How to update my SSD Firmware
Applicable products
SNS appliances using Innodisk 3TE7 SSD drives.
If your product has a serial number belonging to the following list, you must update the SSD firmware :
- SN510 : SN510XXXXxxxxA7 with XXXX = A50F or A51B or A51G or A51I or A52B or A52C or A72G or A82H
- SN710 : SN710XXXXxxxxA7 with XXXX = A51B or A51D or A51K or A52B or A52C or A72F or A82I
- SN910 : SN910XXXXxxxxA7 with XXXX = A21B or A21E or A21H or A21L or A22C or A22E or A32E or A32G
- SN1100 : SN1K1XXXXxxxxA7 with XXXX = A11J or A12E
- SN2100 : SN2K1XXXXxxxxA7 with XXXX = A11E or A11H or A42E or A42G or A42H
- SN3100 : SN3K1XXXXxxxxA7 with XXXX = A42E or A42G
Any product with BIG DATA option is also potentially impacted
Description
This article describes how to update the SSD controller firmware for INNODISK 3TE7 SSD drives.
If this update is not applied, impacted products may face issues such as:
- Error messages displayed in console
- Freezes of the products
- Appliances no longer being able to boot.
The SSD firmware update has been included in the SNS firmware update version starting from 3.7.33, 3.11.21, 4.3.15 and 4.6.2
Nevertheless even if these SNS firmware versions embed the SSD update you need to confirm that the update has been performed successfully with the check command below.
If the SSD firmware version is not up to date (S22721) please contact support to run additional checks.
Procedure
Checking if the SSD needs to be updated using SSH
Only the equipment with Innodisk SSD are impacted “SSD 3TE7”
The outdated firmware versions are S20615 and S22426, the latest version is S22721. You can check it using the command below:
camcontrol devlist
<2.5" SATA SSD 3TE7 S20615> at scbus0 target 0 lun 0 (pass0,ada0) => impacted
<2.5" SATA SSD 3TE7 S22426> at scbus0 target 0 lun 0 (pass0,ada0) => impacted
<2.5" SATA SSD 3TE7 S22721> at scbus0 target 0 lun 0 (pass0,ada0) => not impacted
This will prevent the update in firmware S22721.
After confirming that your SSD firmware is S22426, please confirm that the operation is finished with the following command :
For SN510/SN710/SN910/SN1K1 :
smartctl -a /dev/ada0 | grep ^194 | awk '{print $11}' | sed s/\(//For SN2K1/SN3K1 :
smartctl -a /dev/ada1 | grep ^194 | awk '{print $11}' | sed s/\(//
If the result is "1" => The current firmware has no pending actions, the update should be successful.
If the result is "3" => The current firmware has ongoing actions, update will not be successful. In this case please contact Stormshield support to advise.
Applying the update
- If the update is sent to an equipment with another disk reference, the product will reboot but the update won't be applied.
- If the update is needed, download the corresponding maj file:
SNS version 2 => https://data.stormshield.eu/data2/sns/tools/mkmp_v2.maj
SNS version 3 => https://data.stormshield.eu/data2/sns/tools/mkmp_v3.maj
SNS version 4 => https://data.stormshield.eu/data2/sns/tools/mkmp_v4.maj - Install the update file as you would update a Stormshield firmware through the
System -> Maintenancemenu.
In case of a HA cluster, you can update the passive firewall first and then the second one.
- After the reboot, check that the update has been applied using the command below (version should be S22721):
camcontrol devlist<2.5" SATA SSD 3TE7 S22721> at scbus0 target 0 lun 0 (pass0,ada0)
If the version is not correct please contact Stormshield support.
Checking that the SSD cleaning is finished
The update activates a mechanism to clean the SSD (data will not be affected), this can take some time (from a few hours to several days depending on the disk usage).
During the operation you can still face symptoms as the mechanism has not finished cleaning the blocks but as soon as the cleaning is done, symptoms should disappear.
To check the status of this operation, use the following command once connected in SSH :
smartctl -a /dev/ada0 | grep ^194 | awk '{print $11}' | sed s/\(//
The result can be :
3 => The cleaning is still in progress.
1 => The cleaning is completed.