Spectre/Meltdown Bios Patching

[NuclearGeek]

Hello,

I am trying to install the BIOS Patchs to mitigate the Spectre and Meltdown vulnerabilites and I have hit a snag.

I have tried both a remote install and local install and both attempts fail the same way.  The process gets to the point where is should be flashing the new BIOS but it errors out (See highlighted).  It fails to clear the existing BIOS and fails the update.  However, the process completes without implying that it failed.  I only discovered that they were failing when I went to verify the installed BIOS version.  Anyone have a suggestion on how to get around this failing?

Thanks,

2018/04/04 09:44:40.741|000017A4|Information|ChpqFlashApp::InitInstance|
2018/04/04 09:44:40.741|000017A4|Information|ChpqFlashApp::InitInstance|--- START NEW HPQFLASH SESSION, HPQFLASH version 4.50.1.1 ---
2018/04/04 09:44:40.741|000017A4|Information|ChpqFlashApp::CPQFProcessCmdLineArgs|Command line =
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo|System name = HP COMPAQ ELITE 8300 USDT
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo|System ID = 0x3398
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo|System Serial Number = 2UA33013KN
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo|AT-p supported = 0 (0: not supported, 1 supported)
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo|Version of BIOS in system:
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo| Family = K01
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo| Major version = 0x2, Minor Version = 0x05
2018/04/04 09:44:42.832|000017A4|Information|CCpqCIMIntf::GetsystemInfo| Release Date = 05/07/2012
2018/04/04 09:44:44.470|000017A4|Information|ChpqFlashApp::AreToolsAvailable|The binary to create HP_TOOLS partition is not present: 'C:\Program Files (x86)\LANDesk\LDClient\sdmcache\packages\Cyber Remediation\HP Spectre Meltdown\HP 8300 Elite\HPQFlash\Installer.exe'
2018/04/04 09:44:44.610|000017A4|Information|CFlashDLLApp::CPQFValidateROMCABImage|Version of BIOS in ROM update (in CAB file):
2018/04/04 09:44:44.610|000017A4|Information|CFlashDLLApp::CPQFValidateROMCABImage| Family = K01
2018/04/04 09:44:44.610|000017A4|Information|CFlashDLLApp::CPQFValidateROMCABImage| Version = 3.06
2018/04/04 09:44:44.610|000017A4|Information|CFlashDLLApp::CPQFValidateROMCABImage| Release Date = 02/12/2018
2018/04/04 09:44:47.325|000017A4|Information|CConfirmFlashPage::OnWizardNext|Don't need to Backup BIOS files. Either system is not a laptop or BIOS does not support backup from USB device.
2018/04/04 09:44:48.339|000017A4|Information|CCpqCIMIntf::FlashRom|***** Start FLASHING *****
2018/04/04 09:44:48.370|000017A4|Information|CCpqCIMIntf::FlashRom|Start Saving Original BIOS Contents
2018/04/04 09:48:16.302|000017A4|Information|CCpqCIMIntf::FlashRom|End Saving Original BIOS Contents
2018/04/04 09:48:16.302|000017A4|Information|CCpqCIMIntf::FlashRom|Start flashing (Write) Attempt #1
2018/04/04 09:48:16.302|000017A4|Information|CCpqCIMIntf::FlashRomImage|Start Flash Rom Image (Write)
2018/04/04 09:49:31.081|000017A4|Warning |CCpqCIMIntf::ClearFlashInProgress|ClearFlashInProgress(): failed. hr = 0x0, dwRetCode = 0xD
2018/04/04 09:49:31.081|000017A4|Warning |CCpqCIMIntf::FlashRomImage|FlashRomImage: ClearFlashInProgress returns bStatus2 = 0, dwErrCode2 = 13
2018/04/04 09:49:31.081|000017A4|Information|CCpqCIMIntf::FlashRomImage|End Flash Rom Image (Write), bStatus = 1
2018/04/04 09:49:31.081|000017A4|Information|CCpqCIMIntf::FlashRom|End flashing (Write) Attempt #1
2018/04/04 09:49:31.081|000017A4|Information|CCpqCIMIntf::FlashRom|***** END FLASHING PROCESS *****

[DGroves]

please list the service pack number you are using and describe how (what actions in order) you are updating when doing a local install

also, do you have admin rights on the account being used for the update process?

[NuclearGeek]

sp85516.exe

yes I have logged in with an admin account.

I run the exe and it expands into the swsetup directory.  From there I navigate to the HPQFlash directory and make sure that rom.cab is there.  After that I launch CMD as Admin and navigate to the directory and run the following commands according to the included read me.

c:\swsetup\sp85516\hpqflash\hpqflash.exe -s -from.cab -a

if I remove the "-s" switch I can watch the application run.  It starts by copying the existing BIOS, once finished is claims to be flashing the new BIOS and show progress on the bar.  After completion the application forces a restart and once the system is back up I do a start> run msinfo32 to see the BIOS version and it is still the previous version.  

I then go to the log file that was written in the directory and get what I posted above.

about the only thing I haven't done is attempted a DOS based update... which for 155 8300 machines (and more of different models) isn't really feeasible when the documentation says it should be able to done in windows.

[DGroves]

place the sp file on the desktop and run it, does it open up a window  which allows you to select the flashing method

(it should) if the window opens, simply click on "the blue "Launch HPQFlash"

or,.....use winrar/winzip ( or run the sp85516 file and let it extract then close)

now if in windows go to the  HPQFlash folder and within simply run the "HPQFlash".exe file, it will auto extract the bios update from the "rom" archive

or,.......make a bootable usb key, and copy all the files from the DOSFlash folder onto the root of the usb key, and

boot the system (make sure the bios is configured to boot from usb first!) with the key in a usb 2.0 port

btw,...a the compressed  files  KO1, rom, have the same rom file as the dosFlash foldethe only diffrence is the name, the compressed folders have a ROM.bin and the dos folder has KO1_0306.bin, ALL 3 ARE the EXACT SAME FILE

[NuclearGeek]

@DGroves

Yes, I have tried all but the DOS Flash given that the volume of work to go that way it is not feasible.  I have succeeded in in launching this remotely on other models of HP's, so I know that the software works... but there is something different with these 8300's.  Not sure if it is a setting in the BIOS itself or what but surely HP has a way for this to work via windows or else the wouldn't have included the software.

Thanks,

[DGroves · Accepted solution]

if it will not update within the HPQFlash "Lanunch HPQFlash"  you most likely  have a browser issue, or a permision issue

you should be able to just extract the sp, then go into the FPQFlash folder and simply run the hpqflash  to update

some hp systems must be at a minimum bios revision before applying the latest update what is the current bios rev?

and are youa  SFF or tower config

also are you in legacy or UEFI mode?

[NuclearGeek]

@DGroves

That was the fix.

The machines were sporting Version 2.06.  I had to jump to Version 2.99 in order to then jump to version 3.06.  Works flawlessly from our remote patching server.

Many Thanks!!