X13SCW Release note.
----------------------------------------------------------------------------------------------------------------------------------
CPU Microcode                     | Option ROM/EFI driver                        | Intel RC/TXT/ME
----------------------------------------------------------------------------------------------------------------------------------
CPUID FAMILY                      | Aspeed Graphic UEFI            : 6041.12.00  | RC Version       : 0C.00.6B.41
B0671 RaptorLake B0 : 12C         | Aspeed Graphic Legacy          : 1.11.03     | SPS              : 6.3.4.48
90672 AlderLake H0  : 38          | Intel VROC UEFI                : 8.6.0.1118  | BIOS ACM         : 20240523(1.18.18)
90675 AlderLake K0  : 38          | Intel i210 Giga LAN UEFI       : 9.8.09      | SINIT ACM        : 20240523(1.18.18)
                                  | Intel i210 Giga LAN Legacy     : 1.4.04      | 
----------------------------------------------------------------------------------------------------------------------------------
 BIOS feature                      |   Support  
----------------------------------------------------------------------------------------------------------------------------------
 OOB Flash BIOS                    |      Y     
 OOB Update Setting                |      Y     
 OOB Change SMBIOS                 |      Y     
 InBand Flash BIOS                 |      Y     
 InBand Update Setting             |      Y     
 InBand Change SMBIOS              |      Y     
 InBand SMI E7h supported          |      N     
 InBand SMI D9h supported          |      Y     
 Hii to BMC supported              |      Y     
 Firmware Authentication           |      Y     
----------------------------------------------------------------------------------------------------------------------------------
 SW ECO Caused By                  |   Status   
----------------------------------------------------------------------------------------------------------------------------------
 BIOS/IPMI Customization           |      N
 HW Vendor Updates                 |      N
 BIOS/IPMI Workaround              |      N
 BIOS/IPMI Vendor Updates          |      Y
 BIOS/IPMI Enhancements            |      Y
 BIOS/IPMI Bug fixes               |      Y
----------------------------------------------------------------------------------------------------------------------------------
BIOS : BIOS_X13SCW-F-1D02_20241225_2.0_STDsp.bin       Release Date  : 12/25/2024
BIOS Revision : 2.0                                    BIOS Engineer : Ray Han
BIOS Checksum : 0xcc578709                             Git Revision  : bf5778799026a8b8e3a634bf1c0e8ecc62e26822
FW Global Version : 0001h                              ROT AntiRollback ID : N/A
IPMI Revision : N/A

BIOS Change :

1. [Enhancements] Update for Catlow RPL-E R Server WW51 BKC PV Candidat. 
    Description : According to the 1AZIQ_RC0C.00.6B.41_302: 
                  a) Update Update Microcode 0xB0671 to 0x12C for INTEL-TA-01228 Security Advisory to address CVE-2024-39355 (6.5 Medime) security issue for Intel IPU 2025.1. 
                  b) Update Microcode 0x90672 and 0x90675 to 0x38. 
                  c) Updated SPS firmware to SPS_E3_06.03.04.048.0_kn3. 
                  d) Updated BIOS ID to 4420.00. 
    Validation  : a) Boot into Advanced/ CPU Configuration page to check Microcode display corresponding revision. 
                  b) Check system display corresponding SPS version in Advanced/ PCH-FW Configuration page (ignore format of Operation Firmware Version). 
                  c) boot up system check system without hang up. 
                  d) Stress system on / off test. 

2. [Enhancements] Move hidden the SmcSecureBoot page policy. 
    Description : Before SMC OOB collection the OOB data, SmcSecureBoot page will be expose. After SMC OOB data ready will hidden the SmcSecureBoot page. 
    Validation  : a) Boot into BIOS setup menu, check the SmcSecureBoot page should be hiddened. 
                  b) Check the Redfish API (https://IP/redfish/v1/Systems/1/Bios) have "SecureBootMode" "SecureBootEnable" "ResetKeys" "CSMSupport" items or not. 

3. [Enhancements][SmcUefiBootsOptionRedfish] Support multi-layer USB device boot options. 
    Description : SAA 'ChangeFixedBootCfg' command fails when more than one USB device is installed on the same USB hub. (PB #188953) 
    Validation  : Make sure that SAA TC3106 & TC4126 pass with two identical USB devices on the hub. 

4. [Enhancements] Update the SmcOob module to SMCOOBV2.01.06 to enhance that hidden the items when it is not expose in the page. 
    Description : Since that the many same AttributeName items will hidden in the page, and have duplicate items in the Redfish API. 
                  This enhance will expose items once the item in the expose page, and hidden items once the item in un-expose page. 
    Validation  : a) Boot up systme withe TPM module. 
                  b) Check the Redfish API (https://IP/redfish/v1/Systems/1/Bios) have the "SecurityDeviceSupport" or not. 
                  c) Check how many "SecurityDeviceSupport" in the Redfish API (https://IP/redfish/v1/Systems/1/Bios), it should only one in the Redfish API. 

5. [Enhancements][SmcSecureBoot] Exposed "Secure Boot Mode" setup item to SAA. 
    Description : Added "Secure Boot Mode" setup item to SAA. 
    Validation  : Verify that the "Secure Boot Mode" setting can function properly when modified through SAA. 

6. [Fixes] Rumtime update smbios data to ROMHOLE. 
    Description : Fix a rare case, DMI is restored to wrong when system send to customer. 
    Validation  : Update DMI field by Ami DmiEdit utility then cold reset system to check field preserve the updates. 

7. [Fixes] Fix DUID can not follow rule.(Redmine: 32130) 
    Description : Locate PROJECT_PEI_DRIVER_PROTOCOL during PEI phase will fail.It need adjust PeiDriver/DxeDriver Apriori_Index to fix it. 
    Validation  : Make sure locate PROJECT_PEI_DRIVER_PROTOCOL as well during PEI phase. 

8. [Enhancements] Add function to support HTTPs boot TLS certificate upload via BMC Redfish API. 
    Description : New feature implementation. (Ref EGS SVN: 3466) 
    Validation  : Check the HTTPs boot TLS certificate can be upload/delete via BMC Redfish API {\"Key\":\"bios_httptlscert_file\"}"} 

9. [Fixes] Fixed issue that the SecureBootSetup cannot restore to the default after clearing CMOS. 
    Description : Set "AmiPcdNvramResetPropertyMask" to 0. (Refer to RaptorLake) 
    Validation  : a) Setting: [Secure Boot Mode]: Standard; [Secure Boot]: Enabled. 
                  b) ipmitool raw 00 08 05 80 80 00 00 0. (Clear CMOS) 
                  c) ipmitool raw 00 02 03 (Reset system) 
                  d) Confirm [Secure Boot Mode]: Custom; [Secure Boot]: Disabled. 

10. [Fixes] When using a Broadcom RAID card (SAS3808) and installing Windows Server 2022 (or 11), 
           the system will BSOD when booting into the freshly installed OS. 
    Description : If a system with IOMMU or VT-d enabled is configured with a SAS 3808/3816 iMR controller based storage add-on card/module,  
                  please ensure that the system BIOS supports the private interface and add the host memory address to the DMAR/RMRR table for the iMR controller to work seamlessly with the host memory. 
    Validation  : Install Windows Server 2022 (or 11) with the AOC-SLG4-2H8M2 (or AOC-S3808L-H8IR) and make sure the system is not BSOD. 

----------------------------------------------------------------------------------------------------------------------------------
 CPU Microcode                     | Option ROM/EFI driver                        | Intel RC/TXT/ME
----------------------------------------------------------------------------------------------------------------------------------
 CPUID FAMILY                      | Aspeed Graphic UEFI            : 6041.12.00  | RC Version       : 0C.00.6B.41
 B0671 RaptorLake B0 : 124         | Aspeed Graphic Legacy          : 1.11.03     | SPS              : 6.2.4.31
 90672 AlderLake H0  : 36          | Intel VROC UEFI                : 8.5.0.1096  | BIOS ACM         : 20230427(1.18.16)
                                   | Intel i210 Giga LAN UEFI       : 9.8.09      | SINIT ACM        : 20230427(1.18.16)
                                   | Intel i210 Giga LAN Legacy     : 1.4.04      | 
----------------------------------------------------------------------------------------------------------------------------------
 BIOS feature                      |   Support  
----------------------------------------------------------------------------------------------------------------------------------
 OOB Flash BIOS                    |      Y     
 OOB Update Setting                |      Y     
 OOB Change SMBIOS                 |      Y     
 InBand Flash BIOS                 |      Y     
 InBand Update Setting             |      Y     
 InBand Change SMBIOS              |      Y     
 InBand SMI E7h supported          |      N     
 InBand SMI D9h supported          |      Y     
 Hii to BMC supported              |      Y     
 Firmware Authentication           |      Y     
----------------------------------------------------------------------------------------------------------------------------------
 SW ECO Caused By                  |   Status   
----------------------------------------------------------------------------------------------------------------------------------
 BIOS/IPMI Customization           |      N     
 HW Vendor Updates                 |      Y     
 BIOS/IPMI Workaround              |      N     
 BIOS/IPMI Vendor Updates          |      Y     
 BIOS/IPMI Enhancements            |      Y     
 BIOS/IPMI Bug fixes               |      Y
----------------------------------------------------------------------------------------------------------------------------------
BIOS : BIOS_X13SCW-F-1D02_20240606_1.4_STDsp.bin        Release Date  : 06/06/2024
BIOS Revision : 1.4                                    BIOS Engineer : Ray Han
BIOS Checksum : 0x09589a1e                             Git Revision  : 1a6e6b6b5f3e7f26d40bbdd6a3cc08e96e25c58b
FW Global Version : 0001h                              ROT AntiRollback ID : N/A

BIOS Change :

1. [Fixes] Upgrade Secure Boot module to SecureBoot_48. 
   Description : Fixed the daily test item "Check Secure Boot Function by OCR" failed. 
   Validation  : Execute the daily test "Check Secure Boot Function by OCR" to confirm whether it passes. 

2. [Fixes] Overwrite AmiPcdChassisType to sync SYS_CHASSIS_TYPE_1 setting. 
    Description : Overwrite AmiPcdChassisType for intializing SmBios Type 3 Chassis Type, the chassis type configure to AmiPcdChassisType if ipmi fru reset. 
    Validation  : a) Reset fru by command : 'IPMICFG.efi -raw 30 41' 
                  b) Do cold reset or ipmi reset 
                  c) Check fru data empty by command, the Chassis Type field not exist : 'IPMICFG.efi -fru list' 
                  d) Check smbios field Chassis Type should be default 0x11 for condition by command : 'smbiosview -t 3' or 'AMIDEEFIx64.EFI /CT' 
                  e) Set Chassis type from fru to 0x00 or 0xFF by command then reset system : 'IPMICFG.efi -fru CT 0x00/0xFF' 
                  f) Check smbios field Chassis Type should be default 0x11 for condition by command : 'smbiosview -t 3' or 'AMIDEEFIx64.EFI /CT'

3. [Fixes] Resolve IPV6 "Preferred DNS server IP" and IPV6 "Alternative DNS server IP" are show garbage displayed correctly on BIOS setup. 
    Description : Initail those value before get value from BMC. 
    Validation  : If BMC reports valid IPV6 address, display IPV6 address on BIOS setup.

4. [Fixes] Ipv6 gateway can not sync with BMC. 
    Description : IPv6 gateway value does not sync with BMC WebUI. 
    Validation  : a) Change IPv6 gateway value from BMC WebUI. 
                  b) Enter to BIOS setup menu to check IPv6 gateway value is same as BMC WebUI. 

5. [Enhancements] Update FlashPackage, to prevent system might hang at 01 when finish flashing BIOS. 
    Description : Add /L0 command on afuefi.smc. 
    Validation  : a) Flash BIOS undr shell using FlashPackage (flash.nsh <BIOS ROM>). 
                  b) Check the system will not hang at 01 after rebooting.
 
6. [Enhancements] Security update for SA50216(AMISV638), SA50230(AMISV7097) and SA50235(AMISV7122). 
   Description: a) Timer Drift Issue EDK2 BIOS Recommendation Technical Advisory. 
                b) To revise OemVtdFeature for multiple raid cards. 
                c) NVMe recovery fail after update USB module to AmiUsb_36. 
                d) UsbRtSmm TOCTOU Vulnerability. 
                e) Update Catlow synchronize with 1AZIQ_RC0C.00.6B.41_010 
   Validation : Check ON/OFF stress can pass 

7. [Enhancements] Update Microcode to m_07_90672_00000036 and m_32_b0671_00000124. 
   Description : Update Microcode to M32B0671_00000124 and M0790672_00000036 per Intel Catlow WW13 MR2 BKC. 
   Validation  : a) Boot into BIOS setup menu.
                 b) Advanced -> CPU Configuration. 
                 c) Check Microcode Revision is correct or not. 

8. [Enhancements] Update SPS ME firmware to SPS_E3_06.02.04.031.0_kn3 per the Intel Catlow WW13 MR2 BKC release package. 
   Description : a) Update SPS ME firmware and module to RomImage_009 per 1AZIQ_RC0C.00.6B.41_010b RC code. 
                 b) Update PMC firmware to ADPS_PMC_FW_160.02.00.1043.pmcp_prod_pv. 
   Validation  : a) Check system boot up normally. 
                 b) Confirm the SPS version is correct or not. 
                 c) Check ON/OFF stress can pass. 

9. [Enhancements] G7400 CPU can not power on. 
    Description : Chnage Q_SmciIsFirstBoot CMOS to unmangerd and clear the cmos move to platformdxedriver.c. 
                  Avoid G7400 CPU can not power on. It will PEI phase dead loop between LoadOptimalDefaults and platformpeidriver.c dead loop continously.. 
    Validation  : Make sure on G7400 and other support RPL CPUs can power on.    

10. [Enhancements] Default disable Highest CPU performance support on BIOS setup menu. 
    Description : The feature need disable as default. 
    Validation  : Enter BIOS setup menu does not show up on Advanced menu. 

11. [Enhancements] Updated AmiTsePkg to address issues with AMI SA50235 Security Advisory BRLY-LOGOFAIL-2023-15 CVSS3.1(4.4, medium),BRLY-LOGOFAIL-2023-16 CVSS3.1(7.5, High), 
                  BRLY-LOGOFAIL-2023-18 CVSS3.1(7.5, High),BRLY-LOGOFAIL-2023-19 CVSS3.1(7.5, High),BRLY-LOGOFAIL-2023-22 CVSS3.1(7.5, High).      
   Description : a) Update AmiTsePkg to AMITSE_2_22_1293 and TSESources_2_22_1293. 
                 b) This remediation represent a continuation of hardening effort on top of what was first performed in SA50216 and SA50230. 
                    In order to completely harden AMI image parser, change for SA50216, SA50230 and SA50235 should be integrated into projects.  
                 c) The decoding algorithm for BMP, JPEG, PNG, GIF and PCX image formats were updated with additional checks for memory allocation, image format and data integrity checks, and boundary checks.  
                    BMP image processing has been synchronized with EDK2 code.  
                    For ESRT support, capsule data was checked for integrity, before processing the BMP image to display.  
 		 d) SA50235 Additional Image integrity checks related to JPEG and PNG.  
   Validation  : a) Confirm that the BIOS refresh process is successful by the afu tool and OOB. 
                 b) Run cburn on/off and confirm that the stress test can pass. 

12. [Enhancements] For SA50243 (CVSS3.1 (7.5, High)), fix that UsbRtSmm module has a TOCTOU vulnerability. 
   Description :  Avoid that attacker exploit a timing window which leading to arbitrary code execution at the SMM level. 
   Validation  :  Check whether USB can work normally during POST and under OS. 

13. [Fixes] Porting for supporting EarlyConsoleOut. 
   Description : EarlyConsoleOut not functional. 
   Validation  : Check Early Console function proper work. 

----------------------------------------------------------------------------------------------------------------------------------
 CPU Microcode                     | Option ROM/EFI driver                        | Intel RC/TXT/ME
----------------------------------------------------------------------------------------------------------------------------------
 CPUID FAMILY                      | Aspeed Graphic UEFI            : 6041.12.00  | RC Version       : 0C.00.6B.41
 B0671 RaptorLake B0 : 121         | Aspeed Graphic Legacy          : 1.11.03     | SPS              : 6.2.4.16
 90672 AlderLake H0  : 34          | Intel VROC UEFI                : 8.5.0.1096  | BIOS ACM         : 20230427(1.18.16)
                                   | Intel i210 Giga LAN UEFI       : 9.8.09      | SINIT ACM        : 20230427(1.18.16)
                                   | Intel i210 Giga LAN Legacy     : 1.4.04      | 
----------------------------------------------------------------------------------------------------------------------------------
 BIOS feature                      |   Support  
----------------------------------------------------------------------------------------------------------------------------------
 OOB Flash BIOS                    |      Y     
 OOB Update Setting                |      Y     
 OOB Change SMBIOS                 |      Y     
 InBand Flash BIOS                 |      Y     
 InBand Update Setting             |      Y     
 InBand Change SMBIOS              |      Y     
 InBand SMI E7h supported          |      N     
 InBand SMI D9h supported          |      Y     
 Hii to BMC supported              |      Y     
 Firmware Authentication           |      Y     
----------------------------------------------------------------------------------------------------------------------------------
 SW ECO Caused By                  |   Status   
----------------------------------------------------------------------------------------------------------------------------------
 BIOS/IPMI Customization           |      N     
 HW Vendor Updates                 |      Y     
 BIOS/IPMI Workaround              |      N     
 BIOS/IPMI Vendor Updates          |      Y     
 BIOS/IPMI Enhancements            |      Y     
 BIOS/IPMI Bug fixes               |      Y
----------------------------------------------------------------------------------------------------------------------------------
BIOS : BIOS_X13SCW-F-1D02_20240301_1.3_STDsp.bin       Release Date  : 03/01/2024
BIOS Revision : 1.3                                    BIOS Engineer : David Chen
BIOS Checksum : 0x9c15910f                             Git Revision  : ea7f5b20e0e8ae60fdaff511a4097e7e06436b1c 
FW Global Version : 0001h                              ROT AntiRollback ID : N/A

BIOS Change :

1. [Enhancements] SUM get duplicate Super Guardians Form in lists and remove unused PMem Config from table.
   Description : Both Json and Hii allow Hpk table list SuperGuardians App Form, remove it from Hii table that SUM should only get one for SUM policy.
   Validation  : Check if SuperGuardians storage proper lock.
                 a. Configure KMS server and check connection that KMS function works normally.
                 b. Set Super-Guardians Protection Policy to Storage and KMS Security Policy to Enabled.
                 c. Reboot system then set wrong configure for KMS server IP.
                 d. Check whether system locked for validating Super Guardians feature.
				 
2. [Enhancements] Set the GPIO ACPI device to be hidden under the OS.
   Description  : Hide GPIO ACPI device is disabled due to implementation of WW52 MR1 BKC.
   Validation   : Confirm that the device manager under the OS does not have a yellow mark.
 
3. [Enhancements] Updated AmiTsePkg to address issues with AMI SA50235 Security Advisory BRLY-LOGOFAIL-2023-15 CVSS3.1(4.4, medium),BRLY-LOGOFAIL-2023-16 CVSS3.1(7.5, High),
                  BRLY-LOGOFAIL-2023-18 CVSS3.1(7.5, High),BRLY-LOGOFAIL-2023-19 CVSS3.1(7.5, High),BRLY-LOGOFAIL-2023-22 CVSS3.1(7.5, High).     
   Description  : a) Update AmiTsePkg to AMITSE_2_22_1293 and TSESources_2_22_1293.
                  b) This remediation represent a continuation of hardening effort on top of what was first performed in SA50216 and SA50230.
                     In order to completely harden AMI image parser, change for SA50216, SA50230 and SA50235 should be integrated into projects. 
                  c) The decoding algorithm for BMP, JPEG, PNG, GIF and PCX image formats were updated with additional checks for memory allocation, image format and data integrity checks, and boundary checks. 
                     BMP image processing has been synchronized with EDK2 code. 
                     For ESRT support, capsule data was checked for integrity, before processing the BMP image to display. 
				  d) SA50235 Additional Image integrity checks related to JPEG and PNG. 
   Validation   : a) Confirm that the BIOS refresh process is successful by the afu tool and OOB.
                  b) Run cburn on/off and confirm that the stress test can pass.
				  
4. [Enhancements] According to SMC's rule, use KEK/DB which is the same as main stream.
   Description  : Copy keys from Eaglestream for synchronizing it.
   Validation   : Run test case "Check Key Exchange Key (KEK)" and "Check Allowed Signature Database (DB)" of ATS.
 
5. [Enhancements] For SA50243 (CVSS3.1 (7.5, High)), fix that UsbRtSmm module has a TOCTOU vulnerability.
   Description: Avoid that attacker exploit a timing window which leading to arbitrary code execution at the SMM level.
   Validation: Check whether USB can work normally during POST and under OS.
				   
----------------------------------------------------------------------------------------------------------------------------------
BIOS : BIOS_X13SCW-F-1D02_20240117_1.2_STDsp.bin       Release Date  : 01/17/2024
BIOS Revision : 1.2                                    BIOS Engineer : David Chen
BIOS Checksum : 0x4d37524c                             Git Revision  : 655f761530fb4e16b9ebf5c133fcd9078f4c4fe0 
FW Global Version : 0001h                              ROT AntiRollback ID : N/A

BIOS Change :

1. [Enhancements] Add FixedBootOrder Group boot device default value.
   Description : When use SUM tool to dump the boot order the boot group didn't have the default value.
   Validation  : a) Boot up system and use SUM tool to dump BIOS configue. (sum -i IP -u ADMIN -p ADMIN -c GetCurrentBiosCfg --file BIOS_Config.txt)
                 b) Check the "UEFI NETWORK Boot Option #1" and "UEFI NETWORK Boot Option #2" <DefaultOption> should be not the same boot device.

2. [Enhancements] Update the SUM OOB module to SMCOOBV2.00.22 to support Redfish replace the display name feature.
   Description: This update will search the duplicate AttributeName then keep add the QID after the AttributeName.
                But if it is the first or unique item will remove the QID from the AttributeName.
   Validation : a) Boot up system and use Redfish tool to read the BIOS configure. (https://IP/redfish/v1/Systems/1/Bios)
                c) Update the BMC that has support remove the serial number feature.
                d) Setup system to stress the SUM ATT.

3. [Enhancements] Update Microcode B0671 to 0x121 per Intel MR1 BKC.
   Description : For Intel Catlow WW52 MR1 BKC, update Microcode M32B0671_00000121, B0671 RaptorLake B0 CPU microcode is shown as 0x121.
   Validation  : a) Boot into BIOS setup menu.
                 b) Advanced -> CPU Configuration
                 c) Check Microcode Revision is shown as 0x121.

4. [Enhancements] Catlow synchronize with Label 1AZIQ_RC0C.00.6B.41_009 to update AmiUsb_34 module.
   Description: Update AmiUsb_28->34 is synchronize with Label 1AZIQ_RC0C.00.6B.41_009.
   Validation : a) Confirm whether that USB functions are normal.
                b) Confirm whether the USB related tests in the automation items pass.

5. [Enhancements] Update SPS ME firmware to SPS_E3_06.02.04.016.0_kn3 for the Intel Catlow WW52 MR1 BKC release package.
   Description :  For Intel Catlow WW52 MR1 BKC, update SPS ME firmware align to Intel Catlow WW52 MR1 BKC release package, and update RomImage package per 1AZIQ_RC0C.00.6B.41_009b RC code.
   Validation  :  a) Check system boot up normally
                  b) Confirm the SPS version is correct or not.
                  c) Check ON/OFF stress can pass.

6. [Enhancements] Upgrade VROC version to vroc_uefi_8.5.0.1096_pv for the Intel Catlow MR1 WW52 release package..
   Description : Upgrade VROC version to vroc_uefi_8.5.0.1096_pv for BKC WW52 VROC update.
   Validation  : a) Check system boot up normally
                 b) Boot into shell, command:drivers
                 c) Confirm the VROC version is correct or not.
                 d) Check ON/OFF stress can pass.

7. [Enhancements] Update CryptoPkg to label 53 to address CVE-2023-5678
   Description: a) Sync AptioV CryptoPkg with edk2-stable202311 tag.
                b) Included CVE-2023-5678 changes
                c) Sync AptioV CryptoPkg with OpenSSL_3.1.4
   Validation: Check system on off test.

8. [Enhancements] Update the Intel RC to 0C.00.6B.41 per Intel Catlow BKC WW52 MR1. (3485.00)
   Description: Based on the Intel BKC WW52 to update the RC. (reference lable 1AZIQ_RC0C.00.6B.41_009)
   Validation : a) boot up system check system without hang up.
                b) Stress system on / off test. 

9. [Fixes] Total HD capacity more than 26T will cause BIOS menu HD information is incorrect PBID:168341
    Description : When plug 8T + 18T HDDs can see the Serial ATA Port 18T HDD information is wrong size. 
    Validation  : a) Go to shell
                  b) Advanced -> SATA And VROC Configuration
                  c) Check Serial ATA Port HDD information is right
		  
10.[Enhancements] Add BIOS setup keyword search function. 
   Description : Add SmcKeywordSearch module in SMC package. 
   Validation  : a) Confirm search function is called by pressing [F5].
		 b) Confirm the setup items can be found.
		 c) Confirm change to page including the search result by pressing [Enter] on the search result.

11. [Fixes] Fix HostInterface On/Off test will drop in 4x times in UEFI Shell.
    Description : AMI USB Module AmiUsb2HcAsyncInterruptTransfer assign DevInfo which could not be deleted.
    Validation  : 1. Boot to UEFI shell.
                  2. Use IPMI Command to enable/disable host interface.
                     disable: ipmitool -H x.x.x.x -U ADMIN -P ADMIN raw 0x30 0xB5 0x01 0x00
                     enable: ipmitool -H x.x.x.x -U ADMIN -P ADMIN raw 0x30 0xB5 0x01 0x01
                  3. with 50 times on/off test. check host interface still exist by ifconfig -l.

12. [Enhancements] Update AmiTsePkg to AMI SA50230 Security Advisory to address CVE-2023-39539(7.5, High) security issue. 
    Description : a)Update AmiTsePkg to AMITSE_2_22_1292.1 and TSESources_2_22_1292.1.
                  b)This remediation represent a continuation of hardening effort on top of what was first performed in SA50216.
                    In order to completely harden AMI image parser, change for SA50216 and SA50230 should be integrated into projects.				  
                  c)The decoding algorithm for BMP, JPEG, PNG, GIF and PCX image formats were updated with additional checks for memory allocation, image format and data integrity checks, and boundary checks. 
                    BMP image processing has been synchronized with EDK2 code. 
                    For ESRT support, capsule data was checked for integrity, before processing the BMP image to display. 
    Validation  : a) Confirm that the BIOS refresh process is successful by the afu tool and OOB.
                  b) Run cburn on/off and confirm that the stress test can pass.

13. [Enhancements] For SA50218, updated AmiNetworkPkg to v48 to fix seven exploitable security issues in the TianoCore EDK2 NetworkPkg integrated into AptioV.
   Description: Guarkslab sighted seven exploitable security issue in the TianoCore EDK2 NetworkPkg which AMI intaegrates into AptioV. 
                EDK2 Sync with EDK2202311 Tag. The following list is a brief summary of the issues. 
                CVE-2023-45229(6.5, Medium), CVE-2023-45230(8.3, High), CVE-2023-45231(6.5, Medium), CVE-2023-45232(6.5, Medium), CVE-2023-45233(6.5, Medium), CVE-2023-45234(8.3, High), CVE-2023-45235(8.3, High).
   Validation: a) Confirm whether that network functions are normal.
               b) Confirm whether the network-related tests in the automation items pass.

14. [Fixes] Fix BIOS cannot go into setup menu after editing setup default value by AMI BCP tool.
    Description : Replace stack with pointer in SearchDatabase & SearchTextBox of setup keyword search function.
    Validation  : 1. Check BIOS can go into setup menu after editing setup default value by AMI BCP tool.
                  2. Confirm keyword search function works.

15. [Enhancements] Update AmiTsePkg for AMI SA50216 Security Advisory to address CVE-2023-39539(7.5, High) security issue.
    Description : An attacker can exploit this vulnerability by flashing firmware containing a 
                  maliciously-crafted logo image and booting this system with the altered image. 
                  On devices vulnerable to LogoFAIL, attackers can supply custom logos and thus 
                  exploit any vulnerabilities in the image parser. This weakness affects a 
                  variety of image formats including GIF, PNG, BMP and JPEG.
    Validation  : a) Confirm that the BIOS refresh process is successful by the afu tool and OOB.
                  b) Run cburn on/off and confirm that the stress test can pass.
				  
16. [Enhancements] Update SmiFlash module to SmiFlash_46 to AMI SA50209 Security Advisory to address CWE-20 (7.5, High) security issue. 
    Description : a)Update SmiFlash to SmiFlash_46.
                  b)This vulnerability holds the potential for exploitaion by an attacker with privilefed access, 
				    enabling therm to tamper with various memory regions, including SMRAM.				  
                  c)Modify SmiFlash to copy function block back to buffer in all flash operation SMI.
    Validation  : a) Confirm that the BIOS refresh process is successful by the afu tool and OOB.
                  b) Run cburn on/off and confirm that the stress test can pass.

17. [Fixes] Replace SMC PK/DB/DBR/DBT/KEK key instead of AMI testkey.
    Description : Need SMC key for ship.
	Validation  : a) Enter BIOS setup menu \Security\secureboot\Key management\Restore fatctory keys.
                  b) Verify the keys were installed. 

18. [Fixes] Fix Sum Test case 3043 "Error! All USB storage should be Disabled." issue.
    Description : The default value of the USB port is inconsistent with the platform.
	Validation  : Run SUMECO Test case 3043 and confirm that the result is passed.			  

19. [Fixes] Fix the problem that httpboot boot option cannot be created.
    Description : Reference AM5 SVN#375, AmiNetworkPkg_46 or above version will cause SmcHttpBoot failed in create Http Boot Option.
    Validation  : Make sure that the Http Boot Option can be successfully created.
				  
----------------------------------------------------------------------------------------------------------------------------------
BIOS : BIOS_X13SCW-F-1D02_20231207_1.1_STDsp.bin       Release Date  : 12/07/2023
BIOS Revision : 1.1                                    BIOS Engineer : David Chen
BIOS Checksum : 0x700d4bff                             Git Revision  : e9d306a5da28782d70f3cdd2168c26199962030d 
FW Global Version : 0001h                              ROT AntiRollback ID : N/A

BIOS Change :
 
1. [Enhancements][BKCWW41] Update Microcode 0xB0671 to 0x11F and 90672 to 0x34 per Intel Catlow BKC WW41.
   Description : Update Microcode 0xB0671 to 0x11F and 90672 to 0x34 per Intel Catlow BKC WW41.
   Validation  : a) Boot up system and check the MCU version.
                 b) Stress the system on off.
 
2. [Enhancements][WW39] Upgrade SPS Tool version and FW from MFit_SPS_E3_06.02.04.006.0_kn3 to MFit_SPS_E3_06.02.04.008.0_kn3.
   Description : Upgrade SPS Tool version and FW to MFit_SPS_E3_06.02.04.008.0_kn3.
   Validation  : Check system boot up and the ME version is correct or not.
 
3. [Fixes] Add when enable PCH PCIe swap function, and system reset the Early Video function can't be worked. (Default disable)
   Description : Enable PCH PCIe swap function, then system reset the PCIe root port need re-config.
   Validation  : a) Boot up system and check the Early Video can disaplay success.
                 b) Reboot system check the Early Video function can be worked.
 
4. [Enhancements] Fine tune get VPD data routines delay to avoid system trigger w/a and keep rebooting.
   Description : Added delay for get VPD data routines, E810 takes more time to retrieve data from VPD.
   Validation  : 1. Check SMBIOS type 40 to make sure VPD information is available.
                 2. For E810 reported as onboard LAN MAC system, check IPMI Web GUI for
                    onboard LAN MAC report correctly on both legacy and VPD ways.
                 3. Check LAN card w/o VPD to make sure system won't trigger system reboot w/a.
 
5. [Fixes] SMBIOS Type 04 CPU current speed set the non-turbo mode.
   Description : SMBIOS Type 04 CPU current speed set the non-turbo mode.
   Validation  : Check SMBIOS Type 04 current speed.
 
6. [Enhancements] "System Mode: Deployed" is not displayed as expected when enable Secure Boot.
   Description: redmine issues:26528 Check Secure Boot Function by OCR fail due to enable Secure Boot not showing as expected.   Expected_Secure_Enable_Setup = {'System Mode': 'Deployed', 'Secure Boot': 'Active'}
   Validation: a) enter BIOS menu -> Security Page -> Secure Boot.
               b) Setup Secure Boot: [Enabled]
               c) Setup Secure Boot Mode: [Standard]
               d) Confirm that "System Mode: Deployed" is displayed.
               e) Confirm whether run the BIOS case "Check Secure Boot Function by OCR" passed.
 
7. [Enhancements] Update the Intel MRC to 0C.00.6B.41 per Intel Catlow BKC WW41. (3384.00)
   Description: Based on the Intel BKC WW41 to update the MRC.
   Validation: a) boot up system check system without hang up.
               b) Stress system on / off test.
 
8. [Enhancements] Update the SUM OOB module to SMCOOBV2.00.21 to support Redfish replace the display name feature.
   Description: Update the SUM OOB module to SMCOOBV2.00.21 to support Redfish replace the display name feature.
   Validation: a) Boot up system and use Redfish tool to read the BIOS configure. (https://IP/redfish/v1/Systems/1/Bios)
               b) Check the BIOS config has include the "#xxxx" or not?
	           c) Update the BMC that has support remove the serial number feature.
	           d) Check the BIOS config already remove the "#xxxx" or not?
	            e) Setup system to stress the SUM ATT.
		   
9. [Enhancements] Enhance the FixedBootOrder module to let the FixedBootOrder function can show in the Redfish page.
   Description: Enhance the FixedBootOrder module to let the FixedBootOrder function can show in the Redfish page.
   Validation: a) Boot up system and use Redfish tool to read the BIOS configure. (https://IP/redfish/v1/Systems/1/Bios)
               b) Check the BIOS configure have "BootOption" items or not. (ex: BootOption_1 or UEFIBootOption_1)
	           c) Use Redfish tool to change the BootOption and see it can work or not.
	           d) Use the SUM tool to read and change the Boot Option setting.
	           e) Setup system to stress the SUM ATT.
 
10.[Enhancements] Add BIOS setup keyword search function.
   Description : Add BIOS setup keyword search function.
   Validation  : a) Confirm search function is called by pressing [F5].
                 b) Confirm the setup items can be found.
                 c) Confirm change to page including the search result by pressing [Enter] on the search result.
 
11.[Fixes] Fix ME status will enter recovery mode when flashing the BIOS via afuefix64.efi.
   Description : ME status will enter recovery mode when flashing the same of BIOS via afuefix64.efi.
   Validation  : a) Into Shell and execute flash.nsh to re-flash BIOS.
                 b) AC reset. Confirm ME firmware Current State is "Operational".
 
12. [Fixes][SmcUefiBootsOptionRedfish] Make sure to assign unique ID for NVME device.
    Description : Make sure to assign unique ID for NVME device.
    Validation : Check whether test of changing boot order through Redfish API can verified pass when installing NVME.
	
13. [Enhancements] Gray out "Preferred DNS server IP" and "Alternative DNS server IP".
    Description : Let user configure "Preferred DNS server IP" and "Alternative DNS server IP" only on BMC WebUI.
    Validation  : a) Boot into BIOS setup menu, go to IPMI page
                  b) Check the "Preferred DNS server IP" and "Alternative DNS server IP" were gray out.
 
14. [Enhancements] The Intel RSTe name was removed and all RAID solutions in this product were branded as Intel VROC.
    Description : The Intel RSTe name was removed and all RAID solutions in this product were branded as Intel VROC.
    Validation  : a) Enter the BIOS setup menu.
                  b) Go into Advanced then Confirm whether the "SATA And VROC Configuration" is correct.
                  c) Go into Advanced->SATA And VROC Configuration->SATA Mode Selection and pull down the menu to confirm whether "Intel VROC SATA RAID" is correct.
 
15. [Enhancements] Update Intel Gigabit Lan driver to 9.8.09 (IBA 27.6).
    Description : Driver Diag test Failed in Superdiag.
    Validation  : a) Execute SuperDiag tool and confirm whether driver diag testing is pass.
                  b) Execute the command "drvdiag -e" in UEFI shell to confirm test result passes.
 
16. [Enhancements] Fix System - PNP (disable and enable) with IO.
   Description : Com1 Com2 use the same DCNT, DSRS method casue the object conflict.
   Validation  : a) Confirm that there's no yellow ban on com after disabling/re-enabling the ISA con troller
                 b) Confirm HLK test can pass.
 
17. [Enhancements]  Implement Anti roll back for OOB that can not power on after roll back ME.
    Description :  Because update ME FW need global reset but BIOS V1.00 does not include this WA.
  	           So we need anti rollback to V1.00 avoid system can not power on(recovery way: plug in out PSU).
    Validation  : a) Power on with BIOS to V1.1
                  b) Roll back to V1.00 by OOB. expect will block the roll back BIOS action.
				  
18. [Enhancements] Trigger PERR SMBIOS Type 15 log will change the root port bridge to End-Device BDF.
    Description : Log Data need to catch the End-Device BDF when trigger PERR.
    Validation  : a) Use MCEON/AERON server to enabled the MCEON/AERON.
                  b) Plug in ASC-29320LPE card in the Riser Card.
                  c) Boot up system.
                  d) Trigger the SERR in the RU tool.
                  e) Check the SERR event log has show up in the IPMI SEL or not.

----------------------------------------------------------------------------------------------------------------------------------
BIOS : BIOS_X13SCW-F-1D02_20230901_1.0_STDsp.bin       Release Date  : 09/01/2023
BIOS Revision : 1.0                                    BIOS Engineer : David Chen
BIOS Checksum : 0xa8e84783                             Git Revision  : 50b0af416ebe3936d84ae4a06813849419ca5f2a 
FW Global Version : 0000h                              ROT AntiRollback ID : N/A

BIOS Change : 

1. First release.