OCP_2_0_Group_4

DSSD_20_Rollback_Prevention_Test_Case.py

This script will run the following tests:

  1. When attempting to perform a firmware update on a secure drive using a validly signed firmware image that has a security version number equal to the current security version number the commit action step succeeds, the secured drive is updated with the new firmware, and the current security version number is unchanged.

  2. When attempting to perform a firmware update on a secure drive using a validly signed firmware image that has a security version number greater than the current security version number, the commit action step succeeds, the secured drive is updated with the new firmware, and the current security version number reported in the SMART Health Information Extended log page is the new security version number.

  3. When attempting to perform a firmware update on a secure drive using a validly signed firmware image that has a security version number less than the current security version number, the commit action step fails, and the secured drive is not updated with the new firmware.

  4. That the security version number is not the same as the firmware version.

Pass/Fail: Script passes if all tests pass

Open Compute Project Datacenter NVMe SSD Spec v2.0 requirements referenced by this script:

SEC-1/3/5/9, FWUP-8

DSSD_20_Secured_Drive_Verification_Test_Case.py

This script will run the following tests:

  1. When a firmware update is performed on a secured drive using a firmware image signed with a new key that has previously been provisioned, e., PK2, the firmware update is successful, the new firmware is committed and activated.

  2. When a firmware update is performed on a secured drive executing firmware signed with PK2 using a firmware image signed with PK1, the firmware update fails, and the drive is unchanged.

Pass/Fail: Script passes if all tests pass

Open Compute Project Datacenter NVMe SSD Spec v2.5 requirements referenced by this script:

SEC-1/3/5/9, FWUP-8

DSSD_20_Unsecured_Drive_Verification_Test_Case.py

This script will run the following tests:

  1. When attempting to perform a firmware update on an unsecured drive using a valid and signed firmware image, the firmware update fails, and the drive firmware is unchanged.

  2. When attempting to perform a firmware update using a valid unsigned firmware image, the firmware update succeeds, and the drive firmware is updated to the new unsigned firmware image.

Pass/Fail: Script passes if all tests pass

Open Compute Project Datacenter NVMe SSD Spec v2.0 requirements referenced by this script:

SEC-1/3/5/9, FWUP-8