1.
a.
2.
3.
1.
2.
3.
1.
a.
Generating/Burning a Firmware Supporting Secure Host
Make sure you have INI and mlx files suitable for the device.Both files are available for
download at:http://www.mellanox.com/page/custom_firmware_table
Add cr_protection_en=true under [HCA] section in the INI file.
Burn the image on the device using mstflint:
# mstflint -d 41:00.0 -i fw-4099.secure.bin b
For changes to take effect, reboot is required.
Setting the Secure Host Key
To set the key, run:
# mstflint -d 41:00.0 set_key 22062011
Setting the HW Key - OK
Restoring signature - OK
Disabling/Enabling Access to the Hardware
Access the hardware while hardware access is disabled:
# mstflint -d 41:00.0 q
E- Cannot open 41:00.0: HW access is disabled on the device.
E- Run "mstflint -d 41:00.0 hw_access enable" in order to enable HW access.
Enable hardware access:
# mstflint -d 41:00.0 hw_access enable
Enter Key: ********
Disable hardware access:
# mstflint -d 41:00.0 hw_access disable
Removing the Secure Host
To remove the secure host feature:
Make sure you have INI and MLX file suitable for the device.
Remove cr_protection_en=true from the INI (if present)
A driver restart is required to activate the new key.
This section is applicable to Group 1 network adapters only.
To Next Page
Loading...
Need help?
General