KMS/OKM - How to Upgrade the SCA6000 Firmware

Asset ID:	1-71-1291307.1
Update Date:	2011-02-07
Keywords:

Solution Type Technical Instruction Sure

Solution 1291307.1 : KMS/OKM - How to Upgrade the SCA6000 Firmware

Applies to:

Sun StorageTek Crypto Key Management System - Version: Not Applicable and later [Release: N/A and later ]
Oracle Key Manager - Version: 2.0.0 to 2.3 [Release: 2.0 to 2.0]
Information in this document applies to any platform.

Goal

Some SCA6000 FRU's are running firmware 1.0.x which is not compatible with KMS (OKM) 2.x.x
If you try and install a card with this firmware, it will not boot up and initialize. It will give this warning message:

warning: mca0 Driver and firmware is incompatible.

The SCA6000 board can be upgraded outside of the KMS process . Please find below the procedure on how to upgrade the SCA6000 firmware in a regular SPARC or X86 Solaris 10 server.

Solution

1. Find an available pci slot in a SPARC or an X86 Solaris 10 server and install the sca6000.

    Refer to the SCA6000 User Guide for details on how to install the sca6000 -
    http://download.oracle.com/docs/cd/E19321-01/index.html

2. Download patch 10264434 from My Oracle Support.

3. Run the patch Install script after downloading patch.

4. Install patch 128371-02 (contained in 10264434)

5. Check current firmware version on the sca6000:
     # /opt/sun/sca6000/sbin/scadiag -V

     if this command displays Firmware : 1.1.0 or 1.0 then the card needs to be updated.

6. Update firmware
     # /usr/bin/scadiag -u /usr/lib/crypto/firmware/sca/sca6000fw mca0

7. Reset board after upgrade
     # /usr/bin/scadiag -r mca0

8. Verify firmware version
     # scadiag -V

     It should now be version 1.1.2

     Note: Bootstrap code does not need to be upgraded, as all versions of boostrap code are compatible
     with the driver and firmware. Also, KMS will be able to update bootstrap code if required.

9. Once sca6000 board displays 1.1.2 firmware, you can now install it in a KMS 2.x.x server.

Attachments

This solution has no attachment