getfw - Error: Invalid HUU ISO image

[philipp.zenz]

Hi guys,

I´ve got an problem with the getfw tool to export the CIMC and BIOS Firmware.

Steps: (Linux)

- Download ISO from Cisco

- Mount ISO and get the getfw tool

- run as root -> ./getfw -s <path>ucs-c220m5-huu-4.1.1d.iso -d <path>

- get the error message -> "Error: Invalid HUU ISO image" (run as root!)

What I´ve tried:

- Other Computer (always Ubuntu)

- Other HUU ISO Image

Anyone got an idea?

ty

Philipp

[Kirk J]

4.1 era firmware fortunately is not encrypted (no need for getfw tool).  You can download the various component firmware files from their respectively named folders.

Kirk..

[philipp.zenz]

Seems to be wrong.

I´ve mounted the 4.1 ISO and there are no files - just the getfw

[philipp.zenz]

I´ve posted the wrong ISO - sorry.

It´s an M4 - ucs-c220m4-huu-4.1.2b.iso 

There are no files if I mount the image.

Philipp

[ilovbrotte]

Hello Philipp.zenz

Have you checked the size of the ISO you download, and the md5 or sha256 chipher from Cisco to check if the ISO are complete?

For your ISO download, ucs-c220m4-huu-4.1.2b.iso just keep your mouse over the download link for MD5 or Sha256.

MD5:474fcd6f670a6423fa46448c4a378d56 (not secure, but roots out failed downloads or copy operations)

Sha256: d0156e2e13c9b26b7f273a392a89c2274346136acf7618b509f426907a70d67166899f19cea784f456aa26b1a59e7f90bd80ccf0d97e4e48c4f4921ed1f4dae9 

For linux you use this operator for MD5 or sha256.
sha256sum /filepath/filename or md5sum /filepath/filename

For windows use Powershell, Get-Filehash -Algorithm Sha512 c:\folder\filename  (change the -Algorithm to md5 or other if you need this).

How to mount a ISO i would run a seach on ubuntu forums.

Regards Ivar

[philipp.zenz]

Hi,

I´ve checked th Hash already - all fine.

Any other ideas?

Regards

Philipp

[philipp.zenz]

Why couldnt cisco just upload the needed files - that drives me nuts.

I just need a Firmware file and could try things for hours.

[Jim Pilgrim]

Same issue I am having now that I have a windows 10 Linux subsystem and all the components installed, I get an Invalid HUU ISO image for the c220m4 image file.

[philipp.zenz]

thats drives me nuts

No one got an idea?

[Steven Tardy]

Kirk already answered you that with HUU 4.1 these files are no longer encrypted, so no need to go through the ./getfw process.

I'm on a Mac and downloaded file ucs-c220m5-huu-4.1.1d.iso.

Double clicked ucs-c220m5-huu-4.1.1d.iso to mount the image:

 % ls /Volumes/ucs-c220m5-huu-1/firmware/{bios,cimc}
/Volumes/ucs-c220m5-huu-1/firmware/bios:
bios.cap

/Volumes/ucs-c220m5-huu-1/firmware/cimc:
cimc.bin

That's it, the files are there.

Hope that helps.

[philipp.zenz]

Hi Steven,

for M5 images yes - thats correct.

But not for M4 images

Image ucs-c220m4-huu-4.1.2b.iso:

Mode                LastWriteTime         Length Name
----                -------------         ------ ----
d-----       03.01.2017     21:03                EFI
d-----       25.08.2020     16:27                GETFW
d-----       25.08.2020     16:28                LiveOS
d-----       25.08.2020     16:25                VIC_FIRMWARE
d-----       25.08.2020     16:28                isolinux
--r---       25.08.2020     16:25          32826 Release-Notes-DN1.txt
--r---       25.08.2020     16:25          29443 TOC_DELNORTE1.xml
--r---       25.08.2020     16:27      311767072 firmware.squashfs.enc
--r---       25.08.2020     16:25            227 huu-release.xml
--r---       25.08.2020     16:28             33 squashfs_img.enc.md5
--r---       25.08.2020     16:28             33 squashfs_img.md5
--r---       25.08.2020     16:27      139464736 tools.squashfs.enc

There are still encrpted files - dont know why cisco is always that complicated.

Regards

Philipp

[Steven Tardy]

Posted the steps I used to get these files last month on another thread:

https://community.cisco.com/t5/unified-computing-system/how-to-clear-cimc-password-on-ucs-220m4-server/td-p/3003373

Are you unable to follow the directions?

Do you get any errors?
What Linux OS are you using (I used a CentOS 7 VM)?

[philipp.zenz]

Hi Steven!

I´ve already tried it a several times - same error.

1)

philipp@philipp-VirtualBox:~$ sudo mount Downloads/ucs-c220m4-huu-4.1.2b.iso /mnt/lol
mount: /mnt/lol: WARNING: source write-protected, mounted read-only.

2) 

philipp@philipp-VirtualBox:/mnt/lol$ GETFW/getfw -s /home/philipp/Downloads/ucs-c220m4-huu-4.1.2b.iso -d /opt/fips/

Error: Extraction Failed

With sudo:

philipp@philipp-VirtualBox:/mnt/lol$ sudo GETFW/getfw -s /home/philipp/Downloads/ucs-c220m4-huu-4.1.2b.iso -d /opt/fips/

Decryption failed

Using Ubuntu 20.04

Regards

Philipp

[Steven Tardy · Accepted solution]

This Decryption failed is due to an underlying library (openssl I think) version on Ubuntu 20.04.

A fresh Ubuntu 16.04 and was able to complete the extraction:

sttardy@sttardy-virtual-machine:~$ sudo mkdir /mnt/c220
[sudo] password for sttardy:
sttardy@sttardy-virtual-machine:~$ sudo mount ucs-c220m4-huu-4.1.2b.iso /mnt/c220
mount: /dev/loop0 is write-protected, mounting read-only
sttardy@sttardy-virtual-machine:~$ sudo /mnt/c220/GETFW/getfw -s ucs-c220m4-huu-4.1.2b.iso -d .

FW/s available at './ucs-c220m4-huu-4.1.2b'
sttardy@sttardy-virtual-machine:~$ ls -l ucs-c220m4-huu-4.1.2b/*
ucs-c220m4-huu-4.1.2b/bios:
total 16388
-rwxr-xr-x 1 root root 16779416 Oct 16 15:19 bios.cap

ucs-c220m4-huu-4.1.2b/cimc:
total 62288
-rw-r--r-- 1 root root 63778860 Oct 16 15:19 cimc.bin
sttardy@sttardy-virtual-machine:~$

Hope that helps.

[philipp.zenz]

Hi Steven,

thank you! 

Ubuntu 16.04 worked for me.

Regards

Philipp