ipmi-whitelist: Add Manufacturing Keep alive cmd
Issue:Manufacturing Keep alive command not working in provisioning mode
Fix: Add Manufacturing Keep alive command in ipmi-whitelist.conf
Tested:
Case 1:
1. Enable Manufacturing mode by pressing power button while bmc booting.
2. Check the SpecialMode status
Command: busctl call xyz.openbmc_project.SpecialMode
/xyz/openbmc_project/security/special_mode
org.freedesktop.DBus.Properties "Get" ss
"xyz.openbmc_project.Security.SpecialMode" "SpecialMode"
Response: v s
"xyz.openbmc_project.Control.Security.SpecialMode.Modes.Manufacturing"
3. Enable keep alive Manufacturing mode
Command: ipmitool raw 0x30 0xB5 0x00 0x49 0x4E 0x54 0x45 0x4C
Response: //Success
4. Verify from RMCP+ session.
Command: ipmitool -I lanplus -H <BMC-IP> -U root -P <Password> raw 0x30
0xB5 0x00 0x49 0x4E 0x54 0x45 0x4C
Response: //Success
Case 2:
1. Disable Manufacturing mode
Command: ipmitool raw 0x30 0xB4 3 0
Response: //Success
2. Check the SpecialMode status
Command: busctl call xyz.openbmc_project.SpecialMode
/xyz/openbmc_project/security/special_mode
org.freedesktop.DBus.Properties "Get" ss
"xyz.openbmc_project.Security.SpecialMode" "SpecialMode"
Response: v s
"xyz.openbmc_project.Control.Security.SpecialMode.Modes.None"
3. Enable keep alive Manufacturing mode
Command: ipmitool raw 0x30 0xB5 0x00 0x49 0x4E 0x54 0x45 0x4C
Response: Unable to send RAW command (channel=0x0 netfn=0x30 lun=0x0
cmd=0xb5 rsp=0xc1): Invalid command
4. Verify from RMCP+ session.
Command: ipmitool -I lanplus -H <BMC-IP> -U root -P <Password> raw 0x30
0xB5 0x00 0x49 0x4E 0x54 0x45 0x4C
Response: Unable to send RAW command (channel=0x0 netfn=0x30 lun=0x0
cmd=0xb5 rsp=0xc1): Invalid command
Signed-off-by: jayaprakash Mutyala <mutyalax.jayaprakash@intel.com>
Change-Id: I87d895c599cf4026a6b61c72f37fecd70ad5d15b
diff --git a/ipmi-whitelist.conf b/ipmi-whitelist.conf
index d340a7f..2ac4fb3 100644
--- a/ipmi-whitelist.conf
+++ b/ipmi-whitelist.conf
@@ -243,6 +243,7 @@
0x30:0xb2:0xff7f //<Intel General Application>:<Get BMC Service Status>
0x30:0xb3:0xff7f //<Intel General Application>:<Get BMC Security Control Mode>
0x30:0xb4:0x7f7f //<Intel General Application>:<Set BMC Security Control Mode>
+0x30:0xb5:0x7f7f //<Intel General Application>:<Manufacturing mode Keep Alive>
0x30:0xbb:0xff7f //<Intel General Application>:<Get CPLD Revision ID>
0x30:0xc2:0xff7f //<Intel General Application>:<Get OEM Extended Sys Info>
0x30:0xc3:0x7f7f //<Intel General Application>:<Mount Virtual USB Device>