Rebootless Firmware Update Error Recovery via Dual Signaling Pathways
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Information Handling Systems (IHSs) face challenges in updating firmware without causing downtime or performance degradation, especially when transmission failures occur during the update process.
Innovation Solution
The implementation of a remote access controller that supports error recovery by initiating firmware updates, detecting transmission failures, identifying alternative signaling pathways, and resuming transmission to ensure seamless updates without rebooting the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of time
If firmware updates are performed without rebooting the system, then downtime is minimized and continuous operation is maintained, but transmission failures during the update process can occur causing update errors
Solution Approach 1:
The system performs preliminary actions by establishing multiple signaling pathways (I2C sideband bus and PCIe inband bus) before the firmware update begins. When a transmission failure is detected on the current pathway, the system can immediately switch to a pre-available alternative pathway without interrupting the update process or requiring system reboot, thus maintaining both continuous operation and update reliability
Solution Approach 2:
The system prepares compensatory measures in advance by having multiple communication pathways ready. This cushioning approach ensures that if one pathway fails during firmware transmission, there is already an alternative pathway available to complete the update, preventing update failure and eliminating the need for reboot
2Device complexity
If a single signaling pathway is used for firmware transmission, then the system complexity is reduced, but the system cannot recover from transmission failures without rebooting
Solution Approach 1:
The system implements multi-functionality by enabling the signaling pathways to serve dual purposes: the I2C sideband bus is used for both management communications and firmware transmission, while the PCIe inband bus serves for both data processing and firmware update. This allows the system to handle multiple functions through the same pathways, reducing the need for dedicated error recovery infrastructure while maintaining robust recovery capability
3Reliability
If the system reboots to recover from firmware update errors, then update reliability is improved, but downtime and performance degradation occur
Solution Approach 1:
The system introduces an intermediary error recovery mechanism that acts as a mediator between transmission failures and system reboot. When a firmware transmission failure is detected, the error recovery logic intercepts the error condition and redirects it through an alternative signaling pathway, preventing the error from propagating to a state that would require system reboot, thus maintaining update correctness while avoiding downtime
Data Source
AI summary
Systems and methods include a remote access controller of an IHS (Information Handling System) that provides remote management of the IHS. The remote access controller initiates an update of firmware used to operate a hardware component of the IHS by transmitting a firmware image to the hardware component via a first signaling pathway connecting the remote access controller to the hardware component. The remote access controller detects a failure in transmission of the firmware image to the hardware component via the first signaling pathway and identifies a second signaling pathway connecting the remote access controller to the hardware component. The remote access controller resumes transmission of the firmware image to the hardware component via the second signaling pathway and the firmware used to operate the hardware component is updated using the transmitted firmware image.


