboard: ALL
   Affected functions: SMTP
   Validation:
     1) configure SMTP
     2) configure Alert
     3) trigger some health event logs
     4) check the alert emails had been sent to the configured email address

3. Category: fix
   Description:
     [ENGINEERING] fix - BIOS hang on post code B2 sending OOB to BMC
   Infected motherboard: ALL
   Affected functions: oob
   Validation:
     1) power on
     2) BIOS should pass post code B2 in 20 secs

4. Category: enhancement
   Description:
     [ENGINEERING] enhancement - support showing Inlet Temperature in Power/Temperature record
   Infected motherboard: ALL
   Affected functions: sensor reading
   Validation:
     1) login Blade -> check the power temperature record web for Inlet temp record if Blade has Inlet sensor

5. Category: enhancement
   Description:
     [ENGINEERING] enhancement - change threshold based on MBI FSC guide v4.0
   Infected motherboard: B2SC2
   Affected functions: sensor reading
   Validation:
     1) check b2sc2 sensor threshold based on MBI Thermal Guideline Rev4 from thermal team

6. Category: enhancement
   Description:
     [ENGINEERING] enhancement - change the P1-DIMMA1 sensor name to P2-DIMMA1 on the node 2
   Infected motherboard: B2SC2
   Affected functions: sensor reading
   Validation:
     1) check node 2 sensor reading

7. Category: enhancement
   Description:
     [ENGINEERING] enhancement - skip to report Prochot event in the turbo boost mode
   Infected motherboard: B2SC2
   Affected functions: SEL
   Validation:
     1) turbo boost
     2) check there is no ProcHot event
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.12
Firmware Name: SMT_MBAST2500_57212_V.bin
Firmware CRC: E3D02528
Build date: 10/5/2020 17:36:47
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - mount floppy with size large than 1.44MB will make web disappear
   Infected motherboard: ALL
   Affected functions: floppy disk
   Validation:
     1) Login Web -> Virtual Media -> Floppy disk -> mount file large then 1.44MB

2. Category: fix
   Description:
     [ENGINEERING] fix - refresh button will re-mount unmounted floppy disk
   Infected motherboard: ALL
   Affected functions: floppy disk
   Validation:
     1) Go to the Virtual media > Floppy disk
     2) Choose a file "Dos5.img" or "fdboot.img" (Both are the same)
     3) Press Mount
     4) Then Unmount
     5) Then press refresh on top right corner of the page
     6) The disk should stay unmounted

3. Category: fix
   Description:
     [ENGINEERING] fix - fail to delete Active Directory role
   Infected motherboard: ALL
   Affected functions: active directory
   Validation:
     1) Login Web -> Configuration -> Active Directory
     2) Enable/Configure Active Directory
     3) Add Role Group
     4) Verify: Using SMCIPMITool to delete Active Directory role group
        >ipmi oem x10cfg ad delete 1

4. Category: fix
   Description:
     [ENGINEERING] fix - can Patch invalid username through Redfish
   Infected motherboard: ALL
   Affected functions: Redfish
   Validation:
     1) Login WebUI, Configuration > Account Service
     2) Add user, eg:3
     3) PATCH /redfish/v1/AccountService/Accounts/3
        with following content, and expecting status code is 400
        * {"UserName": "\\\\"}
        * {"UserName": "<"}
        * {"UserName": ">"}
        * {"UserName": "\""}
        * {"UserName": "&"}
        * {"UserName": "\\#"}
        * {"UserName": ";"}
        * {"UserName": ","}
        * {"UserName": "="}
        * {"UserName": "$"}
        * {"UserName": "*"}
        * {"UserName": "~"}
        * {"UserName": "`"}
        * {"UserName": "%"}
        * {"UserName": "^"}
        * {"UserName": "12345678901234567"}
        * {"UserName": "1234asd asdd"}

5. Category: fix
   Description:
     [ENGINEERING] fix - patch invalid RADIUS Secret with special character through
   Infected motherboard: ALL
   Affected functions: Redfish
   Validation:
     1) Login WebUI, Configuration > RADIUS
     2) Enable RADIUS and configure setting
     3) PATCH /redfish/v1/Managers/1/RADIUS/ with body
        {"RadiusEnabled": true, "RadiusServerIP": "1.2.3.4", "RadiusPortNumber": 1812, "RadiusSecret": "ILLEGAL character"}

6. Category: fix
   Description:
     [ENGINEERING] fix - IKVM session did not disconnect even user logout on WebUI
   Infected motherboard: ALL
   Affected functions: ikvm
   Validation:
     1) Go to "Remote Control -> iKVM/HTML5"
     2) Open the iKVM by pressing "iKVM/HTML5" button
     3) Turn on the Host
     4) Without closing the window, Press logout on the top right of the web
     5) It should now disconnect the iKVM automatically

7. Category: fix
   Description:
     [ENGINEERING] fix - AD failed to login with IPv6 configuraiton
   Infected motherboard: ALL
   Affected functions: network
   Validation:
     1) Log in Web
     2) Configuration/Active Directory
     3) Configure the Active Directory server with IPv6 address
     4) Add Role Group
     5) Log out and log in with AD user name and passwrod

8. Category: fix
   Description:
     [ENGINEERING] fix - fail to delete added ipv6 address
   Infected motherboard: ALL
   Affected functions: network
   Validation:
     1) Go to the configuration > network
     2) Add Ip address v6 (Max 6 items in the list) For example:
        2001:0000:0000:0000:0EC4:7AFF:FE1B:8888/64
        fe80:0:0:0:ae1f:6bff:fe3d:9337/64
        fe80:0:0:0:ae1f:6bff:fe3d:9332/64
        fe80:0:0:0:ae1f:6bff:fe3d:9340/64
        fe80:0:0:0:ae1f:6bff:fe3d:9342/64
     3) Check using the java -jar SMCIPMITool.jar BMCIP ADMIN ADMIN ipmi lan ipv6 list
     4) Choose the delete ip and see if all the items shown in the list
     5) Delete the items one by one and see if the items changed

9. Category: fix
   Description:
     [ENGINEERING] fix - IPv6 autoconfig setting abnormal
   Infected motherboard: ALL
   Affected functions: network
   Validation:
     1) Use the IPMI tool "java -jar SMCIPMITool.jar BMCIP ADMIN ADMIN ipmi lan ipv6 autoconfig 0" and see if the network stays normal
     2) Try using SMCIPMITool command "java -jar SMCIPMITool.jar BMCIP ADMIN ADMIN ipmi lan ipv6 autoconfig 1"

10. Category: fix
   Description:
     [ENGINEERING] fix - User Name do not exist at top of Page at firefox
   Infected motherboard: ALL
   Affected functions: WebUI
   Validation:
     1) check if the network & user is properly placed

11. Category: enhancement
   Description:
     [ENGINEERING] enhancement - disable SSDP by default that might cause network issue
   Infected motherboard: ALL
   Affected functions: SSDP
   Validation:
     1) Login Blade and check SSDP configuration disable by default

12. Category: enhancement
   Description:
     [ENGINEERING] enhancement - change threshold based on MBI FSC guide v4.0
   Infected motherboard: ALL
   Affected functions: sensor threshold
   Validation:
     1) check sensor threshold based on MBI Thermal Guideline Rev4 from thermal team

13. Category: enhancement
   Description:
     [ENGINEERING] enhancement - unique password missing issue
   Infected motherboard: ALL
   Affected functions: unique password
   Validation:
     1) raw 0x30 0x40 command and run 'GetDeviceID' by OOB
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.11
Firmware Name: SMT_MBAST2500_57211_V.bin
Firmware CRC: 86E33845
Build date: 8/19/2020 19:40:16
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - missing some chassis type
   Infected motherboard: ALL
   Affected functions: FRU
   Validation:
     1) ipmitool fruw CT <type>
     2) check via WebUI FRU Reading -> Chassis Type

2. Category: fix
   Description:
     [ENGINEERING] fix - date and time cannot manually update
   Infected motherboard: ALL
   Affected functions: WebUI
   Validation:
     1) change hour, min, sec and save them

3. Category: fix
   Description:
     [ENGINEERING] fix - SUM update IPMI firmware
   Infected motherboard: ALL
   Affected functions: firmware update
   Validation:
     1) using SUM v2.5.0 or above to update BMC FW

4. Category: fix
   Description:
     [ENGINEERING] fix - HTML5 btn disappear
   Infected motherboard: ALL
   Affected functions: HTML5
   Validation:
     1) launch HTML5
     2) click topmenu btn

5. Category: fix
   Description:
     [ENGINEERING] fix - unknown IP on MEL when iKVM was closed
   Infected motherboard: ALL
   Affected functions: MEL
   Validation:
     1) open and close iKVM
     2) check MEL IP category

6. Category: fix
   Description:
     [ENGINEERING] fix - Redfish show Rack1 APIs
   Infected motherboard: ALL
   Affected functions: Redfish
   Validation:
     1) GET https://BMCIP/redfish/v1/Chassis/1

7. Category: fix
   Description:
     [ENGINEERING] fix - enable TPM Management item failed
   Infected motherboard: ALL
   Affected functions: OOB
   Validation:
     1) Run TPM management related commands of SUM

8. Category: fix
   Description:
     [ENGINEERING] fix - sync for second node sensor reading
   Infected motherboard: B2SC2
   Affected functions: sensor reading
   Validation:
     1) check second node sensor reading

9. Category: enhancement
   Description:
     [ENGINEERING] enhancement - adding alert IP with Hostname will crash BMC
   Infected motherboard: ALL
   Affected functions: config
   Validation:
     1) Login Web -> Configuration -> Alert -> Modify Dest
     2) reboot BMC
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.10
Firmware Name: SMT_MBAST2500_57210_V.bin
Firmware CRC: 5AC291B6
Build date: 7/17/2020 16:53:36
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: new
   Description:
     [ENGINEERING] new - SSDP support
   Infected motherboard: all
   Affected functions: SSDP
   Validation:
     1) configuration -> SSDP to configure it
     2) reset default to clear SSDP

2. Category: fix
   Description:
     [ENGINEERING] fix - voltage sensor reading incorrect
   Infected motherboard: B2SC2
   Affected functions: sensor reading
   Validation:
     1) check sensor reading

3. Category: fix
   Description:
     [ENGINEERING] fix - LSI I2C hang once power off during transfer data
   Infected motherboard: ALL
   Affected functions: i2c
   Validation:
     1) on/off stress test
     2) check if system hang cannot power on

4. Category: fix
   Description:
     [ENGINEERING] fix - mount floppy fail
   Infected motherboard: ALL
   Affected functions: virtual media
   Validation:
     1) mount floppy through web

5. Category: fix
   Description:
     [ENGINEERING] fix - alert add dest fail
   Infected motherboard: ALL
   Affected functions: config alert
   Validation:
     1) add 001.001.001.001 as input for alert web

6. Category: fix
   Description:
     [ENGINEERING] fix - Redfish cannot open IKVM
   Infected motherboard: ALL
   Affected functions: Redfish, iKVM
   Validation:
     1) Get HTTPS://<BMCIP>/redfish/v1/Managers/1/IKVM

7. Category: fix
   Description:
     [ENGINEERING] fix - fail to upload IPMI config
   Infected motherboard: ALL
   Affected functions: WebUI
   Validation:
     1) login WebUI
     2) Maintenance -> IPMI Configuration -> Reload config
     3) expect system reboot after upload conpleted
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.09
Firmware Name: SMT_MBAST2500_57209_V.bin
Firmware CRC: A846FA92
Build date: 6/18/2020 10:29:27
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     N
BIOS/IPMI Bug fixes      |     Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - bios/bmc update fail through SMCIPMITOOL/SUM
   Infected motherboard: ALL
   Affected functions: tool bmc/bios update
   Validation:
     1) SMCIPMITool <ip> <usr> <pwd> ipmi flasha *.bin
     2) SUM -i <ip> -u <usr> -p <pwd> -c UpdateBmc --file *.bin

2. Category: fix
   Description:
     [ENGINEERING] fix - utility IPMIView cannot show all sensors
   Infected motherboard: ALL
   Affected functions: sensor reading
   Validation:
     1) verify the IPMIView can show all sensors as well as the CMM shows on the web GUI

3. Category: fix
   Description:
     [ENGINEERING] fix - fine tune sensor reading
   Infected motherboard: B2SC2
   Affected functions: sensor reading
   Validation:
     1) check NVMe sensor reading
     2) check RT1, RT2 and inlet sensor reading on both nodes
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.08
Firmware Name: SMT_MBAST2500_57208_V.bin
Firmware CRC: 74FD69DE
Build date: 6/8/2020 16:49:49
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y
---------------------------------------------------------------------------------

1. Category: new
   Description:
     [ENGINEERING] new - initial support B2SC2
   Infected Motherboard: ALL
   Affected functions: Platform
   Validation:
     1) install B2SC2 and check it

2. Category: fix
   Description:
     [ENGINEERING] fix - download ipmi configuration via webgui might fail
   Infected motherboard: all
   Affected functions: WEBUI
   Validation:
     1) login to web until session id includes '\'
     2) download ipmi configuration
     3) check the file downloaded successfully
 
3. Category: fix
   Description:
     [ENGINEERING] fix - snapshot url from sending sensitive parameters to linking to /web/Snapshot.bmp
   Infected motherboard: ALL
   Affected functions: WEBUI
   Validation:
     1) Use the browser debug tool (F12) to inspect the "Remote Console Preview" snapshot image
     2) Verify that under the "Elements" tab that "img1" is showing the source as "src=/Snapshot.bmp"
     3) "Network" tab shouldn't show the Snapshot URL request
 
4. Category: fix
   Description:
     [ENGINEERING] fix - add the Broadcom RAID controller status OEM SEL description
   Infected motherboard: ALL
   Affected functions: WEBUI
   Validation:
     1) Trigger the broadcom RAID controller error
     2) check the Health Event Log web page
  
5. Category: fix
   Description:
     [ENGINEERING] fix - MEL RMCP port via CMM
   Infected motherboard: ALL
   Affected functions: MEL
   Validation:
     1) login CMM WebUI -> Blade Status -> Network Config -> Save
     2) login Blade WebUI -> Maintenance -> Maintenance Event Log
     3) RMCP port should match the setting from CMM

6. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - sensitive parameters improvment
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) open brower debug mode
     2) check each page response header should include Content-Security-Policy, Feature-Policy, Referrer-Policy, Strict-Transport-Security and X-Content-Type-Options
     3) check each page no parameters behind "url_redirect.cgi", except iKVM, Console redirection and SOLactions actions

7. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - block the invalid input in Syslog/LDAP/AD/Radius/SMTP/Alert/datetime/DDNS/SNMP cgi file
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) By-pass value in Syslog/LDAP/AD/Radius/SMTP/Alert/datetime/DDNS/SNMP like <img src="1"> as input with chrome debug tool and check the result

8. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - CSRF
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Check http header have CSRF token or not and try send CSRF attack

9. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - Support DNS name on the redfish API
   Infected Motherboard: ALL
   Affected functions: Active Directory, REDFISH
   Validation :
     1) Patch the /redfish/v1/Managers/1/ActiveDirectory
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.05
Firmware Name: SMT_MBAST2500_57205_V.bin
Firmware CRC: 4B7EEAD0
Build date: 4/7/2020 12:27:54
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y
---------------------------------------------------------------------------------

1. Category: fix
   Description:
     [ENGINEERING] fix - Cannot save DDNS settings on web pages in Japanese/SC languages
   Infected Motherboard: ALL
   Affected functions: DDNS on WEB
   Validation:
     1) Log in Web pages. Change the language to Japanese or SC language.
     2) Go to Configuration-> Date and Time. Enable NTP
     3) Go to Configuration-> Dynamic DNS.
     4) Click the radio button for Dynamic Update Enable/Disable, then save
     5) Check if it saves successfully.

2. Category: fix
   Description:
     [ENGINEERING] fix - CMM switch HTML5
   Infected Motherboard: ALL
   Affected Functions: HTML5
   Validation:
     1) Using CMM 3.48 and above.
     2) launch HTML5 via Console Redirection page

3. Category: fix
   Description:
     [ENGINEERING] fix - UID Control page malfunction via EDGE browser
   Infected Motherboard: ALL
   Affected functions: UID Control
   Validation:
     1) Turn on/off UID via IE  browser
     2) Turn on/off UID via Google Chrome browser
     3) Turn on/off UID via Firefox browser

4. Category: update
   Description: 
   [ENGINEERING] update - update Jarsigner certificate and using OpenJDK8 instead of Oracle
   Infected Motherboard: ALL
   Affected functions: JAVA KVM
   Validation :
    1) Java KVM
    2) Java VM
    3) Java SOL
    4) HTML5

5. Category: enhancement
   Description: 
   [ENGINEERING] enhancement - When host name too long Web GUI display mess up issue
   Infected Motherboard: ALL
   Affected functions: WEBUI top menu
   Validation :
     1) Configure the long host name under Configuration -> Network and Save
     2) Refresh the Web GUI to check the host name display correct

6. Category: enhancement
   Description: 
   [ENGINEERING] enhancement - Install OS fail when mount larger ISO image (over than 5GB) through HTTP.
   Infected Motherboard: ALL
   Affected functions: web mount ISO
   Validation :
     1) Mount ISO over HTTP (over than 5GB)
     2) Install OS, it should be installed successfully.

7. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - CMM detect the VM port status of BMC
   Infected Motherboard: CMM
   Affected functions: JAVA KVM
   Validation :
    install CMM FW 3.48
    TestCase1: Enable/Disable VM port in Blade
     1) Login Blade WebUI -> Configuration -> Port
     2) Change VM port status
     3) Login CMM WebUI -> Blade System -> Blade Status
     4) Launch iKVM via button
     5) If VM disable, the Virtual Media option should grey out
    TestCase2: Reboot and the VM status still valid
     1) Login Blade WebUI -> Configuration -> Port
     2) Change VM port status
     3) Reboot Blade
     4) Login CMM WebUI -> Blade System -> Blade Status
     5) Launch iKVM via button
     6) If VM disable, the Virtual Media option should grey out
----------------------------------------------------------------------------------------------------

Firmware Version: 5.72.04
Firmware Name: SMT_MBAST2500_57204_V.bin
Firmware CRC: C866A52A
Build date: 3/16/2020 15:44:04
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y
---------------------------------------------------------------------------------

1. Category: fix
   Description: 
     [ENGINEERING] fix - Release 5.72.04 based on 5.72.00 to fix B11 BMC FW 5.72.00 failed on internal VLAN communication with CMM.
   Infected Motherboard: B11 Blade
   Affected functions: the internal VLAN communication between CMM and Blade
   Validation :
     1) Make sure CMM dummy switch FW is 2.3
     2) ipmitool -H BMCIP -U ADMIN -P ADMIN raw 0x30 0x70 0xf6 0x06
     3) the response Data1 bit3 should be 1. 
------------------------------------------------------------------------------------------------

Firmware Version: 5.72.01
Firmware Name: SMT_MBAST2500_57201_V.bin
Firmware CRC: C3050CDC
Build date: 1/16/2020 21:19:04
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y
---------------------------------------------------------------------------------

1. Category: fix
   Description: 
     [ENGINEERING] fix - Redfish Managers.IP.Access.Control. items fail by SATC.
   Infected Motherboard: ALL
   Affected functions: REDFISH
   Validation :
     [Case 1: Run SATC test scripts]
     1) Go to http://172.31.2.38:8080/build SATC website.
     2) Run ECO-> Redfish_API_full_list_2018_03_16-> Managers -> IP Access Control
     3) Run stress 10 times, and check if any failure items.

     [Case 2: Test by Postman]
     1) Connect BMC console, record the PID of index.fcgi PID e.g. ps | grep index.fcgi.
     2) Patch Service Enabled Key:
       - making PATCH request on /redfish/v1/Managers/1/IPAccessControl/ with body {"ServiceEnabled": true} and expecting status code 200
     3) Check if the PID of index.fcgi PID is same.
     4) Create Valid Filter Rule:
       - making POST request on /redfish/v1/Managers/1/IPAccessControl/FilterRule/ with body {"Address": "1.2.3.4", "PrefixLength": 32, "Policy": "Accept"} and expecting status code 201
     5) Check if the PID of index.fcgi PID is same.
     6) Clear All Filter Rules:
       - making DELETE request on /redfish/v1/Managers/1/IPAccessControl/FilterRule/1 and expecting status code 200
     7) Check if the PID of index.fcgi PID is same.

2. Category: Enhancement
   Description: 
     [ENGINEERING] Enhancement - BMC store factory default option in flash. FW updated with non-preserve follow factory default option in web
   Infected Motherboard: ALL
   Affected functions: Update BMC FW
   Validation :
     [TestCases1]
     1) Run second factory default option in 'Factory Default' page
     2) Check 'Factory Default' page and should select second factory default option
     3) Try other factory default option and should show last runnig option in 'Factory Default' page

     [TestCases2]
     1) Input unique password by OEM command
     2) Run second factory default option in 'Factory Default' page
     3) Change ADMIN password to "11111111"
     4) Update FW in web with non-preserve
     5) After updated, ADMIN password should change to unique password
     6) Run step 3 then updated FW in redfish with non-preserve
     7) After updated, ADMIN password should change to unique password

     [TestCases3]
     1) Input unique password by OEM command
     2) Run first factory default option in 'Factory Default' page
     3) Add new user "test1"
     4) Change ADMIN password to "11111111"
     5) Update FW in web with non-preserve
     6) After updated, ADMIN password should keep "11111111" and test1 is kept.
     7) Change ADMIN password to "22222222" then updated FW in redfish with non-preserve
     8) After updated, ADMIN password should keep "22222222" and test1 is kept.

     [TestCases4]
     1) Input unique password by OEM command
     2) Run third factory default option in 'Factory Default' page
     3) Change ADMIN password to "11111111"
     4) Update FW in web with non-preserve
     5) After updated, ADMIN password should keep "ADMIN".
     6) Run step3 then updated FW in redfish with non-preserve
     7) After updated, ADMIN password should keep "ADMIN".

3. Category: Enhancement
   Description: 
     [ENGINEERING] Enhancement - System Trouble shooting Support download more information
   Infected Motherboard: ALL
   Affected functions:  Troubleshooting
   Validation :
     1) Login Web -> Maintenance section -> Troubleshooting -> generate and download system trouble shooting
     2) Uncompress the file, you will get more information about firmware version, FRU, SEL, maintenance log and smbios

4. Category: new
   Description: 
     [ENGINEERING] new - Support KCS channel privilege in Redfish
   Infected Motherboard: ALL
   Affected functions: KCS privileges control in REDFISH
   Validation :
     1) Use Postman to GET /redfish/v1/Managers/1/ and check if KCSInterface property exists in Oem/Supermicro;
     2) PATCH /redfish/v1/Managers/1/KCSInterface with different privilege setting;
     3) Login to WebUI and go to Configuration > KCS control and see if the privilege has changed successfully;

5. Category: fix
   Description: 
     [ENGINEERING] fix - https port restore fail when restore IPMI config
   Infected Motherboard: ALL
   Affected functions: IPMI Configuration restore
   Validation :
     1) Login to WebUI;
     2) Go to Configuration > Port;
     3) Change Web SSL port to 212;
     4) Go to Maintenance> IPMI Configuration;
     5) Save current IPMI config then do a factory default;
     6) Reload with the IPMI configuration that you backed up;
     7) The https server should still using 212 as the SSL port;

6. Category: fix
   Description: 
     [ENGINEERING] fix - WEB Virtual Media function
   Infected Motherboard: ALL
   Affected functions: WEB Virtual Media
   Validation :
     [TestCase1]
     1) Login WebUI and go to Virtual Media > CD-ROM Image and try out using legal share host, path to image, user, and password.
     2) Try out with illegal input. If it's illegal, there should be an alert shows up.
     3) The special chars support list is display on the WebUI page, or can check with the spec that the PM provided.

     [TestCase2]
     1) Use SMCIPMITool with raw command 0x30 0x68 0x0D "n" "data" to set host, path to image, user, and password through cgi. Note: host n=0, path n=1, user n=2, password n=3, and data should be sent byte by byte in ASCII code.
     2) Try out with illegal input. If it's illegal, should get CC (Invalid data field in Request).
     3) The special chars support list is display on the WebUI page, or can check with the spec that the PM provided.

     [TestCase3]
     1) Login WebUI and go to Virtual Media > CD-ROM Image and input legal share host, path to image, user(optional), and password(optional).
     2) use "sum.exe -i IP -u ADMIN -p ADMIN -c getbmccfg --file=vm", to dump IPMI config to file.
     3) Modify CD-ROM Image settings to and make sure those settings are different.
     4) Issue SUM cmd "sum.exe -i IP -u ADMIN -p ADMIN -c changebmccfg --file=vm" to restore config.
     5) Check if restore config success and with correct settings.

7. Category: Enhancement
   Description: 
     [ENGINEERING] Enhancement - support Inlet Temperature negative reading .
   Infected Motherboard: ALL
   Affected functions: Sensor reading
   Validation :
     1) Inlet Temperature negative reading.

8. Category: Enhancement
   Description: 
     [ENGINEERING] Enhancement - provide global BMC IPV6 address to CMM.
   Infected Motherboard: ALL
   Affected functions: BMC IPV6
   Validation :
     1) In CMM to check blade BMC global IPV6 address.
------------------------------------------------------------------------------------------

Firmware Version: 5.72.00
Firmware Name: SMT_MBAST2500_57200_V.bin
Firmware CRC: 9DAA0B54
Build date: 11/13/2019 17:00:13
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y
---------------------------------------------------------------------------------

1. Category: fix
   Description: 
     [102772] fix - Web Sort function shows abnormal data of sensor reading
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Go to Sensor Reading Web page
     2) Click Show Thresholds button
     3) Sort any Low NR/Low CT
     4) Check whether the table is normal or not

2. Category: new
   Description: 
     [ENGINEERING] new- Support third aux revision in BMC FW version format (1.xx.yy), form 299-00-190429-001
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Check BMC FW version should be x.yy.zz format

3. Category: new
   Description: 
     [ENGINEERING] new - Support Unique Pre-programmed Default Password, form 299-00-190617-001.
   Infected Motherboard: ALL
   Affected functions: reset default, user configurations
   Validation :
     1) Use programmer to flash new FW
     2) IPMICMD raw 0x30 0x74 0x01 to check unique password presence; 0 for empty and 1 for presence.
     3) IPMICMD raw 0x30 0x74 0x01 <unique password bytes> to set unique password.
     4) IPMICMD raw 0x30 0x74 0x03 <unique password bytes> to verify unique password validation.
     5) Try to apply the 2) 3) 4) again.
     6) Lock unique password.
        option1: IPMICMD raw 0x30 0x74 0x01 <LOCK> to lock unique password.
        option2: to reboot BMC will lock unique password.
     7) After LOCK, unique password cannot be set or verified again.
     8) Verify three factory default options from web page and all options preserve network settings
     9) POST 'redfish/v1/Managers/1/Actions/Oem/ManagerConfig.Reset' with options. 
        "Option": "PreserveUser"
        "Option": "ClearConfig"
        "Option": "ResetToADMIN"
     10) IPMICMD raw 0x30 0x40 to reset default all settings but preserve network configuration and FRU.
     11) IPMICMD raw 0x30 0x42 to reset default all settings but preserve FRU.
     12) IPMICMD raw 0x30 0x41 to reset default all settings including FRU.
     13) IPMICMD raw 0x30 0x48 0x00 to reset default all settings but preserve network/users/FRU
     14) IPMICMD raw 0x30 0x48 0x01 to reset default all settings but preserve network/ADMIN/FRU

4. Category: new
   Description: 
     [ENGINEERING] new - support KCM privileges
   Infected Motherboard: ALL
   Affected functions: KCS privileges
   Validation :
     1) KCS default privilege is ADMIN.
     2) ipmitool raw 0x30 0x80 0x41 to set kcs privilege Callback.
     3) ipmitool raw 0x30 0x80 0x42 to set kcs privilege User.
     4) ipmitool raw 0x30 0x80 0x43 to set kcs privilege Operator.
     5) ipmitool raw 0x30 0x80 0x44 to set kcs privilege Administrator.
     6) ipmitool raw 0x30 0x81 to get KCS privilege

5. Category: new
   Description: 
     [ENGINEERING] new - information about BMC location, MidPlane product name, and serial number via CMM
   Infected Motherboard: ALL
   Affected functions: N/A
   Validation :
    TestCase1: Interface and raw command
        1) Wait until both CMM and BMC initialized
        2) Checked CMM WebUI -> Blade System -> Blade Status -> Location format: CMMName-A10-2, or A10-2 (default)
        3) Checked CMM Redfish location under /Chassis/1/Blade/
        4) Raw command 0x30 0x71 0x23 on BMC to get location
        5) Raw command 0x30 0x71 0x25 on BMC to get MidPlane product name
        6) Raw command 0x30 0x71 0x27 on BMC to get MidPlane serial number
    TestCase2: Change CMM name
        1) Login CMM WebUI -> Blade System -> CMM
        2) Change CMM name and click “Apply” to save
        3) Checked CMM WebUI -> Blade System -> Blade Status -> Location  format: CMMName-A10-2, or A10-2 (default)
        4) Checked CMM Redfish location under /Chassis/1/Blade/
        5) Raw command 0x30 0x71 0x23 on BMC to check location

6. Category: new
   Description: 
     [ENGINEERING] new - JAVA KVM text copy and paste feature
   Infected Motherboard: ALL
   Affected functions: JAVA KVM
   Validation :
     1) Login to WebGUI.
     2) Go to Remote Control > Console Redirection.
     3) Launch Console.
     4) Copy what you wnat to paste on your local and click Macro > Paste Text to see if text copy and paste correctly.

7. Category: security
   Description: 
     [ENGINEERING] security - WEB session ID is too weak
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) use Firefox cookie manager to check BMC web session SID

8. Category: security
   Description: 
     [ENGINEERING] security - WEB CSRF security protection
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) change HTTP request Origin into different IP, Webpage will logout.

9. Category: security
   Description: 
     [ENGINEERING] security - HTML Injection issue in web username input field
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Login Web, configuration, user section
     2) Create a user like <imgsrc=1>
     3) Check whether username table shows the plaintext username or not

10. Category: security
   Description: 
     [ENGINEERING] security - XSS cookie attack, effect language setting
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Set Browser break-point and login WebGUI
     2) change cookie language to " onerror=alert(document.cookie) idk="
     3) break-point go next
     4) login success

11. Category: security
   Description: 
     [ENGINEERING] security - Protect DDNS setting from web might attack by malware.
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Use chrome development tool to change the request data before sending form
     2) Check if the setting values are legal.

12. Category: security
   Description: 
     [ENGINEERING] security - Check bounds of stack buffer to avoid ROP chain attack.
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) Verify mount ISO through Java iKVM and WEB virtual media. 
------------------------------------------------------------------------------------------

Firmware Version: 5.71
Firmware Name: SMT_MBAST2500_571_V.bin
Firmware CRC: 5B8605CB
Build date: 10/7/2019 23:55:16
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.45 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y

1. Category: fix
   Description: 
     [ENGINEERING] fix - Cannot launch HTML5/JavaKVM through CMM
   Infected Motherboard: ALL
   Affected functions: KVM
   Validation :
    1) Make sure the BMC date and time is current.
    2) Make sure SMCIPMITool_2.22.1_build.190923_bundleJRE_Windows
    3) Launch HTML5 through BMC successfully.
    4) Launch HTML5 through CMM successfully.
    5) Launch JavaKVM through BMC successfully.
    6) Launch JavaKVM through CMM successfully.
    7) Launch JavaKVM through SMCIPMITool <bmcip> <username> <password> kvmwa successfully. If users want to mount USB, please run SMCIPMITool with administrator privilege.
    8) Mount virtual storage through JavaKVM of CMM/BMC/SMCIPMItool
    9) Go to WebGUI Virtual Media ->CD-ROM Image. Check the mount status.
    10) Unmount virtual storage through JavaKVM of CMM/BMC/SMCIPMItool.
    11) Go to WebGUI Virtual Media ->CD-ROM Image to save and mount iso and check status.

2. Category: fix
   Description: 
     [ENGINEERING] fix - WebUI Users will not allow space symbol in username and password
   Infected Motherboard: ALL
   Affected functions: user
   Validation :
    1) Login WebUI
    2) Select Configuration -> Users -> Add/Modify User
    3) Include space in username/password
    4) Error message with corresponding language setting and return
---------------------------------------------------------------------------------------------------------- 

Firmware Version: 5.70
Firmware Name: SMT_MBAST2500_570_V.bin
Firmware CRC: 045BF92E
Build date: 9/30/2019 12:04:58
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.44 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y

1. Category: fix
   Description: 
     [ENGINEERING] fix - redfish/v1/Managers/1/VM1/CfgCD should not show password plain text
   Infected Motherboard: ALL
   Affected functions: redfish
   Validation :
    1) Clear SDR
    2) get redfish/v1/Managers/1/VM1/CfgCD, the password is ********

2. Category: fix
   Description: 
     [ENGINEERING] fix - Fix During Web virtual media mount, changing VM port over 4 times will fail to mount VM images any more.
   Infected Motherboard: ALL
   Affected functions: virtual media
   Validation :
  [Case 1: Change VM port]
    1) Log in WebGUI
    2) Go to Virtual Media ->CD-ROM Image. Mount an iso image.
    3) Go to Configuration ->PORT. Change Virtual media port. Save.
    4) Got to Virtual Media ->CD-ROM Image. Check if the iso is unmount.
    5) Check if it's successful to mount iso again.
    6) Repeat Step 3 to Step 5 more than 4 times. Check if it's still successful to mount iso.

  [Case 2: Enable/disable VM service]
    1) Log in WebGUI
    2) Go to Virtual Media ->CD-ROM Image. Mount an iso image.
    3) Go to Configuration ->PORT. Disable Virtual media. Save.
    4) Enable Virtual media. Save.
    5) Got to Virtual Media ->CD-ROM Image. Check if the iso is unmount.
    6) Check if it's successful to mount iso again.
    7) Repeat Step 3 to Step 6 more than 4 times. Check if it's still successful to mount iso.

3. Category: new
   Description: 
     [ENGINEERING] new - Disabled VM plug out button on Java iKVM if .iso or .ima mounted via WebUI
   Infected Motherboard: ALL
   Affected functions: Watchdog
   Validation :
    [Case 1: Upload CDROM]
    1) Log in WebUI
    2) Go to Virtual Media -> CDROM Image. Mount an iso image.
    3) Launch iKVM console and go to Virtual Storage   
    4) Plug out button should be greyed out

    [Case 2: Upload Floppy Disk]
    1) Log in WebUI
    2) Go to Virtual Media -> Floppy Disk. Mount an ima/img image.
    3) Launch iKVM console and go to Virtual Storage
    4) Plug out button should be greyed out

4. Category: fix
   Description: 
     [ENGINEERING] fix - Set SMTP sender email then get will got incorrect response of setting via in-band interface
   Infected Motherboard: ALL
   Affected functions: SMTP
   Validation :
    1) boot into DOS
    2) get SMTP sender email cmd: ipmicfg -raw 30 68 06 00 05
    3) set SMTP sender email cmd: ipmicfg -raw 30 68 06 01 05 66 31 38 62 6d 74 66 62 63 30 36 31 40 74 73 6d 63 2e 63 6f 6d 2e 74 77 00
    4) get SMTP sender email cmd: ipmicfg -raw 30 68 06 00 05 to check setting
    5) set SMTP sender email cmd: ipmicfg -raw 30 68 06 01 05 6d 74 66 62 63 30 36 31 40 74 73 6d 63 2e 63 6f 6d 2e 74 77 00
    6) get SMTP sender email cmd: ipmicfg -raw 30 68 06 00 05 to check setting

5. Category: fix
   Description: 
     [ENGINEERING] fix - Watchdog set the pre-timeout NMI interrupt doesn't work correctly after counting down to pre-timeout interval
   Infected Motherboard: ALL
   Affected functions: Watchdog
   Validation :
    1) ipmitool -I lanplus -H <hostip> -U <username> -P <password> raw 0X06 0X24 0X04 0X21 0X1E 0X10 0X90 0X01
    2) ipmitool -I lanplus -H 172.31.32.51 -U ADMIN -P ADMIN mc watchdog reset
    3) ipmitool -I lanplus -H 172.31.32.51 -U ADMIN -P ADMIN mc watchdog get
    4) Check the NMI will happen when count down to 30 sec
---------------------------------------------------------------------------------------------------------- 

Firmware Version: 5.68
Firmware Name: SMT_MBAST2500_568_V.bin
Firmware CRC: D46198F6
Build date: 9/12/2019 16:34:17
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.37 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By | Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization | N
HW Vendor Updates | N
BIOS/IPMI Workaround | N
BIOS/IPMI Vendor Updates | N
BIOS/IPMI Enhancements | Y
BIOS/IPMI Bug fixes | Y

1. Category: new
 Description: 
 [ENGINEERING] Update System Trouble Shooting Script
 Infected Motherboard: ALL
 Affected functions: Trouble shooting result
 Validation :
 1) Dump the system trouble shooting file through WEB GUI.

2. Category: fix
 Description: 
 [ENGINEERING] fix issue 101538 - IPMI WebGUI Troubleshooting page sometimes will disappear
 Infected Motherboard: ALL
 Affected functions: Trouble shooting page
 Validation :
 1) Login web then check Trouble Shooting Link must exist via ADMIN.

3. Category: fix
 Description: 
 [ENGINEERING] Fix issue 101299 IPMI Troubleshooting function is wrong and generate file % always stop in 99% after CATERR happened
 Infected Motherboard: ALL
 Affected functions: Trouble shooting page
 Validation :
 1) use Intel DCI dongle to trigger CAT_ERR
 2) check CAT_ERR has generated
 3) troubleshooting can generate and download successful

4. Category: new
 Description: Add: Support VM Security patch
 Infected Motherboard: ALL
 Affected functions: IKVM, VM, HTML5
 Validation :
 1) WebGUI "Remote Control" -> "iKVM/HTML5"
 2) WebGUI "Remote Control" -> "Console Redirection"
 3) WebGUI "Configuration" -> "Port"
 4) WebGUI "Virtual Media"
 5) Set/get VM port through WEB/CLI/redfish
 6) JavaKVM -> Mount USB device
---------------------------------------------------------------------------------------------------------- 

Firmware Version: 5.67
Firmware Name: SMT_MBAST2500_567_V.bin
Firmware CRC: 56DC30D3
Build date: 8/21/2019 19:45:22
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.43 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: new
   Description: 
     [ENGINEERING] new - Redfish support RAID card functions
   Infected Motherboard: ALL
   Affected functions: RAID card update and configure
   Validation :
    1) Issuing requests to the related APIs.

2. Category: fix
   Description: 
     [ENGINEERING] fix - User password can be add and modify to All Space character 
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
    1) Add or modify the user password, check that it cannot be all space
    
3. Category: fix
   Description: 
     [ENGINEERING] improvement - disable Power capping capability & change power consumption SDR naming. 
   Infected Motherboard: B2SD2, B2SD1
   Affected functions: power capping & power consumption SDR naming
   Validation :
    1) check sensor reading of BladePwrReading.
    2) Check CMM to show power capping N/A.

4. Category: fix
   Description: 
     [ENGINEERING] fix - Fix NVME Temp not show in SMCIPMITool
   Infected Motherboard: B2SD2, B2SD1
   Affected functions: SMCIPMITool
   Validation :
    1) Install NVME drive in B2SD2/1
    2) Use SMCIPMITool to read Blade sensor NVME reading through CMM.

5. Category: fix
   Description: 
     [101101] fix - IPMI Virtual CDROM Image function is wrong" message is posted
   Infected Motherboard: ALL
   Affected functions: Virtual CDROM Image
   Validation :
    1) set "path to image" value with "\" or "/", and push [save] button . The value remains.

6. Category: fix
   Description: 
     [#100509 and #79275] fix - Set ServiceEnable of IPAccessControl via Redfish return HTTP status code 302
   Infected Motherboard: BALL
   Affected functions: Redfish
   Validation :
    1) Set ServiceEnable item via Redfish interface, it should get back HTTP code 200.

7. Category: fix
   Description: 
     [101096] fix - IPMI NVME SSD information is abnormal 
   Infected Motherboard: ALL
   Affected functions: NVME SSD information
   Validation :
    1) Check NVMe SSD information in WEBUI , no ¨N/A? and ¨0 Watt? show.

8. Category: fix
   Description: 
   [ENGINEERING] fix - WebUI LDAP SSL setting issue
   Infected Motherboard: ALL
   Affected functions:  LDAP SSL setting
   Validation :
     1)  Change the LDAP and SSL setting then verify via WebUI

9. Category: improvement
   Description: 
     [ENGINEERING] improvement - BIOS version extend from 8 bytes up to 16 bytes
   Infected Motherboard: ALL
   Affected functions: BIOS version string
   Validation :
    1) update BIOS to Test version with longer version string.
    2) Check BIOS version display on WebUI, redfish, OEM Command
------------------------------------------------------------------------------------------------------------------

Firmware Version: 5.66
Firmware Name: SMT_MBAST2500_566_V.bin
Firmware CRC: 56DC30D3
Build date: 7/25/2019 22:22:40
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.41 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: fix
   Description: 
     [ENGINEERING] fix - blade status show Initializing somehow
   Infected Motherboard: ALL
   Affected functions: CMM
   Validation :
    1) long time to monitor blade status in blade system page through CMM.
    
2. Category: fix
   Description: 
     [100705] fix - The incorrect display of CPU power in web-GUI 
   Infected Motherboard: B2SD2, B2SD1
   Affected functions: power consumption
   Validation :
    1) check blade PW consumption sensor reading.

3. Category: fix
   Description: 
     [100668] fix - Web Power Capping doesn't work on B2SD2 
   Infected Motherboard: B2SD2, B2SD1
   Affected functions: Power Capping
   Validation :
    1) Check or configure Blade pwoer capping in blade system page through CMM

4. Category: fix
   Description: 
     [100768] fix - System will shutdown automatically after upgrade BIOS and reset system by WebGUI  
   Infected Motherboard: B2SD2, B2SD1
   Affected functions: BIOS update
   Validation :
    1) do BIOS update during power on
    2) system should keep power on after BIOS update and reset system.

5. Category: fix
   Description: 
     [ENGINEERING] fix - CMM show 2 nodes for B2SD1  
   Infected Motherboard: B2SD2, B2SD1
   Affected functions: blade system-> blade status
   Validation :
    1) CMM show one node for B2SD1
    2) CMM show two nodes for B2SD2

6. Category: new
   Description: 
   [ENGINEERING] new - Displays all IPv4/IPv6 addresses on the sys_info page
   Infected Motherboard: ALL
   Affected functions: sys_info page
   Validation :
     1) Enable the network IPv6
     2) Check the sys_info page all IPv6 addresses are displayed
------------------------------------------------------------------------------------------------------------------

Firmware Version: 5.65
Firmware Name: SMT_MBAST2500_565_V.bin
Firmware CRC: 854DD527
Build date: 7/17/2019 16:51:46
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.41 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: fix
   Description: 
     [99464] fix - When logging with long AD name, the display is not formatted correctly.
   Infected Motherboard: ALL
   Affected functions: webpage top area
   Validation :
    1) Use LDAP or AD long string account login BMC.
    2) "[16 characters]..." will be displayed in web top area.
    
2. Category: fix
   Description: 
     [100369] fix - NM function test is fail 
   Infected Motherboard: B2SD2
   Affected functions: node manager
   Validation :
    1) check node manager function through SMCIPMITool

3. Category: fix
   Description: 
     [100368] fix - IPMI has a lot of sensor reading show "N/A" 
   Infected Motherboard: B2SD2
   Affected functions: sensor reading
   Validation :
    1) check sensor reading and fan control
------------------------------------------------------------------------------------------------------------------

Firmware Version: 5.64
Firmware Name: SMT_MBAST2500_564_V.bin
Firmware CRC: 5B2111B5
Build date: 7/3/2019 18:59:56
Supported Platform: B2SD1, B2SD2
Compatible CMM FW Version: 3.30 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: new
   Description: 
     [ENGINEERING] new -  support B2SD1 and B2SD2
   Infected Motherboard: B2SD1 and B2SD2
   Affected functions: ALL
   Validation :
    1) all platform related functionality.

2. Category: fix
   Description: 
     [ENGINEERING] fix -  Missing DIMM Information under hardware information of WebGUI
   Infected Motherboard: ALL
   Affected functions: hardware info
   Validation :
    1) heck whether the DIMM information under hardware information and sensor reading part show correctly
------------------------------------------------------------------------------------------------------------------

Firmware Version: 5.63
Firmware Name: SMT_MBAST2500_563_V.bin
Firmware CRC: A46010B1
Build date: 6/5/2019 17:59:52
Supported Platform: 
Compatible CMM FW Version: 3.30 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y


1. Category: fix
   Description: 
     [99575] fix -  dcmi power reading request failed.
   Infected Motherboard: ALL
   Affected functions: dcmi power reading
   Validation :
    1) ipmitool dcmi power reading
------------------------------------------------------------------------------------------------------------

Firmware Version: 5.62
Firmware Name: SMT_MBAST2500_562_V.bin
Firmware CRC: 414F2D2B
Release date: 5/29/2019 13:32:17
Supported Platform: 
Compatible CMM FW Version: 3.30 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: new
   Description: 
     [ENGINEERING] new - CMM can communicate with MicroBlade without I2C enable.
   Infected Motherboard: ALL
   Affected functions: Communication between CMM and BMC
   Validation :
     1) Check the CMM->Blade System->CMM->Mgmt Switch FW Revision as 02.03
     2) Update Microblade FW SMT_MBIPMI_361_REDFISH
     3) Disable CMM I2C to access blade. CMM ipmi raw 0x30 0x70 0xf6 1 0 1 0 0 0 0 0
     4) AC cycle micro blade.
     5) CMM will show the status of the blade with SMT_MBIPMI_361_REDFISH as normal and will show the blade with old fw status as initializing.

2. Category: new
   Description: 
     [ENGINEERING] new - separate node server name and blade name
   Infected Motherboard: ALL
   Affected functions: Blade name and node name
   Validation :
     1) Set/get node name and blade name through CMM WEBUI, REDFISH, IPMICMD, SSHCLI, SNMP

3. Category: improvement
   Description: 
     [ENGINEERING] improvement - according to RFC 7235 section 2.1, the redfish scheme is case insensitive
   Infected Motherboard: ALL
   Affected functions: redfish
   Validation :
     1) N/A

4. Category: fix
   Description: 
     [ENGINEERING] fix - License should be activated when mac change if oob source enabled
   Infected Motherboard: ALL
   Affected functions: only OOB license
   Validation :
     1) Active OOB
     2) Enable OOB source. Raw 0x30 0x70 0x54 0x01 0x01 
     3) Check OOB source. Raw 0x30 0x70 0x54 0x00 <=return 01
     4) Change BMC MAC address.
     5) Check OOB should keep active and valid.
     6) Active OOB
     7) Disable OOB source. Raw 0x30 0x70 0x54 0x01 0x00 
     8) Check OOB source. Raw 0x30 0x70 0x54 0x00 <=return 00
     9) Change MAC address.
     10) Check OOB should keep inactive and invalid. 

5. Category: fix
   Description: 
     [ENGINEERING] fix - power/temp record not clean after factory default
   Infected Motherboard: ALL
   Affected functions: factor default
   Validation :
     1) Check power/temp record after factory default

6. Category: fix
   Description: 
     [98437] fix - Abnormal sensor reading under CMM view using SMCIPMITOOL 
   Infected Motherboard: ALL
   Affected functions: SMCIPMITool
   Validation :
     1) SMCIPMITool microblade node sensor.
     2) check sensor reading 0 on un-install device.

7. Category: fix
   Description: 
     [ENGINEERING] fix -  SMCIPMITOOL mel download fail after did mel clear
   Infected Motherboard: CMM
   Affected functions: maintenance event log
   Validation :
     1) SMCIPMITool mel clear
     2) SMCIPMITool mel download sample.txt
     3) It will return 0 and download file successfully.

8. Category: fix
   Description: 
     [ENGINEERING] fix -  cannot restore alert configuration 
   Infected Motherboard: ALL
   Affected functions: IPMI configuration restore
   Validation :
     1) save IPMI configuration.
     2) restore IPMI configuration.

9. Category: fix
   Description: 
     [97682] fix -  Fix set ipv6 fail via SMCIPMITool
   Infected Motherboard: ALL
   Affected functions: IPMI configuration restore
   Validation :
    1) ./SMCIPMITool 10.132.160.235 ADMIN ADMIN ipmi lan ipv6 add 4
        2001:0000:0000:0000:0000:0000:0000:0011 64
    2) ./SMCIPMITool 10.132.160.235 ADMIN ADMIN ipmi lan ipv6 list
---------------------------------------------------------------------------------------------

Firmware Version: 5.60
Firmware Name: SMT_MBAST2500_560_V.bin
Firmware CRC: AACB0F07
Release date: 4/4/2019 17:14:52
Supported Platform: 
Compatible CMM FW Version: 3.30 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: fix
   Description: 
     [ENGINEERING] fix - Blade SMCIPMITool auto test case 905 failed because of maintenance event log file was deleted
   Infected Motherboard: ALL
   Affected functions: SMCIPMITool auto test case 905
   Validation :
     1) Blade SMCIPMITool auto test case 905

2. Category: fix
   Description: 
     [ENGINEERING] fix - CMM cannot show node maintenance event log because of timing issue
   Infected Motherboard: ALL
   Affected functions: maintenance event log
   Validation :
     1) CMM to show maintenance event log for each node.

3. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - reduced memory to verify signed FW.
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) update 5.59 to 5.60
     2) update 5.60 to 5.59

4. Category: fix
   Description: 
     [ENGINEERING] fix - patch pantsdown security fix.
   Infected Motherboard: ALL
   Affected functions: inband socflash
   Validation :
     1) boot to OS and socflash should be blocked.

5. Category: fix
   Description: 
     [ENGINEERING] fix - there is random aux rev sometimes
   Infected Motherboard: ALL
   Affected functions: Get Device ID
   Validation :
     1) use ipmitool raw 0x06 0x01
     2) the last 4 bytes should not have random value and they should be 0x00.

6. Category: fix
   Description: 
     [ENGINEERING] fix - Fix top menu refresh link cannot work after AD configuration
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) configuration->select one row and click button add or modify, then press Cancel or Modify button
     2) press refresh link of top menu

7. Category: fix
   Description: 
     [ENGINEERING] fix - Alert destination not reset after factory default
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) factory reset default 
     2) check Alert destination should be reset.

8. Category: fix
   Description: 
     [ENGINEERING] fix - WEBUI BMC unit reset cannot work in 3.57.
   Infected Motherboard: ALL
   Affected functions: WEBUI
   Validation :
     1) BMC unit reset via WEBUI.

9. Category: new
   Description: 
     [ENGINEERING] new - add /redfish/managers/ntp/TimeUpdateMode in redfish
   Infected Motherboard: ALL
   Affected functions: date and time mode
   Validation :
     1) get date and time mode Local, NTP and CMM via redfish
     2) set date and time mode Local, NTP and CMM via redfish

10. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - update copyright 2014-2019
   Infected Motherboard: ALL
   Affected functions: copyright
   Validation :
     1) check WEBUI copyright 2014-2019

11. Category: enhancement
   Description: 
     [ENGINEERING] enhancement - redfish return error 500 after stress redfish get request about 100 more times
   Infected Motherboard: ALL
   Affected functions: redfish
   Validation :
     1) stress redfish get request 500 times at least.
---------------------------------------------------------------------------------------------

Firmware Version: 5.57
Firmware Name: SMT_MBAST2500_557_V.bin
Firmware CRC: 09CC0687
Release date: 1/18/2019 13:41:52
Supported Platform: 
Compatible CMM FW Version: 3.30 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: new
   Description: 
     [ENGINEERING] new - UefiPxe boot option can be set by redfish.
   Infected Motherboard: ALL
   Affected functions: redfish
   Validation :
     1) use redfish patch UefiPxe

2.   Category: fix
     Description: 
         [94478] fix - EVENT SEVERITY of Warning alert mismatch
     Infected Motherboard: ALL
     Affected functions: Alert
     Validation :
        1) follow 944478 to verify.

3. Category: fix
   Description: 
     [94482] fix - User cannot set up valid LDAP configuration
   Infected Motherboard: ALL
   Affected functions: LDAP
   Validation :
     1) follow 94482 to verify
---------------------------------------------------------------------------------------------

Firmware Version: 5.56
Firmware Name: SMT_MBAST2500_556_V.bin
Firmware CRC: 35B15BAB
Release date: 11/30/2018 19:38:03
Supported Platform: 
Compatible CMM FW Version: 3.30 and above
Redfish API : Redfish_API_full_list_2018_03_16.xlsx

SW ECO Caused By         |  Status
--------------------------------------------------------------------------------
BIOS/IPMI Customization  |     N
HW Vendor Updates        |     N
BIOS/IPMI Workaround     |     N
BIOS/IPMI Vendor Updates |     N
BIOS/IPMI Enhancements   |     Y
BIOS/IPMI Bug fixes      |     Y

1. Category: new
   Description: 
     [ENGINEERING] new - IPMI FW with signature.
   Infected Motherboard: B11SCG, B11SRE
   Affected functions: ALL
   Validation :
     1) signed IPMI FW version format start from 5.XX.
     2) unsigned IPMI FW can become signed IPMI FW.
     3) signed IPMI FW can update signed IPMI FW.
     4) signed IPMI FW cannot become unsigned IPMI FW.

2. Category: new
   Description: 
     [ENGINEERING] new - IPMI FW can update BIOS with signature.
   Infected Motherboard: B11SCG, B11SRE
   Affected functions: ALL
   Validation :
     1) unsigned BIOS can become unsigned BIOS.
     2) signed BIOS can update signed BIOS.
     3) signed BIOS cannot become unsigned BIOS.

3. Category: fix
   Description: 
     [94986] fix - Redfish automation test failed 
   Infected Motherboard: B2SC1-CPU
   Affected functions: 
   Validation :
     1) follow project board #94986 to verify.
---------------------------------------------------------------------------------------------
