Rebootless Firmware Updates Using PLDM for High-Availability IHS

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing firmware update processes for Information Handling Systems (IHS) require rebooting, leading to downtime and impacting business operations, especially in high-availability systems where timely updates are crucial for security and performance enhancements.

Innovation Solution

Implementing a rebootless firmware update system using the Platform Level Data Model (PLDM) protocol, which allows updates to be scheduled and performed without rebooting the IHS, utilizing a Remote Access Controller (RAC) for out-of-band management and managing firmware updates through the Platform Management Components Intercommunication (PMCI) interface stack.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional firmware update processes are used, then firmware can be updated, but system downtime occurs requiring reboot

Engineering Contradiction:
Improvesystem availabilityVSAvoiddowntime
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The firmware image is segmented into multiple partitions (e.g., active partition and inactive partition). The system can switch between partitions without rebooting, allowing one partition to be updated while the other remains active, thus maintaining system availability and eliminating downtime.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The firmware update is prepared in advance in an inactive partition while the system continues to run on the active partition. Once the update is ready and validated, the system switches to the inactive partition without requiring a reboot,从而实现无中断的固件更新。

Inventive Principle:
Principle #10Preliminary action

2Reliability

If firmware updates are performed frequently to address security vulnerabilities, then security is improved, but system downtime increases

Engineering Contradiction:
ImprovesecurityVSAvoidbusiness operation continuity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

By segmenting firmware into switchable partitions, the system can apply security updates in the background without interrupting business operations. The partition switching mechanism enables seamless updates that maintain continuous productivity while improving security posture.

Inventive Principle:
Principle #1Segmentation

3Reliability

If rebootless firmware updates are implemented, then system availability is maintained, but firmware update capability must be enhanced

Engineering Contradiction:
Improvesystem availabilityVSAvoidfirmware update mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The firmware is divided into manageable partitions with clear roles (active/inactive). This segmentation simplifies the update mechanism by providing a straightforward switch between partitions, reducing the complexity compared to implementing a completely new update architecture.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The partition switching mechanism serves multiple functions: it enables rebootless updates, provides rollback capability, and supports firmware validation. This multi-functionality reduces the need for separate complex mechanisms for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12411681B2Systems and methods for supporting rebootless firmware updates
Publication Date: 2025.09.09 DELL PROD LP
  • US12411681B2 patent drawing
  • US12411681B2 patent drawing
  • US12411681B2 patent drawing

AI summary

Embodiments of systems and methods to provide a firmware update to devices configured in a redundant configuration in an Information Handling System (IHS) are disclosed. In an illustrative, non-limiting embodiment, an IHS may include computer-executable instructions to receive a firmware update image associated with the firmware device, determine that the firmware update image possesses a critical sub-image portion, and schedule a firmware update to be performed in the future on the firmware device using the one firmware update image. The firmware update image conforms to a Platform Level Data Model (PLDM) protocol that is configured to perform rebootless firmware updates.