CN117667830A - Server control board card and server - Google Patents

Abstract

The application discloses server control panel card and server, wherein include: the safety control substrate and the firmware protection board card are detachably connected based on the first connector; the safety control substrate is provided with a substrate management controller and a first interface module electrically connected with the substrate management controller; the firmware protection board card is provided with a firmware protection recovery module; the base plate management controller is electrically connected with the firmware protection recovery module based on the first connector and is used for receiving a first firmware upgrading packet based on the first interface module and updating a firmware data packet in the firmware protection recovery module based on the first firmware upgrading packet; the firmware protection recovery module is used for carrying out firmware protection recovery on the baseboard management controller based on the updated firmware data packet. The control board card and the server can meet the personalized requirements of different clients on the platform firmware protection recovery function, and the manufacturing cost and the use cost of the server are reduced.

Description

Server control board card and server

Technical Field

The application relates to the technical field of servers, in particular to a server control board card and a server.

Background

The server is used as the most important basic device of internet manufacturers, and the information security of the server becomes very important. The server includes many components, each of which needs to run different firmware. These firmware are vulnerable to network attacks, thereby affecting the proper functioning of the server.

Platform firmware protection recovery (Platform Firmware Resilience, PFR) is a brand-new security mechanism, provides a brand-new method for protecting server firmware, can prevent attacks on all firmware in the server, protects platform assets, detects malicious behaviors such as damaged firmware, and recovers the platform firmware to a good state. If the corresponding hardware device is to be configured in the server to support the protection and recovery of the platform firmware, the overall cost of the server is increased. Thus, different clients place different requirements on whether the server supports platform firmware protection recovery.

For a server manufacturer, how to reasonably configure hardware in a server, meet the personalized requirements of different clients on platform firmware protection and recovery, and reduce the use cost of the server becomes a technical problem to be solved in the industry.

Disclosure of Invention

The application provides a server control board card and a server, which are used for solving the technical problems of reasonably configuring hardware in the server, meeting the personalized requirements of different clients on platform firmware protection and recovery and reducing the use cost of the server.

The application provides a server control board card, which comprises a safety control substrate and a firmware protection board card;

the safety control substrate is detachably connected with the firmware protection board card based on a first connector;

the safety control substrate is provided with a substrate management controller and a first interface module electrically connected with the substrate management controller; the firmware protection board card is provided with a firmware protection recovery module;

the baseboard management controller is electrically connected with the firmware protection recovery module based on the first connector, and is used for receiving a first firmware upgrade packet based on the first interface module and updating a firmware data packet in the firmware protection recovery module based on the first firmware upgrade packet;

the firmware protection recovery module is used for carrying out firmware protection recovery on the baseboard management controller based on the updated firmware data packet.

In some embodiments, a physical interface board card is also included;

the physical interface board card is provided with a second interface module;

the safety control substrate is detachably connected with the physical interface board card based on a second connector;

the baseboard management controller is electrically connected with the second interface module based on the second connector, and is used for receiving a second firmware upgrade package based on the second interface module and updating the firmware data package in the firmware protection recovery module based on the second firmware upgrade package.

In some embodiments, the first interface module includes a first physical layer chip and a first network interface electrically connected to each other.

In some embodiments, the physical interface board card includes a data processing daughter board card and an input-output daughter board card;

the second interface module comprises a second physical layer chip and a second network interface;

the second physical layer chip is arranged on the data processing daughter board;

the second network interface is arranged on the input/output daughter board card;

the data processing daughter board is detachably connected with the safety control substrate based on the second connector;

the input/output daughter board is detachably connected with the data processing daughter board based on a third connector.

In some embodiments, the second network interface is electrically connected with the second physical layer chip based on the third connector; the third connector is a cable connector.

In some embodiments, the security control substrate is mounted to a first side of a server; the input/output daughter board is arranged on the second side surface of the server.

In some embodiments, the security control substrate has a gating module disposed thereon;

the first end of the gating module is connected with the data transmission end of the baseboard management controller;

the second end of the gating module is connected with the first end of the first interface module;

the third end of the gating module is connected with the first end of the second interface module;

the fourth end of the gating module is connected with the control output end of the baseboard management controller;

the gating module is used for:

receiving an interface selection signal sent by the baseboard management controller;

under the condition that the interface selection signal is determined to be a first interface selection signal, establishing electrical connection with the first interface module, and disconnecting electrical connection with the second interface module;

and under the condition that the interface selection signal is determined to be a second interface selection signal, establishing electrical connection with the second interface module, and disconnecting electrical connection with the first interface module.

In some embodiments, the data processing daughter board is provided with a first resistor; the first end of the first resistor is connected with the grounding end in the data processing daughter board;

the safety control substrate is provided with a second resistor; the first end of the second resistor is connected with a power supply end in the safety control substrate, and the second end of the second resistor is connected with a control input end of the substrate management controller;

and under the condition that the data processing daughter board is connected with the safety control substrate, the second end of the first resistor is connected with the second end of the second resistor.

In some embodiments, the baseboard management controller is configured to:

outputting the first interface selection signal based on the control output terminal under the condition that the control input terminal is detected to be at a high level;

and outputting the second interface selection signal based on the control output terminal under the condition that the control input terminal is detected to be at a low level.

The application provides a server, which comprises the server control board card.

According to the server control board card and the server, the safety control substrate and the firmware protection board card are detachably connected based on the first connector; the safety control substrate is provided with a substrate management controller and a first interface module electrically connected with the substrate management controller; the firmware protection board card is provided with a firmware protection recovery module; the baseboard management controller receives a first firmware upgrade package based on the first interface module, and updates a firmware data package in the firmware protection recovery module based on the first firmware upgrade package; the firmware protection recovery module carries out firmware protection recovery on the baseboard management controller based on the updated firmware data packet; the control board card is integrally divided into the safety control substrate and the firmware protection board card which can be freely selected, so that the personalized requirements of different clients on the platform firmware protection and recovery functions can be met, and the manufacturing cost and the use cost of the server are reduced; meanwhile, after the firmware protection board card is selected, the firmware data packet in the firmware protection board card can be updated and managed through the substrate management controller and the first interface module in the safety control substrate, so that the equipment performance of each component in the server is improved.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the application and together with the description, serve to explain the principles of the application.

In order to more clearly illustrate the technical solutions of the present application or the prior art, the following description will briefly introduce the drawings used in the embodiments or the description of the prior art, and it is obvious that, in the following description, the drawings are some embodiments of the present application, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.

Fig. 1 is a schematic structural diagram of a server control board card provided in the present application;

FIG. 2 is a second schematic diagram of the server control board card provided in the present application;

FIG. 3 is a third schematic diagram of the server control board card provided in the present application;

FIG. 4 is a schematic diagram of a server control board card according to the present disclosure;

FIG. 5 is a schematic diagram of a server control board card according to the present disclosure;

FIG. 6 is a schematic diagram of a server control board card according to the present disclosure;

FIG. 7 is a schematic diagram of a server control board card according to the present disclosure;

fig. 8 is a schematic structural diagram of a server provided in the present application.

Detailed Description

In order to make the present application solution better understood by those skilled in the art, the following description will be made in detail and with reference to the accompanying drawings in the embodiments of the present application, it is apparent that the described embodiments are only some embodiments of the present application, not all embodiments. All other embodiments, which can be made by one of ordinary skill in the art based on the embodiments herein without making any inventive effort, shall fall within the scope of the present application.

It should be noted that the terms "first," "second," and the like herein are used for distinguishing between similar objects and not necessarily for describing a particular sequential or chronological order. It is to be understood that the data so used may be interchanged where appropriate such that embodiments of the present application described herein may be implemented in sequences other than those illustrated or otherwise described herein. Furthermore, the terms "comprises," "comprising," and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, article, or apparatus that comprises a list of steps or elements is not necessarily limited to those steps or elements expressly listed but may include other steps or elements not expressly listed or inherent to such process, method, article, or apparatus.

Fig. 1 is a schematic structural diagram of a server control board card provided in the present application, and as shown in fig. 1, a server control board card 100 includes a security control substrate 110 and a firmware protection board card 120.

The security control substrate 110 and the firmware protection board card 120 are detachably connected based on the first connector 130. The broken lines in the figure represent the detachable connections.

The security control substrate 110 is provided with a substrate management controller 111 and a first interface module 112 electrically connected to the substrate management controller 111. The firmware protection board card 120 is provided with a firmware protection recovery module 121.

The baseboard management controller 111 is electrically connected to the firmware protection recovery module 121 based on the first connector 130, and is configured to receive a first firmware upgrade package based on the first interface module 112, and update the firmware in the firmware protection recovery module 121 based on the first firmware upgrade package.

The firmware protection recovery module 121 is configured to perform firmware protection recovery on the baseboard management controller 111 based on the updated firmware data packet.

Specifically, the server control board card provided in the embodiment of the present application is applied to various types of servers, including tower servers, rack servers, blade servers, high-density servers, rack servers, and the like, and the type of the server is not specifically limited in the embodiment of the present application.

Firmware is software in a hardware device that is responsible for controlling the operation and function of the device. In order to realize the platform firmware protection recovery function (PFR function) in the server, the following two schemes are adopted: the first scheme is that a hardware module for realizing the protection and recovery functions of the platform firmware is directly arranged in a control board card of a server; the second scheme is to divide the control board card of the server into a first board card and a second board card. The first board is a security control (Secure Control Module, SCM) board and the second board is a baseboard control (Run Baseboard Management Controller, RUNBMC) board. Setting a time sequence complex programmable logic device (Complex Programmable Logic Device, CPLD), a PFR module, a PFR Flash (Flash memory) and the like in a first board card; and setting the BMC and a corresponding memory module in the second board card. Whichever technical scheme is selected, the area of the control board card in the server is larger, and meanwhile, the manufacturing cost and the use cost of the server are increased, so that the method cannot meet the requirements of partial clients for undesirable configuration of the platform firmware protection recovery function.

The embodiment of the application provides a server control board card which adopts the thought of modularized design, and the control board card is integrally divided into a safety control substrate and a firmware protection board card which can be selected according to actual requirements.

The security control substrate is used for implementing functions such as server remote control management and monitoring, and can be called as an SCM substrate. Therefore, at least a Baseboard Management Controller (BMC) is provided on the security control baseboard. In addition, a first interface module can be arranged on the safety control substrate. The first interface module is electrically connected with the baseboard management controller and is used for forwarding data sent by the external equipment to the baseboard management controller or forwarding data sent by the baseboard management controller to the external equipment.

The firmware protection board card is provided with a firmware protection recovery module. The firmware protection recovery module is used for realizing the platform firmware protection recovery function and can comprise a PFR chip and a PFR memory. The PFR chip can be realized by CPLD, and is mainly used for detecting, recovering and protecting the firmware of each component in the server. The PFR memory may be implemented in Flash for storing firmware related files.

The firmware data packets in the firmware protection recovery module are typically stored as backup data packets or mirror data packets. After detecting that the firmware file of any component is destroyed, the firmware protection recovery module writes the firmware data packet stored in the firmware protection recovery module into the component, so that the component can be recovered.

A first connector may be provided between the security control substrate and the firmware protection board card for detachable connection. The first connector is required to realize not only the connection of the safety control substrate and the firmware protection board card from the mechanical structure, but also the connection of the substrate management controller and the firmware protection recovery module from the signal transmission. The first connector may be a gold finger connector, a board-to-board connector, or the like.

The baseboard management controller is electrically connected with the firmware protection recovery module through the first connector and can be used for receiving a first firmware upgrading packet sent by the external device through the first interface module, and updating the firmware data packet in the firmware protection recovery module after receiving the first firmware upgrading packet, namely replacing the firmware data packet with a lower version by using the firmware upgrading packet with a higher version.

The firmware upgrade package is a firmware data package after version upgrade, and is generally used for improving the performance of the device, increasing the functions of the device, optimizing the safety of the device, improving the compatibility of the device, repairing the problems existing in the device, reducing the power consumption of the device, and the like.

The firmware protection recovery module can perform firmware protection recovery on the baseboard management controller according to the updated firmware data packet. For example, the firmware protection recovery module can monitor the activities between all the component processors in the server and the corresponding memories of the serial peripheral interfaces (Serial Peripheral Interface, SPI) in real time, and after detecting that the firmware file of any component is destroyed, the firmware data packet after updating is written into the component, so that the component can be recovered, and has better performance.

The baseboard management controller can be used to manage the firmware packages for each of the different components. For example, the baseboard management controller may build a firmware version list for different components, and record the version numbers of the firmware data packets corresponding to the components. When the device is connected with the external device, the baseboard management controller can send the firmware version list to the external device, so that the external device can determine a firmware upgrading packet corresponding to each component according to the firmware version list, and send the firmware upgrading packet with version updating and the version number of the firmware upgrading packet to the baseboard management controller.

According to the server control board card provided by the embodiment of the application, the safety control substrate and the firmware protection board card are detachably connected based on the first connector; the safety control substrate is provided with a substrate management controller and a first interface module electrically connected with the substrate management controller; the firmware protection board card is provided with a firmware protection recovery module; the baseboard management controller receives a first firmware upgrade package based on the first interface module, and updates a firmware data package in the firmware protection recovery module based on the first firmware upgrade package; the firmware protection recovery module carries out firmware protection recovery on the baseboard management controller based on the updated firmware data packet; the control board card is integrally divided into the safety control substrate and the firmware protection board card which can be freely selected, so that the personalized requirements of different clients on the platform firmware protection and recovery functions can be met, and the manufacturing cost and the use cost of the server are reduced; meanwhile, after the firmware protection board card is selected, the firmware data packet in the firmware protection board card can be updated and managed through the substrate management controller and the first interface module in the safety control substrate, so that the equipment performance of each component in the server is improved.

In some embodiments, the server control board card further comprises a physical interface board card;

the physical interface board card is provided with a second interface module;

the safety control substrate and the physical interface board card are detachably connected based on a second connector;

the baseboard management controller is electrically connected with the firmware protection recovery module based on the second connector and is used for receiving a second firmware upgrading packet based on the second interface module and updating a firmware data packet in the firmware protection recovery module based on the second firmware upgrading packet.

In particular, the physical interface card may also be configured in consideration of the fact that the first interface module may not be configured in the security control substrate, or that the installation position of the first interface module in the security control substrate is inconvenient for a maintainer of the server to use.

Fig. 2 is a second schematic structural diagram of the server control board card provided in the present application, and as shown in fig. 2, the server control board card further includes a physical interface board card 140. The physical interface board card is provided with a second interface module 141. The security control substrate 110 is detachably connected to the physical interface board 140 based on the second connector 150. The broken lines in the figure represent the detachable connections.

The second connector is not only required to mechanically connect the security control substrate and the physical interface board, but also required to connect the substrate management controller and the firmware protection recovery module from signal transmission. The second connector may also be a gold finger connector, a board-to-board connector, or the like.

The baseboard management controller is electrically connected with the second interface module through the second connector and is used for receiving a second firmware upgrade package based on the second interface module and updating a firmware data package in the firmware protection recovery module based on the second firmware upgrade package.

The embodiment of the application provides a server control board card, still includes physical interface board card, and this board card can dismantle with the safety control base plate and be connected, also can select according to customer's demand and join in marriage, reduced the manufacturing cost and the use cost of server.

In some embodiments, the first interface module includes a first physical layer chip and a first network interface electrically connected to each other.

Specifically, fig. 3 is a third schematic structural diagram of the server control board card provided in the present application, and as shown in fig. 3, the first interface module 112 may include a first physical layer chip 1121 and a first network interface 1122 that are electrically connected to each other.

The first Physical Layer chip may be a port Physical Layer (Physical Layer) chip that may be used to transmit and receive data frames of an ethernet network. The interface type of the first network interface 1122 may be selected according to the requirements of the client, for example, RJ45 (Registered Jack 45). The interface consists of a plug (joint, crystal head) and a socket (module), wherein the plug is provided with 8 grooves and 8 contacts.

The first interface module in the server control board card provided by the embodiment of the application comprises a first physical layer chip and a first network interface, and can realize data transmission between external equipment and the baseboard management controller through connection.

In some embodiments, the physical interface cards include a data processing daughter card and an input-output daughter card;

the second interface module comprises a second physical layer chip and a second network interface;

the second physical layer chip is arranged on the data processing daughter board;

the second network interface is arranged on the input/output sub-board card;

the data processing daughter board is detachably connected with the safety control substrate based on the second connector;

the input/output daughter board is detachably connected with the data processing daughter board based on the third connector.

Specifically, fig. 4 is a schematic structural diagram of a server control board provided in the present application, as shown in fig. 4, the physical interface board includes a data processing daughter board 142 and an input/output daughter board 143, the second interface module includes a second physical layer chip 1411 and a second network interface 1412, the second physical layer chip 1411 is disposed on the data processing daughter board 142, and the second network interface 1412 is disposed on the input/output daughter board 143.

The data processing daughter board 142 is detachably connected with the security control substrate 110 through a second connector 150; the input/output daughter card 143 is detachably connected to the data processing daughter card 142 through the third connector 160.

The second Physical Layer chip may be a port Physical Layer chip, and the interface type of the second network interface may be selected according to the requirements of the client.

The physical interface board card in the server control board card provided by the embodiment of the application can comprise a data processing sub-board card and an input/output sub-board card, and the second physical layer chip and the second network interface are respectively arranged, so that the second network interface can be flexibly arranged, and the server control board card is convenient for maintenance personnel to use.

In some embodiments, the second network interface is electrically connected with the second physical layer chip based on a third connector; the third connector is a cable connector.

Specifically, the third connector is required to mechanically connect the second network interface and the second physical layer chip, and also to mechanically connect the second network interface and the second physical layer chip.

The third connector may select a cable connector in consideration of the need to flexibly configure the installation position of the second network interface, so that the position distance between the second network interface and the second physical layer chip may be flexibly adjusted.

In some embodiments, the security control substrate is mounted to a first side of the server; the data processing daughter board is mounted on the second side of the server.

In particular, a network interface on a server may enable the server to implement network communications, which is an important component of the server. In order to reduce the length of the network cable in actual use of the client, the routing of the machine room is simple, the cost is saved, and flexible design requirements are put forward for the network interface position of the server. That is, the installation location of the first network interface or the second network interface in the server should be located on different sides of the server as much as possible.

The first network interface is disposed on the security control substrate. Since the second connector is a gold finger connector or a board-to-board connector, the mounting position of the data processing daughter board and the security control substrate is usually tightly connected, so that the two boards can be mounted on the first side of the server. The first side is typically the back of the server, also known as the back window.

The second network interface is arranged on the input/output daughter board. Because the third connector is a cable connector, the installation position of the input/output daughter board can be flexibly set according to the requirements of customers. The input-output daughter card may be mounted to the second side of the server. The second side is typically the front of the server, also referred to as the front window.

Since the types of the servers are different, the first side and the second side may be defined according to practical situations, for example, the first side is the left side of the server, and the second side is the right side of the server.

According to the server control board card provided by the embodiment of the application, the safety control substrate and the input/output daughter board card are mounted on different sides of the server, so that the first network interface and the second network interface are also arranged on different sides of the server, and the use requirements of clients can be met flexibly.

In some embodiments, the security control substrate has a gating module disposed thereon;

the first end of the gating module is connected with the data transmission end of the baseboard management controller;

the second end of the gating module is connected with the first end of the first interface module;

the third end of the gating module is connected with the first end of the second interface module;

the fourth end of the gating module is connected with the control output end of the baseboard management controller;

the gating module is used for:

receiving an interface selection signal sent by a substrate management controller;

under the condition that the interface selection signal is determined to be the first interface selection signal, establishing electrical connection with the first interface module, and disconnecting electrical connection with the second interface module;

and under the condition that the interface selection signal is determined to be the second interface selection signal, establishing electrical connection with the second interface module, and disconnecting electrical connection with the first interface module.

Specifically, fig. 5 is a fifth schematic structural diagram of the server control board card provided in the present application, as shown in fig. 5, a gating module 113 is disposed on the security control substrate 110. The gating module may select a gating chip of two channels.

From the connection aspect, the first end of the gating module is connected with the data transmission end of the baseboard management controller and is mainly used for carrying out data interaction with the baseboard management controller; the second end of the gating module is connected with the first end of the first interface module and is mainly used for carrying out data interaction with the first interface module; the third end of the gating module is connected with the first end of the second interface module and is mainly used for carrying out data interaction with the second interface module; the fourth end of the gating module is connected with the control output end of the baseboard management controller and is mainly used for receiving the instruction sent by the baseboard management controller and selecting the first interface module or the second interface module for data interaction.

The gating module receives an interface selection signal sent by the baseboard management controller through the fourth terminal when in operation. By judging the signal type of the interface selection signal, for example, the signal type can be judged by electrical parameters such as voltage or current, for example, the signal type corresponding to high voltage is a first interface selection signal, and the signal type corresponding to low voltage is a second interface selection signal.

If the interface selection signal is the first interface selection signal, the gating module establishes electrical connection with the first interface module, disconnects electrical connection with the second interface module, and establishes a data communication link between the baseboard management controller and the first interface module.

If the interface selection signal is the second interface selection signal, the gating module establishes electrical connection with the second interface module, disconnects electrical connection with the first interface module, and establishes a data communication link between the baseboard management controller and the second interface module.

According to the server control board card provided by the embodiment of the application, the gating module is arranged, so that the substrate management controller can selectively perform data communication and transmission with the first interface module or the second interface module according to the configuration of the client to the server control board card, and the use requirement of the client is met.

In some embodiments, a first resistor is disposed in the data processing daughter card; the first end of the first resistor is connected with the grounding end in the data processing daughter board card;

the safety control substrate is provided with a second resistor; the first end of the second resistor is connected with the power supply end in the safety control substrate, and the second end of the second resistor is connected with the control input end of the substrate management controller;

and under the condition that the data processing daughter board is connected with the safety control substrate, the second end of the first resistor is connected with the second end of the second resistor.

Specifically, fig. 6 is a sixth schematic structural diagram of the server control board card provided in the present application, and as shown in fig. 6, a first resistor 1421 is disposed in the data processing daughter board card 142. The first terminal of the first resistor 1421 is connected to the ground terminal in the data processing daughter card 142.

The safety control substrate 110 is provided with a second resistor 114. The first end of the second resistor 114 is connected to the power supply terminal in the safety control substrate 110, and the second end of the second resistor 114 is connected to the control input terminal of the baseboard management controller 111.

In the case that the data processing daughter card is not connected to the safety control substrate, the voltage at the control input terminal is high level due to the fact that the second resistor is connected to the power terminal and the control input terminal of the substrate management controller.

In the case that the data processing daughter card is connected to the safety control substrate, since the second end of the second resistor is connected to the second end of the first resistor, the first end of the first resistor is already grounded, so that the voltage at the control input terminal is reduced to a low level.

Thus, the voltage at the control input may indicate whether the data processing daughter card is connected to the security control substrate.

The first resistor and the second resistor can be set according to the needs. For example, the first resistor may be 1 kilo (k) ohms in size and the second resistor may be 10 kilo (k) ohms in size.

According to the server control board card provided by the embodiment of the application, the first resistor is arranged in the data processing sub-board card, the second resistor is arranged in the safety control substrate, and the voltage at the control input end of the substrate management controller is changed through the access of the resistor, so that whether the data processing sub-board card is connected with the safety control substrate or not is determined, the board card connection detection module is not required to be increased in the setting, the reliability is high, and the manufacturing cost and the use cost of the control board card and the server are reduced.

In some embodiments, the baseboard management controller is to:

outputting a first interface selection signal based on the control output terminal when the control input terminal is detected to be at a high level;

in case that the control input terminal is detected to be low level, a second interface selection signal is output based on the control output terminal.

Specifically, on the basis of the circuit constructed in the above embodiment, the baseboard management controller may detect the voltage of the control input end, if the control input end is at a high level, it indicates that the data processing daughter board is not connected with the security control baseboard, at this time, the baseboard management controller outputs a first interface selection signal at the control output end, the gating module establishes an electrical connection with the first interface module, disconnects the electrical connection with the second interface module, and builds a data communication link between the baseboard management controller and the first interface module;

if the control input end is at a low level, the data processing daughter board is indicated to be connected with the safety control substrate, at the moment, the substrate management controller outputs a second interface selection signal at the control output end, the gating module establishes electrical connection with the second interface module, the gating module breaks electrical connection with the first interface module, and a data communication link between the substrate management controller and the second interface module is established.

According to the server control board card provided by the embodiment of the application, the baseboard management controller outputs the corresponding interface selection signal according to the voltage of the control input end, so that manual selection setting is not needed, and the use experience of a client to the control board card is improved.

Fig. 7 is a seventh schematic structural diagram of a server control board card provided in the present application, and as shown in fig. 7, the server control board card provided in the embodiment of the present application includes four parts: the SCM substrate is a board card capable of realizing basic management functions, the PROT (Platform Root of Trust ) card is a board card integrating PFR functions, and the PHY (Port Physical Layer ) card is a board card for realizing front window RJ45 (RJ 45-2), front window IO (Input Output) board. The RJ45 interface is one type of information jack (i.e., communication outlet) connector in a wiring system. Wherein P3V3 is the power terminal.

The SCM substrate is a safety control substrate, the PROT card is a firmware protection board card, the PHY card is a data processing sub-board card, and the front window IO is an input/output sub-board card.

The PROT card may be connected to the SCM substrate by a connector 1 (which may be a gold finger connection). The PHY card may be connected to the SCM substrate through connector 2. And then flexibly combined according to different requirements.

The SCM substrate board is internally provided with a BMC chip, a time sequence CPLD, a BIOS (Basic Input Output System, basic input output) Flash, BMC Flash, PHY, USB (Universal Serial Bus ) and the like. The rear window RJ45 interface (RJ 45-1) is arranged, the PFR function is not supported, and other management boards with complete functions are used for supporting the server card machine.

The PROT card is used for placing a PFR, a PFR Flash and the like, realizing the PFR function, being pluggable to the SCM substrate in the form of a golden finger, and being capable of flexibly configuring whether the PFR is supported or not.

PHY card places PHY chip, MII (Media Independent Interface ) signals of SCM substrate are transferred to PHY card through snap connector 2, MDI (Medium Dependent Interface, media dependent interface) signal connector 3 of PHY is transferred to front window IO board.

The gating chip is a logic gating chip, the SEL interface receives a control signal (PHY card bit signal) sent by the BMC, the control signal is gated to the B2 interface when the control signal is at a high level, and the control signal is gated to the B1 interface when the control signal is at a low level.

The PFR function (latest version 4.0) is supported at the server to plug the PROT card to the SCM board, and the PFR related signals are transferred to the SCM board through the intermediate PROT card connector 1. When the PFR function is not needed, the PROT card is not needed to be plugged into the SCM substrate, and other functions of the SCM substrate can be normally realized.

The RJ45 switching logic for the front window and rear window is described as follows: when the PHY card is not connected, the PHY card bit signal received by the BMC is high (input high level), and when the PHY card bit signal is high, the BMC confirms that the PHY is not in place and sends out the SEL signal to be high level. At the moment, the MII signal of the BMC is connected with the PHY1 chip and then connected with the network port RJ45-1, so that rear window RJ45 communication is realized; when the PHY card is connected, the PHY card bit signal received by the BMC is low (input low level), and when the PHY card bit signal received by the BMC is low, the BMC confirms that the PHY is in place, and the SEL signal sent out is low level. At this time, the MII signal of the BMC is connected to the PHY2 chip of the PHY card through the connector 2, and then connected with the network port RJ45-2, so that front window RJ45 communication is realized.

According to the front window rear window RJ45 switching logic, the following three situations are realized:

in the first case, when the server definitely only supports the rear window RJ45, the PHY1 and the RJ45-1 are loaded, and a PHY card is not used for being inserted into an SCM substrate, so that the rear window RJ45-1 is effective in function;

in the second case, when the server definitely only supports the front window RJ45, the PHY1 and the RJ45-1 do not carry out component loading, and the PHY card is inserted into the SCM substrate, so that the front window RJ45-2 is effectively functional;

in the third case, when the server needs to flexibly carry out the rear window RJ45, the PHY1 and the RJ45-1 are assembled, and the PHY card is plugged into the SCM substrate, at the moment, the function of the front window RJ45-2 is effective, but the function of the rear window RJ45-1 can be switched to be effective by controlling the BMC 'SEL signal' to set the high-low conversion of the output level.

Whether the above server supports PFR and configuring front-to-back window RJ45 is mutually independent. Six requirements can be achieved by flexible configuration.

The first requirement is: the PFR is not supported, and only the rear window RJ45 is supported; neither the PROT card nor the PHY card is plugged into the SCM substrate, PHY1 and RJ 45-1.

The second requirement is: the PFR is not supported, and only the front window RJ45 is supported; the PROT card is not plugged into the SCM substrate, the PHY card is plugged into the SCM substrate, and PHY1 and RJ45-1 are not plugged.

Third requirement: the PFR is not supported, and only front and rear windows RJ45 are supported for flexible switching; the PROT card is not plugged into the SCM substrate, the PHY card is plugged into the SCM substrate, PHY1 and RJ45-1 top pieces.

Fourth requirement: support PFR, support only rear window RJ45; the PROT card plugs into the SCM substrate, the PHY card does not plug into the SCM substrate, PHY1 and RJ45-1 add-ons.

Fifth requirement: support PFR, support front window RJ45 only; the PROT card and the PHY card are plugged into the SCM substrate, and the PHY1 and the RJ45-1 are not mounted.

Sixth requirement: the PFR is supported, and only front and rear windows RJ45 are supported for flexible switching; the PROT card and the PHY card are plugged into the SCM substrate, and PHY1 and RJ45-1 are mounted.

The server control board card provided by the embodiment of the application can support front and rear window network interfaces and PFR functions to flexibly select and match, improves the reusability of design, reduces the design cost, and meets the requirements of various clients under the condition of low cost of hardware boards and devices.

Fig. 8 is a schematic structural diagram of a server provided in the present application, and as shown in fig. 8, a server 800 includes the server control board card 100 in the above embodiment.

According to the server control board card provided by the embodiment of the application, the control board card is integrally divided into the safety control substrate and the firmware protection board card capable of being freely selected, so that personalized requirements of different clients on the platform firmware protection and recovery functions can be met, and the manufacturing cost and the use cost of the server are reduced; meanwhile, after the firmware protection board card is selected, the firmware data packet in the firmware protection board card can be updated and managed through the substrate management controller and the first interface module in the safety control substrate, so that the equipment performance of each component in the server is improved.

The apparatus embodiments described above are merely illustrative, wherein the elements illustrated as separate elements may or may not be physically separate, and the elements shown as elements may or may not be physical elements, may be located in one place, or may be distributed over a plurality of network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment. Those of ordinary skill in the art will understand and implement the present invention without undue burden.

From the above description of the embodiments, it will be apparent to those skilled in the art that the embodiments may be implemented by means of software plus necessary general hardware platforms, or of course may be implemented by means of hardware. Based on this understanding, the foregoing technical solution may be embodied essentially or in a part contributing to the prior art in the form of a software product, which may be stored in a computer readable storage medium, such as ROM/RAM, a magnetic disk, an optical disk, etc., including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the method described in the respective embodiments or some parts of the embodiments.

Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present application, and are not limiting thereof; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit and scope of the corresponding technical solutions.

Claims (10)

1. The server control board card is characterized by comprising a safety control substrate and a firmware protection board card;

the safety control substrate is detachably connected with the firmware protection board card based on a first connector;

the safety control substrate is provided with a substrate management controller and a first interface module electrically connected with the substrate management controller; the firmware protection board card is provided with a firmware protection recovery module;

the baseboard management controller is electrically connected with the firmware protection recovery module based on the first connector, and is used for receiving a first firmware upgrade packet based on the first interface module and updating a firmware data packet in the firmware protection recovery module based on the first firmware upgrade packet;

the firmware protection recovery module is used for carrying out firmware protection recovery on the baseboard management controller based on the updated firmware data packet.

2. The server control board card of claim 1, further comprising a physical interface board card;

the physical interface board card is provided with a second interface module;

the safety control substrate is detachably connected with the physical interface board card based on a second connector;

the baseboard management controller is electrically connected with the second interface module based on the second connector, and is used for receiving a second firmware upgrade package based on the second interface module and updating the firmware data package in the firmware protection recovery module based on the second firmware upgrade package.

3. The server control board card of claim 2, wherein the first interface module comprises a first physical layer chip and a first network interface electrically connected to each other.

4. The server control board card of claim 2, wherein the physical interface board card comprises a data processing daughter board card and an input-output daughter board card;

the second interface module comprises a second physical layer chip and a second network interface;

the second physical layer chip is arranged on the data processing daughter board;

the second network interface is arranged on the input/output daughter board card;

the data processing daughter board is detachably connected with the safety control substrate based on the second connector;

the input/output daughter board is detachably connected with the data processing daughter board based on a third connector.

5. The server control board card of claim 4, wherein the second network interface is electrically connected with the second physical layer chip based on the third connector; the third connector is a cable connector.

6. The server control board card of claim 5, wherein the security control substrate is mounted to a first side of a server; the input/output daughter board is arranged on the second side surface of the server.

7. The server control board card of claim 6, wherein the security control substrate is provided with a gating module;

the first end of the gating module is connected with the data transmission end of the baseboard management controller;

the second end of the gating module is connected with the first end of the first interface module;

the third end of the gating module is connected with the first end of the second interface module;

the fourth end of the gating module is connected with the control output end of the baseboard management controller;

the gating module is used for:

receiving an interface selection signal sent by the baseboard management controller;

under the condition that the interface selection signal is determined to be a first interface selection signal, establishing electrical connection with the first interface module, and disconnecting electrical connection with the second interface module;

and under the condition that the interface selection signal is determined to be a second interface selection signal, establishing electrical connection with the second interface module, and disconnecting electrical connection with the first interface module.

8. The server control board card of claim 7, wherein the data processing daughter board card has a first resistor disposed therein; the first end of the first resistor is connected with the grounding end in the data processing daughter board;

the safety control substrate is provided with a second resistor; the first end of the second resistor is connected with a power supply end in the safety control substrate, and the second end of the second resistor is connected with a control input end of the substrate management controller;

and under the condition that the data processing daughter board is connected with the safety control substrate, the second end of the first resistor is connected with the second end of the second resistor.

9. The server control board card of claim 8, wherein the baseboard management controller is configured to:

outputting the first interface selection signal based on the control output terminal under the condition that the control input terminal is detected to be at a high level;

and outputting the second interface selection signal based on the control output terminal under the condition that the control input terminal is detected to be at a low level.

10. A server comprising the server control board card of any one of claims 1 to 9.