ILO5 firware update fails "the file siganture is invalid"

[chinchilla]

Hello Experts,

I am trying to update a ProLiant DL385 Gen10 ILO 5 version 1.37 to a newer version 2.14. I have tried many ways but it always ends with this message:

Firmware Upload
The file signature is invalid. Make sure you are using a valid, signed flash file and try again

I have already check the file hash SHA256 and it is correct and also used 7zip to unzip the file cp042927.exe

Can you please suggest a solution for this.

Best Regards,

HC

[Torsten.]

What method did you use exactly?

Update to 1.40 first, in a second step to 2.14.

This is required.

Installation:

To update to iLO 5 version 2.10 or later, you must have a minimum iLO 5 version of 1.40

https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_a9cfde8ba427435488d972d68f#tab3

[Rhythm596]

Hi HC, 

Since the version is currently running on 1.37, and the minimum requirement of the 2.14 version is 1.40, you will first need to update it to 1.40 or above. After that you can update it to version 2.14. 

Please try updating it to 1.40(a): https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_8c903e2afd56481ea339e3dd2d

After that, you can try updating to 2.14 : https://support.hpe.com/hpsc/swd/public/detail?swItemId=MTX_a9cfde8ba427435488d972d68f#tab-history

Let us know if there are any further concerns.

[PDP-Fan]

Same problem here. DL360 Gen10 with iLO5 and firmware version 1.15 (yes it's old I know...) I tried to update via iLO web-interface to 1.20, 1.40, 1.50.... "signature invalid" for all files.

Additionally to that my server also tells me that the firmware of the innovation engine (whatever that may be) needs to be re-flashed. Unfortunately it doesn't let me do that because it hangs in POST.

I'd like to point out that I downloaded the exe firmware file and used the integrated "expand" function.

EDIT: Please forget all I wrote! I somehow landed in the iLO4 firmware download site.... of course that will not work with iLO5...STUPID ME!

[Scottimus75]

I'm at 1.37 on multuple ESX hosts. I followed the steps and attempted 1.40, and still getting the same error. I even tried 1.39 and still see the same error. What am I missing? is there a fix for this?

[AndiHoffi]

Just in case that it helps somebody:

I had two machines running 1.20. Thus I downloaded version 1.4 (ilo5_140.fwpkg) and got the "invalid signature"-message as well.

Turns out, this file needs to be unzipped and the bin-file inside is the one to go with.

[majorgear]

How many times did you need to unzip it? I used the unarchive utility on my Mac.

The original file - ilo5_233.fwpkg.cpgz

Unzip 1 - ilo5_233.fwpkg

Unzip 2 - ilo5_233.fwpkg 2

Is it supposed to be a ".bin" file? That is what I was looking to get.

[AndiHoffi]

If I remember correctly, I unzipped it only once (using 7-zip on Windows).

[MichaelEaton]

Thank you!! this should really be documented somewhere, i just renamed the file to .zip and then used windows 'Extract All' option - it's currently flashing.. presumably once i've done this i can just use the fwpkg file as is for future upgrades..

[JSobejana]

Agree! HPe's technical writers are terrible. 

[JSobejana]

Ahh, there's the bin file! 

[Torsten.]

FYI - the windows *.exe file opened with 7-zip.

[SimonAcha]

this works renamining to .zip. thanks

[jehatguzel]

Hi,

Firstly download ilo5_148.fwpkg then extract ilo5_148.bin file.

Then flash firmware.

Then you can upgrade ilo5_255 with same way.

Regards

Official road map below

UPGRADING FROM A PREVIOUS VERSION OF iLO

- Hewlett Packard Enterprise highly recommends a minimum firmware version of iLO 5 v2.41 or later.
- Direct upgrade to iLO 5 v2.55 is only supported for servers with iLO 5 v1.48 and above.
- On servers with an earlier version of iLO 5 installed, you first need to install iLO 5 v1.48,
and then install iLO 5 v2.55. For example, if a server has iLO 5 v1.10 installed, install
iLO 5 v1.48 first, and then install iLO 5 v2.55.
- Minimum supported iLO version for Gen 10 plus Intel platform is iLO 5 v2.42.

[PDP-Fan]

I have to add something....

Just got a warranty replacement system board for a BL460c Gen10 and it came with a VERY old firmware iLO 1.30. I tried to update to 1.40 as recommended but the update failed with "make sure file signature... blabla"

Working update path in this case:

1.30 -> 1.35 -> 1.40 -> 2.14 ->2.41 -> 2.71
(Edit: When you have 1.45 or newer, you can go directly to the newest version)

You MUST use these steps or it will not work. Direct update from 1.40 to 2.71 for example does not work. Maybe other versions may work but these are the numers I used.

[MGische]

Adding another thing:
I just had an ML110 Gen10 with the exact same issue described here.
But despite trying your chain it didn't want to update because of the error the iLO gave me.

To solve this I had to reset the iLO and after doing it, I was able to do the update chain (a bit less though)
My chain: 1.37 (current) -> 1.40 (extracted .bin) -> 2.41 (extracted .bin) -> SPP 2022.03

[ato2003]

I changed extension file from .fwpkg to .zip, then unzipped it. Later use .bin file for updating firmware. It worked for me.

[Mohammed_Ellahi]

@AndiHoffi You're an absolute legend!

This worked for me, after almost a day of battling.  And yes, this should be documented somewhere

[ShahrizalNazeri]

I'm not an expert here. Just want to share with other peoples later in case some them facing the same problem with mine which I never upgrade the iLO 5 firmware before during 2018 and it still using iLO firmware version 1.30. Well of course during that time, I will be downloading firmware from HPE website then try to upgrade it using iLO webpage. The thing is, let say I want to upgrade it into v1.35 (even small changes starting from lower version) resulting failure with the same error as per subject title.

Thus, I will try using the usb storage directly attached to the DL360 G10 then upgrade using the utility from RBSU, also throwing error for failure during upgrade.

Sorry if my words are not easier to understand, but I'm trying my best to make it.

After few hours of reading forums, googling, I stumbled across this tool from github which called as  "iLORest : RESTful Interface Tool" 
https://github.com/HewlettPackard/python-redfish-utility/releases?page=1

The weird thing is, the latest version  6.2.0.0 didn't support for upgrade from lower version as mine from v1.30 -> v1.35 (maybe due to some security enforcement), Then, I try using lower version of it iloREST tool version 2.4 and it happen to be working for upgrade from firmware version ilo5_135 -> ilo5_270. While reading the tools compatibility limit at HPE website during firmware download, I change into using iloREST tool version 6.2 for firmware version ilo5_271 until latest.

In case you guys wondering what I did:

Starting ilo_135 ->  ilo5_270

1. I download ilorest-2.4.1-14.x86_64.rpm then extract it on Desktop/RPM/ilorest-2.4.1-14/ using rpmextract.sh which providing 2 directory named "etc" and "usr"

2. By using user root, I run this command:

NOTE: 1st command (i.) used for login to the iLO server while the 2nd command (ii.) used for flashing firmware. I repeat the same command for differ iLO firmware files and wait for the iLO to reset by itself (since this process didn't require pyhsical server reboot) 

    i. /home/user/Desktop/RPM/ilorest-2.4.1-14/usr/sbin/ilorest login <iLO-IP-Address> -u <user> -p <password>

     Expected Output:
     iLOrest : RESTful Interface Tool version 2.4
     Copyright (c) 2014, 2019 Hewlett Packard Enterprise Development LP
     ---------------------------------------------------------------------------------
     Discovering data...Done 
     WARNING: Cache is activated. Session keys are stored in plaintext.


   ii. /home/user/Desktop/RPM/ilorest-2.4.1-14/usr/sbin/ilorest flashfwpkg /home/user/Downloads/ilo5_270.fwpkg

    Expected Output:
    iLOrest : RESTful Interface Tool version 2.4
    Copyright (c) 2014, 2019 Hewlett Packard Enterprise Development LP
    -------------------------------------------------------------------------------------
    Uploading firmware: ilo5_140.bin
    [200] The operation completed successfully.
    Component ilo5_140.bin uploaded successfully
    Waiting for iLO UpdateService to finish processing the component
    0 hour(s) 2 minute(s) 43 second(s)  
    Firmware has successfully been flashed.
    iLO will reboot to complete flashing. Session will be terminated.
    Logging session out.

Starting ilo5_270 -> Current Latest (ilo_315)

1. This time, I downloaded ilorest-6.2.0.0-5.x86_64.rpm then extract it on Desktop/RPM/ilorest-6.2.0.0-5/ using rpmextract.sh which also provides 2 directory named "etc" and "usr".
2. Again, by using user root, this time I need to run this to makes the ilorest tools know where is its library file located otherwise it will gives you "Error: iLOrest Chif library not found, please check that the chif ilorest_chif.dll/.so is present."

export LD_LIBRARY_PATH=/home/user/Desktop/RPM/ilorest-6.2.0.0-5/usr/lib64:$LD_LIBRARY_PATH

2. I can safely run this command:

    i. /home/user/Desktop/RPM/ilorest-6.2.0.0-5/usr/sbin/ilorest login <iLO-IP-Address> -u <user> -p <password>
   ii. /home/user/Desktop/RPM/ilorest-6.2.0.0-5/usr/sbin/ilorest flashfwpkg /home/user/Downloads/ilo5_271.fwpkg

I don't have other laptop during that time, only happen to have my old archlinux inside my drawer and sadly did'nt  have time to test it using Windows. Feel free to try it and I wish you goodluck for it. Hopefully this post will be in help for someone later.