Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

X390 fails to install ThinkPad T490s Corporate ME Update #31

Closed
foshaug opened this issue Jan 20, 2020 · 121 comments
Closed

X390 fails to install ThinkPad T490s Corporate ME Update #31

foshaug opened this issue Jan 20, 2020 · 121 comments
Assignees

Comments

@foshaug
Copy link

foshaug commented Jan 20, 2020

My system is unable to install the "ThinkPad T490s Corporate ME Update".
Every time I try to install it the system offers the same update again.

$ fwupdmgr get-updates
UEFI Device Firmware has firmware updates:
GUID:                    aeac19da-0c78-4b86-a718-1a043947d83b
ID:                      com.lenovo.ThinkPadN2JRM.firmware
Update Version:          192.47.1524
Update Name:             ThinkPad T490s Corporate ME Update
Update Summary:          Lenovo ThinkPad T490s Corporate ME Firmware
Update Remote ID:        lvfs
Update Checksum:         SHA1(afa2196c27376214d475213bfec45570aa260ab3)
Update Location:         https://fwupd.org/downloads/b2c442db905872d9d4725a038b29450edaea8361-Lenovo-ThinkPad-T490s-CorporateMEFirmware-12.0.47.1524.cab
Update Description:       • 0 Q2'19 Intel Platform Update (Hot Fix Release)
                         
                         Version 12.0.47.1524 (LVFS: 192.47.1524)
                         
                         Problem Fixes
                          • Intel CSME PSIRT-TA-201905-011 Q2 2019 IPU:
                          • Mitigated the following security vulnerabilities under issues:
                         
                         Security issues fixed:
                          • CVE-2019-0086
                          • CVE-2019-0090
                          • CVE-2019-0092
                          • CVE-2019-0093
                          • CVE-2019-0094
                          • CVE-2019-0096
                          • CVE-2019-0097
                          • CVE-2019-0098
                          • CVE-2019-0153
                          • CVE-2019-0170
No upgrades for UEFI Device Firmware, current is 0.1.15: 0.1.15=same, 0.1.12=older
No upgrades for 20Q0CTO1WW System Firmware, current is 0.1.51: 0.1.51=same

IMG_0010
IMG_0011

To help us pinpoint your issue, please insert the output of the
following commands when ran on the system with the issue:

$ fwupdmgr --version
client version:	1.0.9
daemon version:	1.0.9
compile-time dependency versions
	appstream-glib:	0.7.7
	gusb:	0.2.11
	fwupdate:	10
	efivar:	34

Note, the switch --version is only present since version 0.9.6. If you use an
earlier version, please use the package manager to find out the package
version. For example, dpkg -l fwupd.

$ fwupdmgr get-devices
X390/T490s Thunderbolt Controller
  DeviceId:             d13dc094e8febb10211a5395d0961b529c340495
  Guid:                 e773c51e-a20c-5b29-9f09-6bb0e0ef7560
  Summary:              Unmatched performance for high-speed I/O
  Plugin:               thunderbolt
  Flags:                internal|updatable|registered
  Vendor:               Lenovo
  VendorId:             TBT:0x0109
  Version:              18.00
  Icon:                 computer
  Created:              2020-01-19

UEFI Device Firmware
  DeviceId:             b1825e2b03a9ebdea247a74f1f3ddee2a21ac565
  Guid:                 24aac206-3921-45c0-a79e-0a607b11aef0
  Plugin:               uefi
  Flags:                internal|updatable|require-ac|registered|needs-reboot
  Version:              1.1.8
  VersionLowest:        0.0.1
  Icon:                 audio-card
  Created:              2020-01-19

UEFI Device Firmware
  DeviceId:             943ac8e39266b524856ff8e415f05b6f2bcbb148
  Guid:                 aeac19da-0c78-4b86-a718-1a043947d83b
  Plugin:               uefi
  Flags:                internal|updatable|require-ac|supported|registered|needs-reboot
  Version:              192.35.1427
  VersionLowest:        0.0.1
  Icon:                 audio-card
  Created:              2020-01-19
  Modified:             2020-01-20
  UpdateState:          needs-reboot

UEFI Device Firmware
  DeviceId:             09ce7908b2d90a3b53473c3f328410590a527f29
  Guid:                 be9a5f93-930b-40bf-8864-815268ea4ea3
  Plugin:               uefi
  Flags:                internal|updatable|require-ac|supported|registered|needs-reboot
  Version:              0.1.15
  VersionLowest:        0.1.15
  Icon:                 audio-card
  Created:              2020-01-19

20Q0CTO1WW System Firmware
  DeviceId:             ca8e899e46f1da1776d16410bc92f2cf0d963433
  Guid:                 6300ba52-d9ea-4ca0-88f9-f89ef73cc07b
  Guid:                 230c8b18-8d9b-53ec-838b-6cfc0383493a
  Plugin:               uefi
  Flags:                internal|updatable|require-ac|supported|registered|needs-reboot
  Version:              0.1.51
  Icon:                 computer
  Created:              2020-01-19
$ efibootmgr -v
BootNext: 0001
BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0000,001B,001C,001D,001E,001F,0020,0021,0022,0023,0024,0012,0011,0001
Boot0000* ubuntu	HD(1,GPT,bce5aa5d-e3d8-4fd9-b950-9b1656d70dc1,0x800,0x100000)/File(\EFI\ubuntu\shimx64.efi)
Boot0001* Linux-Firmware-Updater \fwupx64.efi	HD(1,GPT,bce5aa5d-e3d8-4fd9-b950-9b1656d70dc1,0x800,0x100000)/File(\EFI\ubuntu\shimx64.efi)\.f.w.u.p.x.6.4...e.f.i...
Boot0010  ThinkShield secure wipe	FvFile(3593a0d5-bd52-43a0-808e-cbff5ece2477)
Boot0011  LENOVO CLOUD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ad38ccbbf7edf04d959cf42aa74d3650)/Uri(https://download.lenovo.com/pccbbs/cdeploy/efi/boot.efi)
Boot0012  HTTPS BOOT	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,ad38ccbbf7edf04d959cf42aa74d3650)/Uri()
Boot0013  Setup	FvFile(721c8b66-426c-4e86-8e99-3457c46ab0b9)
Boot0014  Boot Menu	FvFile(126a762d-5758-4fca-8531-201a7f57f850)
Boot0015  Diagnostic Splash Screen	FvFile(a7d8d9a6-6ab0-4aeb-ad9d-163e59a7a380)
Boot0016  Lenovo Diagnostics	FvFile(3f7e615b-0d45-4f80-88dc-26b234958560)
Boot0017  Regulatory Information	FvFile(478c92a0-2622-42b7-a65d-5894169e4d24)
Boot0018  Startup Interrupt Menu	FvFile(f46ee6f4-4785-43a3-923d-7f786c3c8479)
Boot0019  Rescue and Recovery	FvFile(665d3f60-ad3e-4cad-8e26-db46eee9f1b5)
Boot001A  MEBx Hot Key	FvFile(ac6fd56a-3d41-4efd-a1b9-870293811a28)
Boot001B* USB CD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,86701296aa5a7848b66cd49dd3ba6a55)
Boot001C* USB FDD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,6ff015a28830b543a8b8641009461e49)
Boot001D* NVMe0	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a400)
Boot001E* NVMe1	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,001c199932d94c4eae9aa0b6e98eb8a401)
Boot001F* ATA HDD0	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f602)
Boot0020* ATA HDD1	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f601)
Boot0021* USB HDD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,33e821aaaf33bc4789bd419f88c50803)
Boot0022* PXE BOOT	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,78a84aaf2b2afc4ea79cf5cc8f3d3803)
Boot0023  Other CD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a35406)
Boot0024  Other HDD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f606)
Boot0025* IDER BOOT CDROM	PciRoot(0x0)/Pci(0x14,0x0)/USB(11,1)
Boot0026* IDER BOOT Floppy	PciRoot(0x0)/Pci(0x14,0x0)/USB(11,0)
Boot0027* ATA HDD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,91af625956449f41a7b91f4f892ab0f6)
Boot0028* ATAPI CD	VenMsg(bc7838d2-0f82-4d60-8316-c068ee79d25b,aea2090adfde214e8b3a5e471856a354)
$ efivar -l | grep fw
0abba7dc-e516-4167-bbf5-4d9d1c739416-fwupdate-aeac19da-0c78-4b86-a718-1a043947d83b-0
$ tree /boot
/boot
├── config-5.0.0-37-generic
├── config-5.3.0-26-generic
├── efi
│   └── EFI
│       ├── BOOT
│       │   ├── BOOTX64.EFI
│       │   └── fbx64.efi
│       └── ubuntu
│           ├── BOOTX64.CSV
│           ├── fw
│           │   └── fwupdate-YRcFUP.cap
│           ├── fwupx64.efi
│           ├── grub.cfg
│           ├── grubx64.efi
│           ├── mmx64.efi
│           └── shimx64.efi
├── grub
│   ├── fonts
│   │   └── unicode.pf2
│   ├── gfxblacklist.txt
│   ├── grub.cfg
│   ├── grubenv
│   ├── locale
│   │   ├── en_AU.mo
│   │   ├── en_CA.mo
│   │   ├── en_GB.mo
│   │   └── en@quot.mo
│   ├── unicode.pf2
│   └── x86_64-efi
│       ├── acpi.mod
│       ├── adler32.mod
│       ├── affs.mod
│       ├── afs.mod
│       ├── ahci.mod
│       ├── all_video.mod
│       ├── aout.mod
│       ├── appleldr.mod
│       ├── archelp.mod
│       ├── ata.mod
│       ├── at_keyboard.mod
│       ├── backtrace.mod
│       ├── bfs.mod
│       ├── bitmap.mod
│       ├── bitmap_scale.mod
│       ├── blocklist.mod
│       ├── boot.mod
│       ├── bsd.mod
│       ├── bswap_test.mod
│       ├── btrfs.mod
│       ├── bufio.mod
│       ├── cat.mod
│       ├── cbfs.mod
│       ├── cbls.mod
│       ├── cbmemc.mod
│       ├── cbtable.mod
│       ├── cbtime.mod
│       ├── chain.mod
│       ├── cmdline_cat_test.mod
│       ├── cmp.mod
│       ├── cmp_test.mod
│       ├── command.lst
│       ├── configfile.mod
│       ├── core.efi
│       ├── cpio_be.mod
│       ├── cpio.mod
│       ├── cpuid.mod
│       ├── crc64.mod
│       ├── cryptodisk.mod
│       ├── crypto.lst
│       ├── crypto.mod
│       ├── cs5536.mod
│       ├── ctz_test.mod
│       ├── datehook.mod
│       ├── date.mod
│       ├── datetime.mod
│       ├── diskfilter.mod
│       ├── disk.mod
│       ├── div.mod
│       ├── div_test.mod
│       ├── dm_nv.mod
│       ├── echo.mod
│       ├── efifwsetup.mod
│       ├── efi_gop.mod
│       ├── efinet.mod
│       ├── efi_uga.mod
│       ├── ehci.mod
│       ├── elf.mod
│       ├── eval.mod
│       ├── exfat.mod
│       ├── exfctest.mod
│       ├── ext2.mod
│       ├── extcmd.mod
│       ├── fat.mod
│       ├── file.mod
│       ├── fixvideo.mod
│       ├── font.mod
│       ├── fshelp.mod
│       ├── fs.lst
│       ├── functional_test.mod
│       ├── gcry_arcfour.mod
│       ├── gcry_blowfish.mod
│       ├── gcry_camellia.mod
│       ├── gcry_cast5.mod
│       ├── gcry_crc.mod
│       ├── gcry_des.mod
│       ├── gcry_dsa.mod
│       ├── gcry_idea.mod
│       ├── gcry_md4.mod
│       ├── gcry_md5.mod
│       ├── gcry_rfc2268.mod
│       ├── gcry_rijndael.mod
│       ├── gcry_rmd160.mod
│       ├── gcry_rsa.mod
│       ├── gcry_seed.mod
│       ├── gcry_serpent.mod
│       ├── gcry_sha1.mod
│       ├── gcry_sha256.mod
│       ├── gcry_sha512.mod
│       ├── gcry_tiger.mod
│       ├── gcry_twofish.mod
│       ├── gcry_whirlpool.mod
│       ├── geli.mod
│       ├── gettext.mod
│       ├── gfxmenu.mod
│       ├── gfxterm_background.mod
│       ├── gfxterm_menu.mod
│       ├── gfxterm.mod
│       ├── gptsync.mod
│       ├── grub.efi
│       ├── gzio.mod
│       ├── halt.mod
│       ├── hashsum.mod
│       ├── hdparm.mod
│       ├── hello.mod
│       ├── help.mod
│       ├── hexdump.mod
│       ├── hfs.mod
│       ├── hfspluscomp.mod
│       ├── hfsplus.mod
│       ├── http.mod
│       ├── iorw.mod
│       ├── iso9660.mod
│       ├── jfs.mod
│       ├── jpeg.mod
│       ├── keylayouts.mod
│       ├── keystatus.mod
│       ├── ldm.mod
│       ├── legacycfg.mod
│       ├── legacy_password_test.mod
│       ├── linux16.mod
│       ├── linuxefi.mod
│       ├── linux.mod
│       ├── loadbios.mod
│       ├── load.cfg
│       ├── loadenv.mod
│       ├── loopback.mod
│       ├── lsacpi.mod
│       ├── lsefimmap.mod
│       ├── lsefi.mod
│       ├── lsefisystab.mod
│       ├── lsmmap.mod
│       ├── ls.mod
│       ├── lspci.mod
│       ├── lssal.mod
│       ├── luks.mod
│       ├── lvm.mod
│       ├── lzopio.mod
│       ├── macbless.mod
│       ├── macho.mod
│       ├── mdraid09_be.mod
│       ├── mdraid09.mod
│       ├── mdraid1x.mod
│       ├── memdisk.mod
│       ├── memrw.mod
│       ├── minicmd.mod
│       ├── minix2_be.mod
│       ├── minix2.mod
│       ├── minix3_be.mod
│       ├── minix3.mod
│       ├── minix_be.mod
│       ├── minix.mod
│       ├── mmap.mod
│       ├── moddep.lst
│       ├── modinfo.sh
│       ├── morse.mod
│       ├── mpi.mod
│       ├── msdospart.mod
│       ├── mul_test.mod
│       ├── multiboot2.mod
│       ├── multiboot.mod
│       ├── nativedisk.mod
│       ├── net.mod
│       ├── newc.mod
│       ├── nilfs2.mod
│       ├── normal.mod
│       ├── ntfscomp.mod
│       ├── ntfs.mod
│       ├── odc.mod
│       ├── offsetio.mod
│       ├── ohci.mod
│       ├── part_acorn.mod
│       ├── part_amiga.mod
│       ├── part_apple.mod
│       ├── part_bsd.mod
│       ├── part_dfly.mod
│       ├── part_dvh.mod
│       ├── part_gpt.mod
│       ├── partmap.lst
│       ├── part_msdos.mod
│       ├── part_plan.mod
│       ├── part_sun.mod
│       ├── part_sunpc.mod
│       ├── parttool.lst
│       ├── parttool.mod
│       ├── password.mod
│       ├── password_pbkdf2.mod
│       ├── pata.mod
│       ├── pbkdf2.mod
│       ├── pbkdf2_test.mod
│       ├── pcidump.mod
│       ├── play.mod
│       ├── png.mod
│       ├── priority_queue.mod
│       ├── probe.mod
│       ├── procfs.mod
│       ├── progress.mod
│       ├── raid5rec.mod
│       ├── raid6rec.mod
│       ├── random.mod
│       ├── read.mod
│       ├── reboot.mod
│       ├── regexp.mod
│       ├── reiserfs.mod
│       ├── relocator.mod
│       ├── romfs.mod
│       ├── scsi.mod
│       ├── search_fs_file.mod
│       ├── search_fs_uuid.mod
│       ├── search_label.mod
│       ├── search.mod
│       ├── serial.mod
│       ├── setjmp.mod
│       ├── setjmp_test.mod
│       ├── setpci.mod
│       ├── sfs.mod
│       ├── shift_test.mod
│       ├── signature_test.mod
│       ├── sleep.mod
│       ├── sleep_test.mod
│       ├── spkmodem.mod
│       ├── squash4.mod
│       ├── syslinuxcfg.mod
│       ├── tar.mod
│       ├── terminal.lst
│       ├── terminal.mod
│       ├── terminfo.mod
│       ├── test_blockarg.mod
│       ├── testload.mod
│       ├── test.mod
│       ├── testspeed.mod
│       ├── tftp.mod
│       ├── tga.mod
│       ├── time.mod
│       ├── trig.mod
│       ├── tr.mod
│       ├── true.mod
│       ├── udf.mod
│       ├── ufs1_be.mod
│       ├── ufs1.mod
│       ├── ufs2.mod
│       ├── uhci.mod
│       ├── usb_keyboard.mod
│       ├── usb.mod
│       ├── usbms.mod
│       ├── usbserial_common.mod
│       ├── usbserial_ftdi.mod
│       ├── usbserial_pl2303.mod
│       ├── usbserial_usbdebug.mod
│       ├── usbtest.mod
│       ├── verify.mod
│       ├── video_bochs.mod
│       ├── video_cirrus.mod
│       ├── video_colors.mod
│       ├── video_fb.mod
│       ├── videoinfo.mod
│       ├── video.lst
│       ├── video.mod
│       ├── videotest_checksum.mod
│       ├── videotest.mod
│       ├── xfs.mod
│       ├── xnu.mod
│       ├── xnu_uuid.mod
│       ├── xnu_uuid_test.mod
│       ├── xzio.mod
│       ├── zfscrypt.mod
│       ├── zfsinfo.mod
│       └── zfs.mod
├── initrd.img-5.0.0-37-generic
├── initrd.img-5.3.0-26-generic
├── lost+found
├── memtest86+.bin
├── memtest86+.elf
├── memtest86+_multiboot.bin
├── System.map-5.0.0-37-generic
├── System.map-5.3.0-26-generic
├── vmlinuz-5.0.0-37-generic
└── vmlinuz-5.3.0-26-generic

10 directories, 297 files

Please answer the following questions:

  • Operating system and version: Ubuntu 18.04.3 LTS
  • How did you install fwupd (ex: from source, pacman, apt-get, etc): Came installed
  • Have you tried rebooting? Yes
  • Are you using an NVMe disk? Not sure - Yes
  • Is secure boot enabled (only for the UEFI plugin)? Yes
@neuged
Copy link

neuged commented Jan 22, 2020

I think I have the same issue in that the update just won't stick. Also on an X390, Ubuntu 19.10.

In case it is interesting, here is a pastebin with additional info like the OP provided it.

Tried the update both with secure boot enabled and disabled.

The output on startup is a bit different for me however than the photos above. I get:

Found update fwupd-ux-capsule
Found update fwupd-ef5cdc85-9cf6-469d-9cb7-920b7dd6672b-0
Adding new capsule
Adding new capsule
Reset system

Then darkness and afterwards an "Installing new firmware..." screen.

@Aberrantfox
Copy link

Precisely the same boat here, sadly.

@superm1 superm1 transferred this issue from fwupd/fwupd Jan 24, 2020
@neuged
Copy link

neuged commented Jan 25, 2020

@superm1 Could you maybe explain why this was transferred to "missing-firmware-..."? The firmware doesn't seem to be missing in this case or am I missing something?

@superm1
Copy link
Member

superm1 commented Jan 25, 2020

This repo tracks issues with the firmware not the open source software. Lenovo should be monitoring it too.

@neuged
Copy link

neuged commented Jan 25, 2020

Thank you!

@gustafla
Copy link

gustafla commented Jan 27, 2020

I also have this problem on the T490 running Arch Linux.

client version:	1.3.6
compile-time dependency versions
	gusb:	0.3.1
	efivar:	37
daemon version:	1.3.6

The installer runs successfully from a reboot, the machine reboots again and the Lenovo logo flashes with "firmware upgrade" or something like that, but after it's done and back to Linux, fwupdmgr says I'm still on 192.35.1427.

20N3S2NJ00
│
└─UEFI Device Firmware:
  │   Device ID:           b1c32d855d85a2124e865f0a03f8c2384dcca167
  │   Current version:     192.35.1427
  │   Minimum Version:     0.0.1
  │   Vendor:              DMI:LENOVO
  │   Update State:        success
  │   GUID:                bf2d0f8b-f9a9-400c-8914-36c225d16eb4
  │   Device Flags:        • Internal device
  │                        • Updatable
  │                        • Requires AC power
  │                        • Supported on remote server
  │                        • Needs a reboot after installation
  │                        • Device is usable for the duration of the update
  │
  └─ThinkPad T490/ThinkPad P43s/ThinkPad T590/ThinkPad P53s Consumer ME Update:
        New version:       192.47.1524
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad T490/P43s/T590/P53s Consumer ME Firmware
        License:           Proprietary
        Size:              2.7 MB
        Vendor:            Lenovo Ltd.
        Flags:             is-upgrade
        Description:       • 0 Q2'19 Intel Platform Update (Hot Fix Release)

        Version 12.0.47.1524 (LVFS: 192.47.1524)

        Problem Fixes

         • Intel CSME PSIRT-TA-201905-011 Q2 2019 IPU:
         • Mitigated the following security vulnerabilities under issues:

        Security issues fixed:

         • CVE-2019-0086
         • CVE-2019-0090
         • CVE-2019-0092
         • CVE-2019-0093
         • CVE-2019-0094
         • CVE-2019-0096
         • CVE-2019-0097
         • CVE-2019-0098
         • CVE-2019-0153
         • CVE-2019-0170

@atrostan
Copy link

atrostan commented Feb 6, 2020

Same issue here on Ubuntu 18.04.4 LTS using a 20Q0 ThinkPad X390

@gregorriegler
Copy link

Same. Ubuntu 19.10 T490s

@tompreston
Copy link

Same issue here. Fedora 31, x390.

I had two firmware updates to begin with, but I was able to install the first with the BIOS update (Utility & Bootable CD).

When I reboot to install the update I see the following messages and it hangs for 5+ minutes.

Found update fwupd-ux-capsule
Found update fwupd-ef5cdc85-9cf6-469d-9cb7-920b7dd6672b-0
Adding new capsule
Adding new capsule

I can turn off by holding the power button for two seconds, and it boots into Fedora without errors. fwupdmgr still reports an update is available for "ThinkPad T490s Consumer ME Update":

$ fwupdmgr get-updates
No upgrades for System Firmware: current version is 0.1.62: 0.1.51=older
No upgrades for UEFI Device Firmware: current version is 0.1.17: 0.1.15=older, 0.1.12=older
20Q0003VUK
│
└─UEFI Device Firmware:
  │   Device ID:           07edea1cf12d20814225b44de22b33758db1a1c8
  │   Current version:     192.40.1433
  │   Minimum Version:     0.0.1
  │   Vendor:              DMI:LENOVO
  │   Update State:        success
  │   GUID:                ef5cdc85-9cf6-469d-9cb7-920b7dd6672b
  │   Device Flags:        • Internal device
  │                        • Updatable
  │                        • Requires AC power
  │                        • Supported on remote server
  │                        • Needs a reboot after installation
  │                        • Device is usable for the duration of the update
  │
  └─ThinkPad T490s Consumer ME Update:
        New version:       192.47.1524
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad T490s Consumer ME Firmware
        Licence:           Proprietary
        Size:              2.7 MB
        Vendor:            Lenovo Ltd.
        Flags:             is-upgrade
        Description:       • 0 Q2'19 Intel Platform Update (Hot Fix Release)

        Version 12.0.47.1524 (LVFS: 192.47.1524)

        Problem Fixes

         • Intel CSME PSIRT-TA-201905-011 Q2 2019 IPU:
         • Mitigated the following security vulnerabilities under issues:

        Security issues fixed:

         • CVE-2019-0086
         • CVE-2019-0090
         • CVE-2019-0092
         • CVE-2019-0093
         • CVE-2019-0094
         • CVE-2019-0096
         • CVE-2019-0097
         • CVE-2019-0098
         • CVE-2019-0153
         • CVE-2019-0170

@sdague
Copy link

sdague commented Feb 17, 2020

Same issue with Fedora 31.

@stefanb2
Copy link

Same issue with T490s, Fedora 31, SecureBoot disabled in BIOS:

20NX000EMX
...
  │   Current version:     192.40.1433
...
  └─ThinkPad T490s Consumer ME Update:
        New version:       192.47.1524
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad T490s Consumer ME Firmware
...
        Description:       • 0 Q2'19 Intel Platform Update (Hot Fix Release)
        
        Version 12.0.47.1524 (LVFS: 192.47.1524)

I've tried several times to install this update over the past few months and always the same result:

  • fwupdmgr downloads & prepares the update
  • reboot
  • update package is detected & starts up
  • Lenovo Logo with Installing Firmware Update text shows up on the screen (for a fraction of a second), no progress bar is shown
  • laptop immediately resets
  • laptop starts normal boot procedure into OS

IMHO this is not a fwupdmgr issue but a faulty/corrupted upgrade package, i.e. the upgrade code itself crashes. As this seems to affect several different Lenovo update packages that try to install the same Q2'19 Intel Platform Update (Hot Fix Release), the problem may originate with the Intel ME update itself.

@wienerneustadt
Copy link

X390: exactly the same problem. OS: Ubuntu 18.04.4 LTS:
download -- update -- reboot -- update package detected -- Firmware update is announced to be starting -- "Press any key to continue" -- reset -- boot procedure

I called Lenovo Tech Support, hardware dept (still have warranty). They did not seem to understand the problem at all and claimed there was no Linux support offered. Still, I believe it is a hardware problem and, consequently an issue they should deal with.

Sorry for my non-tech approach. I am just an interested user and overjoyed to find someone who reports the same problems. At Lenovo they acted as if I had been the first one.

@dannypaz
Copy link

dannypaz commented Mar 7, 2020

Just wanted to chime in and say Ubuntu 18.04.4 LTS on T490s

@53RT
Copy link

53RT commented Mar 10, 2020

Just wanted to chime in and say Ubuntu 18.04.4 LTS on T490s

Same setup and problem here

@mayk78
Copy link

mayk78 commented Mar 11, 2020

I think i suffer the same issue.
When receiving the laptop i managed to install a fw update, but the next one i just can't get it to install (stick). Version 12.0.47.1524 (LVFS: 192.47.1524)
When i install it on my t490s , i can see the capsule files in /boot/efi/EFI/ubuntu/fw . Before pressing update the directory is empty. efibootmgr -v tells me boot next is linux-firmware-updater , but i can't get it to install anything.. Read somewhere to turn off secureboot , that did't help. Booting with F12 to select bootdevice i select linux-firmware-updater, nothing happens. Every boot the updatemanager nags me about the same update..
Anyone any clue ?

@PrinceWang2018
Copy link

Just wanted to chime in and say Ubuntu 18.04.4 LTS on T490s

@haeringer
Copy link

I think the problem is solved by updating the system BIOS.

I have updated the T490s to Package 1.62 [1.62 (N2JET84W) + 1.17 (N2JHT33W)] and the problematic FW update 192.47.1524 seems to have been installed fine afterwards:

~$ fwupdmgr get-updates
No upgrades for 20NX003CGE System Firmware, current is 0.1.62: 0.1.51=older
No upgrades for UEFI Device Firmware, current is 192.47.1524: 192.47.1524=same, 192.35.1427=older
No upgrades for UEFI Device Firmware, current is 0.1.17: 0.1.15=older, 0.1.12=older
________________________________________________

Devices that have been updated successfully:

 • UEFI Device Firmware (192.40.1433 → 192.47.1524)

I can not guarantee that this is the solution, but I haven't done any other changes to the system and the correlation seems obvious. Probably the package has some undocumented dependencies to the BIOS version.

@53RT
Copy link

53RT commented Mar 19, 2020

I have updated the BIOS from 'N2JET77W (1.55)' to N2JET85W (1.63) but still have the same problems to install the 192.47.1524 FW update.

PS: After updating the BIOS the my T490s restarted ~ 5 times for 3 seconds and then continued with a Self-Healing BIOS Backup. Was a bit scared if the update bricked my laptop

@haeringer
Copy link

I have updated the BIOS from 'N2JET77W (1.55)' to N2JET85W (1.63) but still have the same problems to install the 192.47.1524 FW update.

Did you also install the Embedded Controller (1.17, N2JHT33W) part of the package?

@metze-samba
Copy link

I also did the upgrade using n2jur23w.iso. That updated both on my x390 20Q0
from 'N2JET73W (1.51)' to N2JET85W (1.63) and N2JHT31W (1.15) to
N2JHT33W (1.17). The Bios says ME Firmware Version is still 12.0.40.1433
(before and after).

After 'fwupdmgr update' and a reboot (without any update happening) I'm still getting:
~# fwupdmgr get-updates
No upgrades for X390/T490s Thunderbolt Controller, current is 20.00: 20.00=same
No upgrades for 20Q0S0HM00 System Firmware, current is 0.1.63: 0.1.51=older
UEFI Device Firmware has firmware updates:
Device ID: 943ac8e39266b524856ff8e415f05b6f2bcbb148
GUID: aeac19da-0c78-4b86-a718-1a043947d83b
ID: com.lenovo.ThinkPadN2JRM.firmware
Update Version: 192.47.1524
Update Name: ThinkPad T490s Corporate ME Update Update
Update Summary: Lenovo ThinkPad T490s Corporate ME Firmware
Update Remote ID: lvfs
Update Checksum: SHA1(afa2196c27376214d475213bfec45570aa260ab3)
Update Location: https://fwupd.org/downloads/b2c442db905872d9d4725a038b29450edaea8361-Lenovo-ThinkPad-T490s-CorporateMEFirmware-12.0.47.1524.cab
Update Description: • 0 Q2'19 Intel Platform Update (Hot Fix Release)

                     Version 12.0.47.1524 (LVFS: 192.47.1524)
                     
                     Problem Fixes
                     
                      • Intel CSME PSIRT-TA-201905-011 Q2 2019 IPU:
                      • Mitigated the following security vulnerabilities under issues:
                     
                     Security issues fixed:
                     
                      • CVE-2019-0086
                      • CVE-2019-0090
                      • CVE-2019-0092
                      • CVE-2019-0093
                      • CVE-2019-0094
                      • CVE-2019-0096
                      • CVE-2019-0097
                      • CVE-2019-0098
                      • CVE-2019-0153
                      • CVE-2019-0170

No upgrades for UEFI Device Firmware, current is 0.1.17: 0.1.15=older, 0.1.12=older

@metze-samba
Copy link

https://pcsupport.lenovo.com/de/de/products/laptops-and-netbooks/thinkpad-x-series-laptops/thinkpad-x390/20q0/downloads/DS539850
says there's already 12.0.49.1534 (07 Jan 2020), maybe that would work, but there's only
n2jrg24w.exe and no .iso.

@53RT
Copy link

53RT commented Mar 19, 2020

I have updated the BIOS from 'N2JET77W (1.55)' to N2JET85W (1.63) but still have the same problems to install the 192.47.1524 FW update.

Did you also install the Embedded Controller (1.17, N2JHT33W) part of the package?

Thanks @haeringer for reminding me of the missing part of the installation.

No I didn't but after updating this part too I experience the same problems as @metze-samba has.

@metze-samba
Copy link

I run n2jrg24w.exe within a Windows VM in order to extract it:

FwDetect.exe A 178200 Fri Feb 19 18:15:12 2016
FWUpdate.exe A 2032600 Thu Feb 28 15:17:08 2019
FWUpdLcl64.exe A 855528 Tue Nov 12 14:26:16 2019
Idrvdll32e.dll A 89576 Tue Nov 12 14:25:06 2019
MEInfoWin64.exe A 1016808 Tue Nov 12 14:23:38 2019
MEManufWin64.exe A 1307112 Tue Nov 12 14:24:20 2019
MEUpdate.CMD A 590 Mon Apr 8 11:12:44 2019
ME_12.0_Cons.bin A 2585504 Tue Dec 10 16:50:22 2019
ME_12.0_Corp.bin A 12039072 Tue Dec 10 16:49:14 2019
Pmxdll32e.dll A 124392 Tue Nov 12 14:25:12 2019
SLA_TOOLS.PDF A 80469 Tue Nov 12 14:53:54 2019

And b2c442db905872d9d4725a038b29450edaea8361-Lenovo-ThinkPad-T490s-CorporateMEFirmware-12.0.47.1524.cab:

12.0.47.1524.cab.d$ ls -l
insgesamt 11924
-rw-rw---- 1 metze metze 12193472 Mär 19 14:08 firmware.bin
-rw-rw---- 1 metze metze 490 Mär 19 14:08 firmware.bin.asc
-rw-rw---- 1 metze metze 1956 Mär 19 14:08 firmware.metainfo.xml
-rw-rw---- 1 metze metze 924 Mär 19 14:08 README.txt

Just looking at the sizes of firmware.bin, ME_12.0_Corp.bin and ME_12.0_Cons.bin.
The first two are similar, but ME_12.0_Cons.bin is much smaller.

Is there a way to find out if I need the consumer firmware of the corporation version?
Maybe that's the problem here...

@haeringer
Copy link

haeringer commented Mar 19, 2020

Hm, ok, if it wasn't the BIOS update, I don't have a clue what made the installation of the 192.47.1524 update work on my machine suddenly :/

@foshaug
Copy link
Author

foshaug commented Mar 23, 2020

Updated to 1.63 and 1.15 to see if that would install the 192.47.1524 update, but alas, no such luck for me.

@slavoroi
Copy link

slavoroi commented May 27, 2020

Lenovo T480 ubuntu 20.04 doesn't update 'UEFI Device Firmware' as well:

image

sudo efibootmgr

BootCurrent: 0001
Timeout: 0 seconds
BootOrder: 0001,0000,0017,0018,0019,001A,001B,001C,001D,001E,001F,0024,0002
Boot0000* Windows Boot Manager
Boot0001* ubuntu
Boot0002* Linux-Firmware-Updater
Boot0010  Setup
Boot0011  Boot Menu
Boot0012  Diagnostic Splash Screen
Boot0013  Lenovo Diagnostics
Boot0014  Startup Interrupt Menu
Boot0015  Rescue and Recovery
Boot0016  MEBx Hot Key
Boot0017* USB CD
Boot0018* USB FDD
Boot0019* NVMe1
Boot001A* NVMe0
Boot001B* ATA HDD0
Boot001C* USB HDD
Boot001D* PCI LAN
Boot001E  Other CD
Boot001F  Other HDD
Boot0020* USBR BOOT CDROM
Boot0021* USBR BOOT Floppy
Boot0022* ATA HDD
Boot0023* ATAPI CD
Boot0024* PCI LAN

fwupdmgr --version

client version:	1.3.9
compile-time dependency versions
	gusb:	0.3.4
	efivar:	37
daemon version:	1.3.9

fwupdmgr get-updates

• Thunderbolt Controller has the latest available firmware version
• System Firmware has the latest available firmware version
• UEFI Device Firmware has the latest available firmware version
• UEFI Device Firmware has no available firmware updates
• UEFI Device Firmware has no available firmware updates
• USB2.0 Hub has no available firmware updates
• USB2.0 Hub has no available firmware updates
• USB3.0 Hub has no available firmware updates
• USB3.0 Hub has no available firmware updates
• Unifying Receiver has the latest available firmware version
• VMM5322 has no available firmware updates
• WDC PC SN720 SDAQNTW-512G-1001 has the latest available firmware version
20L5000AIV
│
└─UEFI Device Firmware:
  │   Device ID:           ea0fd60df22477668e549841f6a22a8c31cae587
  │   Current version:     184.70.3626
  │   Minimum Version:     0.0.1
  │   Vendor:              DMI:LENOVO
  │   Update State:        success
  │   GUID:                9e21f98b-fe98-455c-b388-da5450ab6979
  │   Device Flags:        • Internal device
  │                        • Updatable
  │                        • Requires AC power
  │                        • Supported on remote server
  │                        • Needs a reboot after installation
  │                        • Device is usable for the duration of the update
  │ 
  └─ThinkPad T480 Consumer ME Update:
        New version:       184.77.3664
        Remote ID:         lvfs
        Summary:           Lenovo ThinkPad T480 Consumer ME Firmware
        License:           Proprietary
        Size:              2.2 MB
        Vendor:            Lenovo Ltd.
        Flags:             is-upgrade
        Description:       Version 11.8.77.3664 (LVFS: 184.77.3664)
        
        Problem Fixes
        
         • Mitigated security vulnerabilities
        
        Security issues fixed:
        
         • CVE-2020-0531
         • CVE-2020-0532
         • CVE-2020-0533
         • CVE-2020-0535
         • CVE-2020-0536
         • CVE-2020-0537
         • CVE-2020-0538
         • CVE-2020-0539
         • CVE-2020-0540
         • CVE-2020-0545
         • CVE-2020-0594
         • CVE-2020-0595
         • CVE-2020-0596
         • CVE-2020-8674

@nmoreaud
Copy link

Same on Ubuntu 20.04

@mberionni
Copy link

same issue here on ubuntu 18.04 and Thinkpad T480 Consumer Update

@Shai-Aviv
Copy link

Same on Fedora 32 and Lenovo T480

@petski
Copy link

petski commented Sep 30, 2020

Updated my T490s to 1.70-1.20 with a Bootable USB (from here). Once finished, I was able to upgrade the ME Firmware Version to the latest version with fwupdmgr.

Possible relevant changelog line (from here):

Fixed an issue where MEFW LVFS file can't be updated.

Thanks.

@einsibjarni
Copy link

Updated my T490s to 1.70-1.20 with a Bootable USB (from here). Once finished, I was able to upgrade the ME Firmware Version to the latest version with fwupdmgr.

Possible relevant changelog line (from here):

Fixed an issue where MEFW LVFS file can't be updated.

Any reason why the 1.70 BIOS isn't available on LVFS (or at least why fwupdmgr doesn't see it and install it?). I downloaded the 1.70 bios .cab files and successfully updated with fwupdmgr and could then update the ME firmware from LVFS.

@mrhpearson
Copy link
Collaborator

Ack - looking into it (tracked internally by LO-742)
@kmauleon - just so you're aware too :)
Thanks for the report.
Mark

@kmauleon
Copy link
Collaborator

kmauleon commented Oct 5, 2020

hi @mrhpearson, thank you very much for the information ... this is handled by ODM @sheldonHf @PrinceWang2018 ...
@sheldonHf @PrinceWang2018 can you please update status of this issue? thank you very much....

@kmauleon
Copy link
Collaborator

new versions target to be released within november... please wait.. thank you very much

@Cryt1c
Copy link

Cryt1c commented Dec 9, 2020

@kmauleon @mrhpearson Any news on this issue?

@kmauleon
Copy link
Collaborator

hi @Cryt1c new version 192.71.1681 has been uploaded already >> https://fwupd.org/lvfs/devices/com.lenovo.ThinkPadN2JRM.firmware
Please check with this version. Thank you very much...

@kmauleon
Copy link
Collaborator

please run the following again... thank you
fwupdmgr refresh
fwupdmgr update

@Cryt1c
Copy link

Cryt1c commented Dec 10, 2020

Hi @kmauleon it worked!! Thanks a lot for your effort!

@kmauleon
Copy link
Collaborator

hi @Cryt1c Thank you very much for the good news!
hi @foshaug can you please try on your side? Thank you very much

@foshaug
Copy link
Author

foshaug commented Dec 18, 2020

@kmauleon all good on my end. Thanks

@hughsie
Copy link
Member

hughsie commented Dec 18, 2020

Many thanks again to @kmauleon -- you're a credit to Lenovo!

@hughsie hughsie closed this as completed Dec 18, 2020
@olbat
Copy link

olbat commented Dec 24, 2020

fwupdmgr refresh
fwupdmgr update

I gave it a shot on my Thinkpad x390 running an up-to-date Arch Linux but it didn't work: I got the same problem at boot time than the one mentioned in the initial comment.

Are there any upcoming updates targeted for x390s or something like that?

@kmauleon
Copy link
Collaborator

hi @olbat unfortunately 192.71.1681 is the latest for X390. no definite schedule yet for next release. please open a new issue for proper tracking then i will ping the owner... thank you very much... happy holidays! ^_^

@olbat
Copy link

olbat commented May 2, 2021

@kmauleon, I've opened this issue as a follow-up: #113 .

Thank you very much for your help!

@kmauleon
Copy link
Collaborator

kmauleon commented May 4, 2021

hi @olbat already ping the owner (https://github.com/lijunwang1990) ... thank you...

@kmauleon
Copy link
Collaborator

kmauleon commented May 6, 2021

hi @olbat please see owner's reply as below... thank you very much.

According to the user’s description , I noticed that user updated BIOS from version 1.51 to 1.71. We have fixed this issue (MEFW LVFS files can't update problem) in BIOS version 1.70.
So , update to BIOS version 1.70 first and then update ME from 192.47.1524 → 192.72.1757 will solve this problem.

@olbat
Copy link

olbat commented May 6, 2021

I managed to update to 1.70 using the cab file but then I wasn't able to update to 1.71 using fwupdmgr update (same issue), I had to use a cab file again. Let's see how it goes for the next version :)

@kmauleon
Copy link
Collaborator

kmauleon commented May 7, 2021

thanks for the feedback @olbat!

@sebirdman
Copy link

@kmauleon I'm also failing to update to 192.71.1681 on the X1E Gen2 device, all i get is a black screen after the fwupdmgr update reboot.

@mrhpearson
Copy link
Collaborator

I had the same on the P1G2.
I found the problem was I was trying to update ME, BIOS and EC all in one go - not sure why it didn't work but when I did them one-by-one the update went fine.
I'll follow up with the FW team, but hopefully the above gets you going
Mark

@sebirdman
Copy link

@mrhpearson i've got updates for TPM and ME right now, i've tried to update them individually but no success. both bring me to a black screen after reboot and never complete. the only way to reboot is to hard reset it or wait for battery to run out. everything else is up to date as far as i can tell.

@mrhpearson
Copy link
Collaborator

OK - as it's unrelated to the T490s that was the origin of my thread (and is closed) can you raise a new issue with the details - tag me - and I'll forward the details to the FW team. I don't have the X1E G2 so will have to see if we can reproduce.
Thanks!
Mark

@kmauleon
Copy link
Collaborator

hi @sebirdman ... sorry I don't know owner of X1E Gen2. as @mrhpearson suggested please open a new issue for this one for proper tracking. thank you very much.

@hughsie
Copy link
Member

hughsie commented May 20, 2021

@mrhpearson if you increase the required dep to 1.5.6 then you get this commit fwupd/fwupd@a676a5e but that only lists the X1 Yoga 4th, X1 Carbon 5th, X1 Carbon 7th and T460s.

@mrhpearson
Copy link
Collaborator

Thanks @hughsie
I'm going to guess that needs to be extended to other platforms....but I'll check with the firmware team and get their guidance. At least based on my experience the P1 needed it.
I've not submitted a patch for fwupd yet....looks like my first opportunity is on the horizon ;)

@hughsie
Copy link
Member

hughsie commented May 20, 2021

I've not submitted a patch for fwupd yet....looks like my first opportunity is on the horizon

If you get stuck let me know. I can add you as a committer on the main repo if that makes things easier for you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests