Deprecated Release Notes sp90243, sp84442

[helix4]

All,

Intel Management Engine (ME) Firmware Component

9.1.45.3000 Rev.A

Windows 10 (64-bit)

Aug 17, 2018

sp90243.exe

https://support.hp.com/soar-attachment/516/col49914-vc-216343-2-vc-216343-2_sp90243_releasedoc.html

The MD5 sum in the above release note is currently: e895b0cf08dfebd593ff8fcdb3166cb1

The MD5 sum of sp90243.exe is currently: 12d6498206e9f108dd263590b0742526

Intel Management Engine Driver

11.7.0.1045 Rev.A

Windows 10 (64-bit)

Jan 12, 2018

sp84442.exe

https://support.hp.com/soar-attachment/748/col63945-vc-203564-2-vc-203564-2_sp84442_releasedoc.html

The MD5 sum in the above release note is currently: 842dd5d52ce06833c1052cc19b29a580

The MD5 of sp84442.exe is currently: 282918473c32ca971152bd492a8ef0e0

There's a mismatch between the sums in the release notes and the sums of the downloads. I downloaded and checked repeatedly.

It might be worth mentioning that the MD5 sums of sp90243 and sp84442 were previously consistent with the ones in the associated release notes but they aren't anymore. Apparently they have been changed quite recently. The date and time of the signatures are: 8:25 AM 12/13/2019, respectively 3:25 PM 12/4/2019. Surprisingly, the numbers designating the softpaqs (90243, 84442) have remained the same. Why haven't the release notes been updated? How can I verify the integrity and authenticity of the downloads and how can I even assume that the firmware won't brick the machine if updated release notes have not been provided? Thank you.

[plr1]

These packages seems to have the same problem,  the MD5 checksum does not match:

sp80445

sp85353

sp95770

sp93473

sp92168

sp87703

For example SP80445.EXE , computed MD5 sum is C685AC555469095E392BF1010E014D6B

computed SHA256 sum is D3496CEA31304435437816DA2FFFD9222EE0DD16D67D1B433A722EAB40986DDD

The actual sp80445.cva file contains these values:

[CVA File Information]
CVATimeStamp=20200102T101405
CVASyntaxVersion=2.1A6

...

[Softpaq]
SoftpaqNumber=SP80445
SupersededSoftpaqNumber=SP79457
SoftPaqMD5=298e7d0d1df39b81199fc7d27e895c5f
SoftPaqSHA256=04E03AD9330F280416F628BBC95E3F30E6B4AE26370947E829D3AD63BFB68988

...

[CVAToolDocumentStamp]
Generated by Release CVA Tool Version 1.0 using Syntax Version 2.0 A1 on 1/2/2020 10:14:14 AM
Copyright (c) 2017 HP Development Company, L.P.

I have a previous version of file sp80445.cva, in which the MD5 checksum value is correct:

[CVA File Information]
CVATimeStamp=20171208T110348
CVASyntaxVersion=2.1A6

...

[Softpaq]
SoftpaqNumber=SP80445
SupersededSoftpaqNumber=SP79457
SoftPaqMD5=c685ac555469095e392bf1010e014d6b

...

[CVAToolDocumentStamp]
Generated by Release CVA Tool Version 1.0 using Syntax Version 2.0 A1 on 12/8/2017 11:03:52 AM
Copyright (c) 2017 HP Development Company, L.P.

Will somebody from HP support repair it ?