Applying and activating firmware updates with compliance policies

After Lenovo XClarity Administrator identifies a device as not compliant, you can manually apply and activate the firmware updates on these managed devices. You can choose to apply and activate all firmware updates that apply to a firmware-compliance policy or only specific firmware updates in a policy. Only downloaded firmware updates are applied.

Before you begin


To apply and activate updates on managed devices, complete the following steps.

  1. From the XClarity Administrator menu bar, click Provisioning > Firmware Updates: Apply/Activate. The Firmware Updates: Apply/Activate page is displayed.
  2. Click the Update with Policy tab.
  3. Select one or more devices and devices to which firmware updates are to be applied.
    You can sort the table columns to make it easier to find specific servers. In addition, you can filter the list of displayed devices by selecting an option in the Show menu to list only devices in a specific chassis, rack, or group, by entering text (such as a name or IP address) in the Filter field, or by clicking the following icons to list only devices with a specific status.
    • Hide compliant devices icon (Completed jobs icon)

    • Hide non-compliant devices status icon (Warning status icon)

    • Hide devices without an assigned compliance policy icon (No compliance policy icon)

    • Hide devices not being monitored icon (Not monitored icon)

    • Hide devices with firmware pending activation icon (Pending status icon)

    • Hide devices with compliance errors icon (Critical status icon)

    • Hide devices not supported for updates icon (Unsupported icon)

    • Hide devices undergoing firmware updates icon (Running jobs icon)

    • Hide devices with nonstageable firmware icon (Run scheduled job icon)

    • You can update firmware on a maximum of 50 devices at one time. If you choose to update firmware on more than 50 devices, the remaining devices are queued. A queued device is taken off the queue when either the activation completes on an updated device or an updated device is placed in the Pending Maintenance Mode state (if a restart is required on that device). When a device in the Pending Maintenance Mode state is restarted, the device boots into Maintenance Mode and continues the update process, even if the maximum number of firmware updates is already in progress.

    • You can apply and activate firmware that is later than the currently installed firmware.
    • You can choose to apply all updates for a specific device. However, you can also choose to expand a device to specify updates for specific components, such as the baseboard management controller or UEFI.

    • If you choose to install a firmware-update package that contains updates for multiple components, all components to which the update package applies are updated.
    • By default, all detected devices are listed as available for applying updates; however, down-level firmware might prevent a device from appearing in inventory or reporting full-version information. To list all policy-based packages that are available for you to apply updates, click All Actions > Global Settings, and selecting Enhanced Support for Down-Level Devices. When this option is selected, "Other Available Software" is listed in the Installed Version column for undetected devices.
      Note: The global settings cannot be changed when updates to managed devices are in progress.
    • If devices are installed in the server but is not detected by XClarity Administrator, enable Enhanced Support for Down-Level Devices to display inventory and full-version information for all devices, even if the firmware is down-level or if the device is missing from the inventory (see Configuring global firmware-update settings).

    • The Groups column indicates the groups of which each device is a member. You can hover over the Groups column to get a complete list of groups, by group type

    • The Installed Version column indicates the installed firmware version, compliance status, or device status.

      The compliance status can be one of the following:
      • Completed jobs icon Compliant

      • Critical status icon Compliance Error

      • Warning status icon Not Compliant

      • No compliance policy icon No Compliance Policy Set

      • Not monitored icon Not Monitored

      The device status can be one of the following:
      • Unsupported icon Updates Not Supported

      • Running jobs icon Update in Progress

      Note: If the installed firmware version is pending activation, "(Pending Activation)" is appended to the installed firmware version or compliance status of each applicable device, for example "2.20 / A9E12EUS (Pending Activation)." To see the pending-activation status, the following firmware version must be installed on the primary baseboard management controller in the server.
      • IMM2: TCOO46F, TCOO46E, or later (depending on the platform)

      • XCC: CDI328M, PSI316N, TEI334I, or later (depending on the platform)

    Illustrates the Firmware Updates: Apply/Activate page with a list of managed devices and identifies the assigned compliance policy and policy compliance for each managed device and device.
  4. Click the Perform Updates icon (Perform update icon). The Update Summary dialog is displayed.

    Illustrates the Update Summary dialog.
  5. Select one of the following update rules
    • Stop all updates on error. If an error occurs while updating any of the components (such as an adapter or management controller) in the target device, the firmware-update process stops for all selected devices in the current firmware-update job. In this case, none of the updates in the update package for the device are applied. The current firmware that is installed on all selected systems remains in effect.

    • Continue on error. If an error occurs while updating any of the devices in the device, the firmware-update process does not update the firmware for that specific device; however, the firmware-update process continues to update the other devices in the device and continues to update all other devices in the current firmware-update job.

    • Continue to next system on error. If an error occurs while updating any of the devices in the device, the firmware-update process stops all attempts to update the firmware for that specific device, so the current firmware that is installed on that device remains in effect. The firmware-update process continues to update all other devices in the current firmware-update job.

  6. Select one of the following activation rules:
    • Immediate activation. During the update process, the device might be restarted automatically a number of times until the entire update process is complete. Ensure that you quiesce all applications on the device before you proceed.

    • Delayed activation. Some but not all update operations are performed. Devices must be restarted manually to continue the update process. Additional restarts are then performed until the update operation completes.

      If a device restarts for any reason, the delayed update process completes.

      This rule is supported for only servers and rack switches. CMMs and Flex switches are immediately activated, regardless of this setting.

      Important: Do not choose Delayed Activation for more than 50 devices at one time. XClarity Administrator actively monitors devices with delayed activation so that the delayed activation is serviced when device is restarted. If you want to apply updates with delayed activation for more than 50 devices, break the update selection into batches of 50 devices at one time.
    • Prioritized activation. Firmware updates on the baseboard management controller are activated immediately; all other firmware updates are firmware updates are activated the next time the device is restarted. Additional restarts are then performed until the update operation completes. This rule is supported only for servers.

    Note: When enabled, the Wake-on-LAN boot option can interfere with XClarity Administrator operations that power off the server, including firmware updates if there is a Wake-on-LAN client in your network that issues "Wake on Magic Packet" commands.
  7. Optional: Clear Install prerequisite firmware if you do not want to install prerequisite firmware. Prerequisite firmware is installed by default.
    Note: When using Delayed Activation or Prioritized Activation for prerequisite firmware updates, you might need to restart the server to activate the prerequisite firmware. After the initial restart, the remaining firmware updates are installed using Immediate Activation.
  8. Optional: Select Force update to update firmware on the selected components even if the firmware level is up to date or to apply a firmware update that is earlier than the one currently installed on the selected components.
    Note: You cannot apply earlier levels of firmware to device options, adapters, or disk drivers.
  9. Click Perform Update to update immediately, or click Schedule to schedule this update to run at a later time.
    If needed, you can perform power actions on the managed devices. The power actions are useful when Delayed Activation is selected and you want the updates to continue when the device is waiting in the "Pending Maintenance" state. To perform a power action on a managed device from this page, click All Actions > Power Actions, and then click one of the following power actions.
    • Power on

    • Power down OS and power off

    • Power off

    • Shut down OS and restart

    • Restart

What to do next

When applying a firmware update, if the server fails to enter maintenance mode, attempt to apply the update again.

If updates were not completed successfully, see Firmware update and repository issues for troubleshooting and corrective actions.

From the Firmware Updates: Apply/Activate page, you can perform the following actions: