Changes and New Feature History

Transition to 2023 Microsoft UEFI Certificate Authority

To align with updated Microsoft UEFI Secure Boot requirements and the upcoming end-of-life of the 2011 Certificate Authority (CA), NVIDIA is transitioning to the 2023 CA. To ensure successful loading of the Expansion ROM (ExpROM) during the UEFI Secure Boot process, system BIOS and operating system trust stores must be updated to include the 2023 CA.

Note: When performing a firmware update of ConnectX and BlueField devices the new certificate is required for Secure Boot. To continue supporting Secure Boot, systems must be updated to recognize the "Microsoft Option ROM UEFI CA 2023."

Security Hardening Enhancements

This release contains important reliability improvements and security hardening enhancements. NVIDIA recommends upgrading your devices firmware to this release to improve the devices’ firmware security and reliability.

General

This version does not include any changes to the firmware content of this adapter card. The version has been updated to align with the other adapter cards in the ConnectX family.

General

This version does not include any changes to the firmware content of this adapter card. The version has been updated to align with the other adapter cards in the ConnectX family.

Bug Fixes

See Bug Fixes in this Firmware Version section. 

RDMA Telemetry

Added the option to indicate an error CQE event on every selected function per eSwitch manager. This indication is defined as a new WQE including the relevant information about the error (such as: syndrome, function_id, timestamp, QPs num etc.).

The feature is configured using a new general object: RDMA-Telemetry object, and depends on the following new caps: HCA_CAP.rdma_telemetry_notification_types and HCA_CAP.rdma_telemetry. 

UID Permissions

Extended kernel lockdown permission set. The following sub-operations can now be called by tools (permission TOOLS_RESORCES) using new HCA capability bitmask field: tool_partial_cap.

The 5 sub-operations are:

• QUERY_HCA_CAP with other function

• QUERY_VUID with direct data

• QUERY_ROCE_ADDRESS with other vport

• SET_HCA_CAP with other function

• POSTPONE_CONNECTED_QP_TIMEOUT with other vport

The new added caps are:

• tool_partial_cap.postpone_conn_qp_timeout_other_vport,

• tool_partial_cap.set_hca_cap_other_func

• tool_partial_cap.query_roce_addr_other_vport

• tool_partial_cap.query_vuid_direct_data

• tool_partial_cap.query_hca_cap_other_func

Bug Fixes

See Bug Fixes in this Firmware Version section. 

Memory Slow Release

Added a new command interface "Memory slow release" to enable/disable holding memory pages for a defined period of time. Once the timer expires, the firmware will return the pages to the driver.

Kernel Lockdown

Added support for MVTS register via a miscellaneous driver using the access_register PRM command.

Bug Fixes

See Bug Fixes in this Firmware Version section. 

Steering Match

Added support for steering match on packet l4_type through FTG/FTE.

Bug Fixes

See Bug Fixes in this Firmware Version section. 

Bug Fixes

See Bug Fixes in this Firmware Version section.