mellanox-sx6012-notes

# update bootstrap details
mlxi2c update_bootstrap166 (86 82 96 1a d9 80 0 e0 c0 8 23 50 d 5 0 0) # my unit already had this set
mlxi2c update_bootstrap200 (86 82 96 19 b9 80 0 e0 c0 8 23 50 d 5 0 0)

# dump bootstrap rom
/opt/tms/bin/mellaggra _read 0 0x52 0 1 16 # this will dump the bootstrap ROM

# back up the backplate and CPU FRUs
/opt/tms/bin/mellaggra _read_fru 8 0x51 1000 fru_backplate.bin
/opt/tms/bin/mellaggra _read_fru 0 0x50 1000 fru_cpu.bin

# run emc_to_6012 from fru-eeprom-funcs.sh on the eeprom dump
emc_to_6012 "fru_backplate.bin" "fru_bp_patched.bin"
# flash the modified file back
/opt/tms/bin/mellaggra _write_fru 8 0x51 1000 fru_bp_patched.bin

# manual mfg boot over tftp
run mfg_load;if test 0${filesize} -gt 0; then echo Booting mfg ; run mfg_args mfg_common_args;bootm ${kernel_addr_r} ${ramdisk_addr_r} ${fdt_addr_r} ; else ; echo Failed mfg load ; fi

# apply image over ftp from manufacturing environment without rebooting and with progress
manufacture.sh -v -v -t -a -m ppc -u ftp://ftp-user:ftp@host/image-PPC_M460EX-3.6.8012.img

# mount system from mfg and chroot
mkdir -p /mnt/root2 && \
mount -t jffs2 /dev/mtdblock7 /mnt/root2 && \
mount -t jffs2 /dev/mtdblock8 /mnt/root2/config && \
mount -t proc /proc /mnt/root2/proc && \
mount -o bind /sys /mnt/root2/sys && \
mount -o bind /dev /mnt/root2/dev && \
chroot /mnt/root2 /bin/bash

# now we clear the bootloader password
# default val =  $1$yCoib8pn$vSaWSssw2k17iOJRIdmcw/
mddbreq /config/mfg/mfincdb set modify - /system/bootmgr/password string ''
mddbreq /config/mfg/mfincdb.bak set modify - /system/bootmgr/password string ''
# check they're empty now
mddbreq /config/mfg/mfincdb query get - /system/bootmgr/password
mddbreq /config/mfg/mfincdb.bak query get - /system/bootmgr/password
# set the hwname
mddbreq /config/mfg/mfdb set modify - /mfg/mfdb/system/hwname string M460EX

# exit chroot then do this to reboot and run firstboot
umount /mnt/root2/dev && umount /mnt/root2/sys && umount /mnt/root2/proc && umount /mnt/root2/config && umount /mnt/root2 && reboot

# get modded binaries if need
wget ftp://ftp-user:ftp@10.61.1.220/disk1/ftp/3.6.8012.tar

# set root pw
mddbreq /config/db/initial set modify - /auth/passwd/user/root/password string 'hashed-password-string-using-sha512' # starts with $6$
# or set admincli shell
mddbreq /config/db/initial set modify - /auth/passwd/user/admincli/shell string '/bin/bash'

mddbreq /config/mfg/mfdb query get - /auth/passwd/user/admincli/shell

chroot /mnt/root2 /bin/bash

# licenses!
# the license secret is 'm2l0n%0x9'

# need these lics for all the fun stuff:
# RESTRICTED_CMDS_GEN2
genlicense 2 RESTRICTED_CMDS_GEN2 'm2l0n%0x9'

key: LK2-RESTRICTED_CMDS_GEN2-88A1-NEWD-BPNB-1

Activation option IDs:
    1 (start_date): Start date: license not active before this date
    2 (end_date): End date: license not active after this date
    3 (tied_primary_mac): Tie to this MAC address on primary interface
    4 (tied_host_id): Tie to this host ID
    5 (tied_host_id_hex): Tie to this host ID (lowercase hexadecimal)
    6 (tied_serialno): Tie to this serial number
    7 (tied_uuid): Tie to this UUID (must be RFC 4122 compliant)
   49 (efm_sx_serial_num): Chassis serial number for license verification

Informational option IDs:
   48 (efm_sx_max_num_hca_ports): Maximum number of HCA ports supported by this MLNX-OS SwitchX license
   50 (efm_sx_active_ports): Active ports number supported by this MLNX-OS SwitchX license
   51 (efm_sx_l2_enabled): Eth L2 enabled by this MLNX-OS SwitchX license
   52 (efm_sx_ib_enabled): IB enabled by this MLNX-OS SwitchX license
   53 (efm_sx_eth_enabled): Eth enabled by this MLNX-OS SwitchX license
   54 (efm_sx_gw_ports): GW ports number supported by this MLNX-OS SwitchX license
   55 (efm_sx_max_ufm_ports): Maximum number of UFM ports supported by this MLNX-OS SwitchX license
   56 (efm_sx_ib_speed_sw_limit): IB port SW speed limit enabled by this MLNX-OS SwitchX license
   57 (efm_sx_eth_speed_sw_limit): Eth port SW speed limit enabled by this MLNX-OS SwitchX license
   58 (efm_sx_l3_enabled): Eth L3 enabled by this MLNX-OS SwitchX license
   59 (efm_sx_fcf_enabled): FCF enabled by this MLNX-OS SwitchX license
   60 (oem_lic_10gbps_enable): 10 Gbps ports licensed by OEM license
   61 (oem_lic_25gbps_enable): 25 Gbps ports licensed by OEM license
   62 (oem_lic_100gbps_enable): 100 Gbps ports licensed by OEM license

# EFM_SX with the following options set:
48 (efm_sx_max_num_hca_ports): Maximum number of HCA ports supported by this EFM SX license
50 (efm_sx_active_ports): Active ports number supported by this EFM SX license
51 (efm_sx_full_l2_enabled): Full Eth L2 enabled by this EFM SX license
52 (efm_sx_ib_enabled): IB enabled by this EFM SX license
53 (efm_sx_eth_enabled): Eth enabled by this EFM SX license
54 (efm_sx_gw_ports): GW ports number supported by this EFM SX license
55 (efm_sx_max_ufm_ports): Maximum number of UFM ports supported by this EFM SX license
56 (efm_sx_ib_speed_sw_limit): IB port SW speed limit enabled by this EFM SX license
57 (efm_sx_eth_speed_sw_limit): Eth port SW speed limit enabled by this EFM SX license
58 (efm_sx_l3_enabled): Eth L3 enabled by this EFM SX license

./genlicense 2 EFM_SX 'm2l0n%0x9' -o efm_sx_ib_enabled true -o efm_sx_eth_enabled true -o efm_sx_l2_enabled true -o efm_sx_l3_enabled true -o efm_sx_fcf_enabled true -o efm_sx_max_num_hca_ports 64 -o efm_sx_active_ports 64 -o efm_sx_gw_ports 64 -o efm_sx_max_ufm_ports 64
LK2-EFM_SX-5L11-5M11-5K11-5T11-5U11-5G22-05J2-205N-2205-P220-88A2-L5T5-3MYW-9

key: LK2-EFM_SX-5L11-5M11-5T11-5G1C-5J1C-5N1C-5P1C-5Q21-85R2-1888-A4N2-VF2J-8VV

# known good key for eth+l2+l3:
LK2-EFM_SX-5M11-5K11-5T11-88A1-BBD0-JP82-X