To flash this firmware package, use the following iLOrest command. See http://www.hpe.com/servers/resttool to download the latest version of the iLOrest tool.
\n\nlocalhost OS example:
\nilorest flashfwpkg <file_name.fwpkg>
remote example:
\nilorest flashfwpkg <file_name.fwpkg> --url <iLO7_IP_Address> -u <iLO7_username> -p <iLO7_password>
Place the json file in the same folder as the fwpkg file.
\nThis firmware package can also be installed with the latest version of Smart Update Manager (SUM).
Supplemental updates for supported ProLiant servers and options can be done by using SUM, which is found on the Service Pack for ProLiant (SPP) ISO.
\n" } ], "ManufacturerName": [ { "Lang": "en", "Value": "Hewlett Packard Enterprise" } ], "Name": [ { "Lang": "en", "Value": "ROM Flash Universal Firmware Package - HPE ProLiant DL325/DL345 Gen12 (A66) Servers" } ], "Prerequisites": { "RequiredDiskSpace": { "SizeKB": "11000" }, "SupportedDevices": [], "SupportedOperatingSystems": [ { "Major": "0", "Minor": "0", "Name": "Cross Operating System", "Platform": "oi", "Sr": "OEM" }, { "Major": "9", "Minor": "0", "Name": "VMware ESXi 9.0", "Platform": "vmware_esx_server", "Sr": "OEM" } ], "SupportedPlatforms": false }, "ReleaseDate": "2026-08-28T05:08:05", "RevisionHistory": [ { "ReleaseNotes": [ { "Enhancements": "Added support for extracting the TPM Endorsement Key (EK) Certificate and sending it to iLO during boot for platform certificate validation (PCVT). This enables iLO to cache and store the EK Certificate for hardware attestation.
Added IPv6 support for iLO Virtual NIC discovery (SMBIOS Type 42). Host applications can now communicate with iLO over IPv6 when IPv4 is disabled, enabling Redfish host interface functionality in IPv6-only environments.
Removed the 16 GB size limitation for iLO eMMC. The system now supports iLO eMMC flash storage larger than 16 GB.
Added multi-language translation support for recently introduced RBSU options, including Secure Boot Auto Enroll Policy, SNC settings, core selection, and CXL bandwidth options.
", "Fixes": "Important Notes:
Details about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.
\nTo streamline content and avoid duplication across documents, starting the Gen12 platform, the UEFI Workload Based Profiles and Tuning Guide has been deprecated, and the contents of this document are now available as part of the current UEFI System Utilities User Guide for HPE Compute Gen12 servers based on iLO7 (https://hpe.com/support/UEFIG12-iLO7-UG-en).
Firmware Dependencies:
NoneProblems Fixed:
Resolved an issue where deleting or enrolling Secure Boot signatures via the Redfish API could fail. The failure was caused by an internal data structure mismatch that resulted in incorrect task data processing for Redfish-based Secure Boot key operations.
Resolved an issue where POST messages were not generated when a fan was removed from the system.
Resolved an issue where the iLO firmware version could be reported as 0.0 in the SPDM module on some platforms due to a timing dependency during firmware version retrieval.
Resolved an issue where the Secure Boot \"View Signatures\" display could not show certain database (DB) keys that use SHA-384 or SHA-512 signature algorithms.
Resolved an issue where iLO environment variables (EVs) were not restored after an iLO factory reset, which could cause multiple iLO functions to stop working until the next system boot.
Resolved an issue where the drive count displayed on the iLO Drives page could be incomplete due to incorrect drive identification for direct-attached storage devices.
Resolved an issue where the SPDM device authentication policy could be incorrectly read from a fallback path, potentially causing SPDM device authentication to be skipped during boot.
Resolved an issue where the system serial number could be missing after an AC power cycle due to a management interface command timeout during early boot.
Known Issues:
None", "Lang": "en" } ], "Version": "1.62_08-20-2026" }, { "ReleaseNotes": [ { "Enhancements": "Added support for 12KB certificate upload via Redfish API for Secure Boot key management.
Added Secure Boot Keys Auto Enrollment after UEFI firmware update. A new RBSU option \"Auto Enroll Policy\" under Server Security > Secure Boot Settings allows the system to automatically enroll updated Secure Boot keys after a firmware update based on the configured policy (Auto, ForceEnable, or Disable).
Added Intelligent Provisioning support and installation status flags to SMBIOS Type 219. OS-level tools can now detect whether the platform supports Intelligent Provisioning and its installation state.
", "Fixes": "Important Notes:
\n\nThis revision of the System ROM includes AMD reference code TurinPI 1.0.0B for AMD 5th Generation EPYC processors.
\n\nDetails about reported security vulnerabilities and their mitigation can be found at the following link Security Bulletin Library | HPE Support.
\n\nFirmware Dependencies:
\n\nNone
\n\nProblems Fixed:
\n\nAddressed an issue where HPE Smart Memory DIMMs could be incorrectly identified as non-Smart Memory.
\n\nAddressed an issue where NVMe-oF IPv6 target hard drives were not detected during VMware 9.0 installation.
\n\nAddressed an issue where an iLO-initiated NMI Blue Screen of Death (BSOD) could not be generated on Windows Server when Hyper-V was enabled.
\n\nAddressed an intermittent Purple Screen of Death (PSOD) that could occur during VMware ESXi 9.1 installation due to an inconsistency in processor virtualization register lock status across CPU cores.
\n\nAddressed an issue where the system could hang during boot when Intelligent Provisioning support was removed from the platform configuration.
\n\nAddressed an intermittent system assert that could occur during boot due to a timing condition in platform defaults initialization.
\n\nAddressed an issue where the EFI Shell startup.nsh script execution order did not follow the configured Shell Auto-Start Script Location setting. When set to "File Systems on Attached Media," the network location script could still execute first.
\n\nAddressed an issue where the redundant power supply requirement setting could display incorrectly in RBSU when using an OEM image.
\n\nAddressed an issue where Self-Encrypting Drive (SED) lock, unlock, or secure erase operations could fail or produce unexpected results if the management controller returned invalid key data. Improved error handling now validates the response before proceeding with drive operations.
\n\nAddressed an issue where IML entries for Mission Critical Mode events displayed a static controller name instead of the dynamically branded name.
\n\nAddressed the following security vulnerabilities:
\n\n- CVE-2026-42770 (OpenSSL)
\n\n- CVE-2026-45447 (OpenSSL)
\n\n- CVE-2026-7383 (OpenSSL)
\n\n- CVE-2026-42767 (OpenSSL)
\n\n- CVE-2026-34180 (OpenSSL)
\n\n- CVE-2026-34757 (Libpng)
\n\n- CVE-2014-9485 (MiniZip)
\n\nKnown Issues:
\n\nNone
\n", "Lang": "en" } ], "Version": "1.60_07-27-2026" } ], "SWKeys": [ { "Name": "A66", "SWKeyExpectedPath": "firmware:system" } ], "SchemaVersion": "2.0.0.0", "SupportedProducts": [ { "Family": "A66", "Model": "HPE ProLiant Compute DL325 Gen12 Server" }, { "Family": "A66", "Model": "HPE ProLiant Compute DL345 Gen12 Server" }, { "Family": "FTP", "Model": "FTP-Only System" } ], "UpgradeRequirements": "Recommended" }, "PackageFormat": "FWPKG-v2", "Type": "ComboFirmware", "UpdatableBy": [ "Bmc" ] }