ILO5 firware update fails "the file siganture is invalid"

[chinchilla]

Hello Experts,

I am trying to update a ProLiant DL385 Gen10 ILO 5 version 1.37 to a newer version 2.14. I have tried many ways but it always ends with this message:

Firmware Upload
The file signature is invalid. Make sure you are using a valid, signed flash file and try again

I have already check the file hash SHA256 and it is correct and also used 7zip to unzip the file cp042927.exe

Can you please suggest a solution for this.

Best Regards,

HC

[Torsten.]

What method did you use exactly?

Update to 1.40 first, in a second step to 2.14.

This is required.

Installation:

To update to iLO 5 version 2.10 or later, you must have a minimum iLO 5 version of 1.40

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_a9cfde8ba427435488d972d68f#tab3

[Rhythm596]

Hi HC, 

Since the version is currently running on 1.37, and the minimum requirement of the 2.14 version is 1.40, you will first need to update it to 1.40 or above. After that you can update it to version 2.14. 

Please try updating it to 1.40(a): https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8c903e2afd56481ea339e3dd2d

After that, you can try updating to 2.14 : https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_a9cfde8ba427435488d972d68f#tab-history

Let us know if there are any further concerns.

[PDP-Fan]

Same problem here. DL360 Gen10 with iLO5 and firmware version 1.15 (yes it's old I know...) I tried to update via iLO web-interface to 1.20, 1.40, 1.50.... "signature invalid" for all files.

Additionally to that my server also tells me that the firmware of the innovation engine (whatever that may be) needs to be re-flashed. Unfortunately it doesn't let me do that because it hangs in POST.

I'd like to point out that I downloaded the exe firmware file and used the integrated "expand" function.

EDIT: Please forget all I wrote! I somehow landed in the iLO4 firmware download site.... of course that will not work with iLO5...STUPID ME!

[Scottimus75]

I'm at 1.37 on multuple ESX hosts. I followed the steps and attempted 1.40, and still getting the same error. I even tried 1.39 and still see the same error. What am I missing? is there a fix for this?

[AndiHoffi]

Just in case that it helps somebody:

I had two machines running 1.20. Thus I downloaded version 1.4 (ilo5_140.fwpkg) and got the "invalid signature"-message as well.

Turns out, this file needs to be unzipped and the bin-file inside is the one to go with.

[majorgear]

How many times did you need to unzip it? I used the unarchive utility on my Mac.

The original file - ilo5_233.fwpkg.cpgz

Unzip 1 - ilo5_233.fwpkg

Unzip 2 - ilo5_233.fwpkg 2

Is it supposed to be a ".bin" file? That is what I was looking to get.

[AndiHoffi]

If I remember correctly, I unzipped it only once (using 7-zip on Windows).

[MichaelEaton]

Thank you!! this should really be documented somewhere, i just renamed the file to .zip and then used windows 'Extract All' option - it's currently flashing.. presumably once i've done this i can just use the fwpkg file as is for future upgrades..

[JSobejana]

Agree! HPe's technical writers are terrible. 

[JSobejana]

Ahh, there's the bin file! 

[Torsten.]

FYI - the windows *.exe file opened with 7-zip.

[SimonAcha]

this works renamining to .zip. thanks

[jehatguzel]

Hi,

Firstly download ilo5_148.fwpkg then extract ilo5_148.bin file.

Then flash firmware.

Then you can upgrade ilo5_255 with same way.

Regards

Official road map below

UPGRADING FROM A PREVIOUS VERSION OF iLO

- Hewlett Packard Enterprise highly recommends a minimum firmware version of iLO 5 v2.41 or later.
- Direct upgrade to iLO 5 v2.55 is only supported for servers with iLO 5 v1.48 and above.
- On servers with an earlier version of iLO 5 installed, you first need to install iLO 5 v1.48,
and then install iLO 5 v2.55. For example, if a server has iLO 5 v1.10 installed, install
iLO 5 v1.48 first, and then install iLO 5 v2.55.
- Minimum supported iLO version for Gen 10 plus Intel platform is iLO 5 v2.42.

[PDP-Fan]

I have to add something....

Just got a warranty replacement system board for a BL460c Gen10 and it came with a VERY old firmware iLO 1.30. I tried to update to 1.40 as recommended but the update failed with "make sure file signature... blabla"

Working update path in this case:

1.30 -> 1.35 -> 1.40 -> 2.14 ->2.41 -> 2.71
(Edit: When you have 1.45 or newer, you can go directly to the newest version)

You MUST use these steps or it will not work. Direct update from 1.40 to 2.71 for example does not work. Maybe other versions may work but these are the numers I used.

[MGische]

Adding another thing:
I just had an ML110 Gen10 with the exact same issue described here.
But despite trying your chain it didn't want to update because of the error the iLO gave me.

To solve this I had to reset the iLO and after doing it, I was able to do the update chain (a bit less though)
My chain: 1.37 (current) -> 1.40 (extracted .bin) -> 2.41 (extracted .bin) -> SPP 2022.03

[ato2003]

I changed extension file from .fwpkg to .zip, then unzipped it. Later use .bin file for updating firmware. It worked for me.

[Mohammed_Ellahi]

@AndiHoffi You're an absolute legend!

This worked for me, after almost a day of battling.  And yes, this should be documented somewhere