TW201629757A - Control module of server node and firmware updating method for the control module - Google Patents

Abstract

A control module of a node comprising a baseboard management controller (BMC), a first memory and a second memory is present. The first memory stores a working firmware, the second memory stores a default firmware. The BMC normally connects with the first memory and reads the working firmware to boot during a boot procedure. If the BMC cannot boot through executing the working firmware after an update procedure failure of the working firmware, it turns to connect with the second memory, and reads the default firmware to replace with the working firmware to boot. After the BMC boots through the default firmware successfully, it turns back to connect with the first memory, and re-updates the working firmware again.

Description

Endpoint server control module and firmware update method thereof 【0001】

The present invention relates to an endpoint server, and more particularly to a control module in an endpoint server and a firmware update method of the control module.

【0002】

Generally, each server (such as a blade server) installed in a rack (Rack) needs to be configured with a respective Baseboard Management Controller (BMC), and the server is used by the BMC. Control and maintenance.

[0003]

The BMC belongs to a system on chip, which itself has a memory and needs to work through the execution of the firmware. Therefore, the BMC is the same as the central processing unit (CPU) in the server, and it is necessary to update its firmware from time to time.

[0004]

In general, the BMC can automatically update the firmware used after receiving the firmware update file. However, if the update process is interrupted unexpectedly during the update process (such as power failure of the chassis or cabinet), or If the firmware is updated to the wrong state, it may not boot properly after the BMC restarts.

[0005]

As described above, if the BMC does not have the support of the server's operating system (OS) and the system interface, the firmware that failed to be updated cannot be updated again, and the BMC will no longer be used.

[0006]

In view of this, how to make the BMC fail to update after the firmware fails, and then start the software without the external force, and update the firmware that has failed to be updated again, which is a subject that the practitioners in the technical field are deeply researching.

【0007】

The main purpose of the present invention is to provide a control module for an endpoint server and a firmware update method thereof, which can ensure that the baseboard management controller can still boot normally after the firmware update fails, and perform the firmware failure again. Update.

[0008]

To achieve the above objective, the control module disclosed in the present invention includes a substrate management controller, a first memory storing a working firmware, and a second memory storing a predetermined firmware. The baseboard management controller normally connects the first memory and reads the working firmware to boot. When the working firmware is updated and the update fails, the motherboard management controller switches to the second memory and reads the preset firmware to boot. After the baseboard management controller is booted by the preset firmware, the connection is switched to the first memory, and the working firmware is updated again.

【0009】

The technical effect achieved by the present invention against the prior art is that, by the setting of the second memory, the substrate management controller can still pass the preset firmware in the second memory after the main working firmware update fails. To start the backup. In this way, the baseboard management controller can update the working firmware that failed the update again until the update is successful. With the technical solution of the present invention, the problem that the substrate management controller cannot be normally turned on after the firmware update fails can be effectively prevented.

[0048]

1‧‧‧ cabinet

[0049]

11‧‧‧Cabinet Management Controller

[0050]

2‧‧‧Endpoint Server

[0051]

20‧‧‧Control Module

[0052]

21‧‧‧Base Management Controller

[0053]

211‧‧‧ storage unit

[0054]

22‧‧‧First memory

[0055]

23‧‧‧ Second memory

[0056]

24‧‧‧ hardware switcher

[0057]

241‧‧‧First reading channel

[0058]

242‧‧‧The first burning channel

[0059]

243‧‧‧second reading channel

[0060]

244‧‧‧Second burning channel

[0061]

3‧‧‧GPIO channel

[0062]

F1‧‧‧ working firmware

[0063]

F2‧‧‧Preset firmware

[0064]

I1‧‧‧ firmware update file

[0065]

S20~S34‧‧‧Update Steps

[0010]

1 is a schematic view of a cabinet according to a first embodiment of the present invention.

[0011]

Figure 2 is a schematic view of the connection of the first embodiment of the present invention.

[0012]

3 is a block diagram of a control module of a first embodiment of the present invention.

[0013]

4 is a block diagram of a control module in accordance with a second embodiment of the present invention.

[0014]

FIG. 5 is a flowchart of firmware update according to a first embodiment of the present invention.

[0015]

DETAILED DESCRIPTION OF THE INVENTION A preferred embodiment of the present invention will be described in detail with reference to the drawings.

[0016]

Referring to FIG. 1 and FIG. 2, respectively, a schematic diagram and a connection diagram of a cabinet according to a first embodiment of the present invention are shown. FIG. 1 discloses a cabinet 1 having a plurality of accommodating slots for providing a plurality of sets of endpoint servers 2, the cabinet 1 further including a cabinet management controller (Rack) as shown in FIG. Management Controller, RMC) 11. A control module 20 is disposed in each of the plurality of endpoint servers 2. The rack management controller 11 communicates with the control modules 20 respectively, so as to control each of the endpoint servers 2, collect relevant information of each endpoint server 2, and transfer each end server 2 Information. In the present invention, the endpoint server 2 can be a general rack server or a JBOD node, but is not limited.

[0017]

In this embodiment, the cabinet management controller 11 can mainly manage an Intelligent Platform Management Bus (IPMB), a Universal Asynchronous Receiver/Transmitter (UART), and an internal integrated circuit through an intelligent platform of the entity ( Inter-Integrated Circuit (F2C), Serial Peripheral Interface (SPI), or a wireless Local Area Network (LAN) transmission channel communicates with the complex control module 20, but is not limited.

[0018]

The cabinet management controller 11 can communicate with the control module 20 of all the endpoint servers 2 in the cabinet 1 through the above transmission channels. More specifically, each of the control modules 20 has a Baseboard Management Controller (BMC) 21 as shown in FIG. 3, and the cabinet management controller 11 is mainly associated with the endpoint servers 2 The substrate management controllers 21 in the communication communicate.

[0019]

As shown in FIG. 2, when the firmware of the control modules 20 needs to be updated, the cabinet management controller 11 can receive a firmware update file I1 from the outside by wire or wirelessly. The firmware update file I1 can be mainly an image file of an updated version of the firmware, but is not limited.

[0020]

In the present invention, the cabinet management controller 11 can be respectively transmitted to the baseboard management controller 21 in each control module 20 through the transmission channel when the firmware update file I1 is received, so that the substrate management controller 11 The management controller 21 executes a firmware update procedure. In addition, the cabinet management controller 11 can also transmit the firmware update file I1 to each of the baseboard management controllers 21 according to a predetermined schedule and arrive at a specific update time, which is not limited.

[0021]

Referring to FIG. 3, a block diagram of a control module according to a first embodiment of the present invention is shown. As shown in FIG. 3, the control module 20 of the present invention mainly includes the substrate management controller 21, a first memory 22 and a second memory 23, wherein the substrate management controller 21 and the first memory respectively The body 22 and the second memory 23 are electrically connected. More specifically, the substrate management controller 21 and the first memory 22 have a two-way connection relationship with the second memory 23 in a one-way connection relationship (described in detail).

[0022]

The baseboard management controller 21 has a storage unit 211, which can be a random access memory (RAM), a read only memory (ROM), or a flash memory (Flash Memory). ), etc., not limited. After the baseboard management controller 21 receives the firmware update file I1 transmitted by the cabinet management controller 11, the system is temporarily stored in the storage unit 211 for use in subsequent execution of the firmware update program.

[0023]

The first memory 22 is the main memory of the substrate management controller 21, and a working firmware F1 is stored therein. In the normal state, the baseboard management controller 21 mainly reads the working firmware F1, and completes a booting process by execution of the working firmware F1. In this embodiment, when the substrate management controller 21 executes the firmware update program, the working firmware F1 in the first memory 22 is updated mainly according to the firmware update file I1.

[0024]

The second memory 23 is a backup memory of the substrate management controller 21, and a preset firmware F2 is stored therein. In this embodiment, the first memory 22 and the second memory 23 are read-only memory (ROM).

[0025]

The main technical feature of the present invention is that, under normal conditions, the baseboard management controller 21 can only be powered on by the working firmware F1, and does not boot through the preset firmware F2. Moreover, the substrate management controller 21 only updates the working firmware F1, and does not update the preset firmware F2. The purpose of the above technical feature is that the integrity of the preset firmware F2 can be maintained forever, and the preset firmware F2 is prevented from being damaged due to interruption during the updating process, and thus cannot be read by the substrate management controller 21. The problem.

[0026]

After the substrate management controller 21 is powered on, the working firmware F1 in the first memory 22 is read by default, and the booting process is performed by the working firmware F1. When the firmware update program is required to be executed, the baseboard management controller 21 burns the firmware update file I1 temporarily stored in the storage unit 211 into the first memory 22 to update by the firmware. The file I1 updates the working firmware F1. If the firmware update program is successfully executed, the second memory 23 will not be used.

[0027]

However, if the working firmware F1 update fails (if the firmware update program is interrupted halfway, or the wrong firmware update file is burned to the first memory 22), the baseboard management controller 21 After the reset, the working firmware F1 in the first memory 22 will not be successfully read. In other words, after the update fails, the baseboard management controller 21 cannot perform the boot process through the working firmware F1.

[0028]

When the above situation occurs, the substrate management controller 21 switches to the second memory 23 for backup use, and reads the preset firmware F2 in the second memory 23 to perform the booting process. In this embodiment, the preset firmware F2 does not undergo any update procedure, and thus can be normally read and used by the baseboard management controller 21.

[0029]

If the second memory 23 is turned on, it indicates that the working firmware F1 in the first memory 22 has a problem and cannot be read. Therefore, after the substrate management controller 21 is successfully turned on by the preset firmware F2, the connection to the first memory 22 is switched again in the power-on state, and the working firmware in the first memory 22 is again used. F1 executes the firmware update procedure.

[0030]

If the update fails again, the baseboard management controller 21 can be powered on again by the preset firmware F2 in the second memory 23 after resetting, and again to the first memory 22 after the booting is completed. The working firmware F1 in the update is updated until the update is successful.

[0031]

If the update is successful again, the baseboard management controller 21 can switch to the first memory 22 after resetting, and boot up by the updated working firmware F1.

[0032]

Generally, when the substrate management controller 21 is powered on by the first memory 22, it is only allowed to update the first memory 22; similarly, when the substrate management controller 21 passes the first When the second memory 23 is turned on, it is only allowed to update the second memory 23. Therefore, in order to enable the substrate management controller 21 to update the first memory 22 after being turned on by the second memory 23, the present invention further adds a memory to the control module 20. The switching mechanism of the body.

[0033]

Referring to Figure 4, a block diagram of a control module of a second embodiment of the present invention. In this embodiment, the control module 20 further includes a hardware switch 24. The base management controller 21 is electrically connected to the first memory 22 through the hardware switch 24, and the hardware switch 24 is simultaneously passed through the hardware switch 24 . The second memory 23 is electrically connected. Specifically, the hardware switch 24 has a first read channel 241 and a first burn channel 242 electrically connected to the substrate management controller 21 and the first memory 22, and is electrically connected. The substrate management controller 21 and a second read channel 243 of the second memory 23 and a second programming channel 244.

[0034]

When the booting process is executed, the substrate management controller 21 reads the working firmware F1 in the first memory 22 through the first read channel 241; and when the firmware update program is executed, passes the first The programming channel 242 burns the firmware update file I1 into the first memory 22 to update the working firmware F1. It should be noted that the first read channel 241 and the first programming channel 242 can be integrated into a single bidirectional transmission channel, which is not limited.

[0035]

In this embodiment, the control module 20 can set a monitoring mechanism by hardware or software. When the substrate management controller 21 is found to be unable to boot through the working firmware F1 after resetting, the substrate management is performed. The controller 21 is configured to read the preset firmware F2 in the second memory 23 through the second read channel 243 to perform the booting process.

[0036]

As shown in FIG. 4, the baseboard management controller 21 also connects one of the pins of the hardware switcher 24 (for example, a switch pin) through a general purpose input/output (GPIO) interface 3. After the substrate management controller 21 completes the booting process through the preset firmware F2 in the second memory 23, a control signal can be sent to the hardware switch 24 through the GPIO interface 3, whereby the hardware is The switch 24 switches the second programming channel 244 originally connected to the second memory 23 to the first memory 22 according to the control signal.

[0037]

As described above, in the present invention, the substrate management controller 21 does not perform any update operation on the second memory 23 through the second programming channel 244, and thus the substrate management controller 21 and the second memory are For body 23, the two can be considered as a one-way connection. It should be noted that the second read channel 243 and the second burn channel 244 can be integrated into a single bidirectional transmission channel, which is not limited.

[0038]

As described above, when the substrate management controller 21 executes the firmware update program for the second memory 23, the substrate management controller 21 considers that the second memory 23 is updated, but passes the hard The switching of the second programming channel 244 of the body switcher 24, the substrate management controller 21 is actually updating the first memory 22. Thereby, it is possible to overcome the limitation in the prior art that the substrate management controller 21 can only update the memory used for booting.

[0039]

With the technical solution of the present invention, after the firmware update in the first memory 22 fails, the substrate management controller 21 can still be booted by the firmware in the second memory 23, and therefore, There will be no problem that the firmware cannot be booted normally after the firmware update fails. Moreover, whether the substrate management controller 21 is powered on by the firmware in the first memory 22 or the firmware in the second memory 23, the firmware update process can be maintained only when the firmware update program is executed. The first memory 22 is updated, so that there is no problem that the first memory 22 and the firmware in the second memory 23 fail to be updated at the same time, and thus the substrate management controller 21 cannot be turned on normally. It should be noted that, in the specification of the present invention, the first memory 22 and the second memory 23 are limited, but the control module 20 may also be provided with two or more sets of memory, the memory. The number is not limited to two groups.

[0040]

Continuing to refer to FIG. 5, a firmware update flowchart of the first embodiment of the present invention is shown. As shown in FIG. 5, when the firmware used by the control module 20 needs to be updated, the baseboard management controller 21 first burns the firmware update file I1 temporarily stored in the storage unit 211 to the first memory. In the body 22 (step S20), the working firmware F1 in the first memory 22 is updated. The base management controller 21 updates the working firmware F1 in the first memory 22 through the first programming channel 242 in the hardware switch 24 .

[0041]

After the step S20, the substrate management controller 21 is reset (step S22).

[0042]

After the substrate management controller 21 is powered on again, it is determined whether the working firmware F1 in the first memory 22 can be normally read (step S24). The substrate management controller 21 reads the first memory 22 mainly through the first read channel 241 in the hardware switch 24 .

[0043]

If the substrate management controller 21 can successfully read the first memory 22, the substrate management controller 21 directly reads the working firmware F1 in the first memory 22 and passes through the working firmware F1. Execution to complete the boot process (step S26). In this embodiment, the working firmware F1 has been updated successfully.

[0044]

If the substrate management controller 21 cannot successfully read the working firmware F1 in the first memory 22 in the step S24, it can be determined that the update of the working firmware F1 fails, so the substrate management controller 21 The connection is switched to the second memory 23 (step S28). Specifically, the substrate management controller 21 is connected to the second memory 23 through the second read channel 243 in the hardware switcher 24.

[0045]

After the step S28, the substrate management controller 21 is reset again (step S30), and after the power-on is started, the preset firmware F2 in the second memory 23 can be read and passed the preset. The firmware F2 is used for backup booting (step S32). In other embodiments, the substrate management controller 21 may not perform the step S30, but directly switch and read the preset firmware in the second memory 23 after failing to read the first memory 22. F2 is determined depending on the setting of the substrate management controller 21 itself, and is not limited.

[0046]

After the substrate management controller 21 successfully completes the booting operation through the preset firmware F2, the control signal is sent to the hardware switcher 24 through the GPIO interface 3, so that the baseboard management controller 21 is switched to the switch. The first memory 22 (step S34). More specifically, the hardware switch 24 switches the second programming channel 244 originally connected to the second memory 23 to the first memory 22 through the control signal. After the step S34, the substrate management controller 21 returns to the step S20, and re-executes the firmware update procedure for the working firmware F1 until the working firmware F1 is successfully updated (ie, the step S26).

[0047]

The above is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention. Therefore, equivalent changes to the scope of the present invention are included in the scope of the present invention. Bright.

20‧‧‧Control Module

21‧‧‧Base Management Controller

211‧‧‧ storage unit

22‧‧‧First memory

23‧‧‧ Second memory

F1‧‧‧ working firmware

F2‧‧‧Preset firmware

Claims (10)

[Item 1] A control module for an endpoint server, comprising:
a baseboard management controller is connected to a cabinet management controller in a cabinet, wherein the endpoint server is disposed in the cabinet;
a first memory body electrically connected to the substrate management controller, storing a working firmware, the substrate management controller reading the working firmware to execute a booting process, and executing a firmware update program to update the working firmware body;
a second memory is electrically connected to the substrate management controller, and stores a preset firmware. When the working firmware fails to be updated and the substrate management controller cannot boot through the working firmware, the preset toughness is read. To perform the boot process;
After the booting process is completed by the preset firmware, the baseboard management controller switches to the first memory in the power-on state, and performs the firmware update procedure on the working firmware again. [Item 2] The control module of claim 1, wherein the first memory and the second memory are read only memory (ROM). [Item 3] The control module of claim 2, wherein the baseboard management controller has a storage unit for temporarily storing a firmware update file, and the firmware update program burns the firmware update file to the first memory. To update the working firmware. [Item 4] The control module of claim 2, further comprising a hardware switch having a first read channel and a first burn channel electrically connected to the substrate management controller and the first memory, And electrically connecting the substrate management controller with a second read channel and a second burn channel of the second memory, and the substrate management controller is electrically connected to the substrate management controller through a GPIO interface Switch the pin. [Item 5] The control module of claim 4, wherein the baseboard management controller reads the working firmware through the first read channel to execute the booting process; and when the booting is performed by the working firmware, the first burning is performed Recording a firmware update file to the first memory to update the working firmware; when the working firmware cannot be turned on, reading the preset firmware through the second read channel to perform the Boot program. [Item 6] The control module of claim 5, wherein the substrate management controller completes the booting process through the preset firmware, and sends a control command to the hardware switch through the GPIO interface to The recording channel is switched to the first memory, and the substrate management controller burns the firmware update file into the first memory through the second programming channel to update the working firmware. [Item 7] A firmware updating method used by the control module according to claim 1, comprising:
a) determining whether the base management controller can read the working firmware in the first memory;
b) if the working firmware can be normally read, the booting process is executed according to the working firmware;
c) in step b, executing the firmware update procedure to update the working firmware;
d) if the working firmware cannot be read, performing the booting process according to the preset firmware in the second memory;
e) After the step d, the connection to the first memory is switched in the power-on state, and the firmware update procedure is executed on the working firmware. [Item 8] The firmware update method of claim 7, wherein the step a further comprises the following steps:
A01) the baseboard management controller burns a firmware update file to the first memory to update the working firmware; and
A02) The baseboard management controller is reset. [Item 9] The firmware update method of claim 7, wherein the control module further includes a hardware switch having a first read channel and a first electrical connection between the substrate management controller and the first memory a recording channel, and a second reading channel and a second programming channel electrically connected to the substrate management controller and the second memory, and the substrate management controller electrically connects the substrate through a GPIO interface Manage a switch pin of the controller. [Item 10] The firmware update method of claim 9, wherein in the step a, the substrate management controller reads the working firmware through the first read channel; in the step c, the substrate management controller passes the first a programming channel burns a firmware update file to the first memory to update the working firmware; in the step d, the substrate management controller reads the preset firmware through the second read channel In the step e, the substrate management controller sends a control command to the hardware switch through the GPIO interface to switch the second programming channel to the first memory, and the substrate management controller passes The second programming channel re-updates the working firmware.