HP Restricting Access to Server Firmware Updates

HP has announced that they will only provide firmware updates to customers with a valid warranty, Care Pack or support agreement. HP says:

We know this is a change from how we’ve done business in the past; however, this aligns with industry best practices and is the right decision for our customers and partners.

Our customers under warranty or support coverage will not need to pay for firmware access, and we are in no way trying to force customers into purchasing extended coverage.  That is, and always will be, a customer’s choice.

Two items concern me here. First is “this aligns with industry best practices”, second is “…the right decision for our customers…”.

Good for Customers?

HP describes their firmware as “valuable intellectual property.” But how many customers actually see it that way? The firmware is an integral component of the hardware – one cannot exist without the other. I can’t use HP firmware in non-HP systems, nor can I operate HP servers without HP firmware. But I don’t really get anything out of the firmware. I get my system up and running, and then hopefully the BIOS/UEFI just gets the hell out of the way.

Aside: One of the best things about virtualisation is that OS reboots now don’t usually mean an interminable wait for the BIOS to do nothing of any apparent value
We resent having to update firmware, especially with HP systems, where every individual hardware component seems to have its own firmware, down to each individual power supply. Until recently, you would be faced with multiple rounds of reboots to do all the updates, and you couldn’t really show any true business value from it. Fixing bugs that shouldn’t have shipped doesn’t count as business value.

So now when we go to download updates we are going to have to ensure that those systems are under warranty, or support. What happens when those systems are under warranty, but HP’s system doesn’t agree? What about all the effort associated with making sure that the support lists are 100% accurate? What about when a reseller made a typo when updating their records? This is a non-zero cost to the business, but there is no value here – how is this the “right decision for customers”? What do we gain as customers?

Industry “Best Practices”

Defining “best practices” is tricky. Let’s look at what “standard practices” might be, by checking out some other major suppliers:

  1. IBM^WLenovo: I tried to download firmware for the x3250 M4, and got this
    IBM Entitlement ValidationSo they’re obviously going through the same process as HP. I didn’t continue past this point, so I’m not sure if it would have let me download the packages.
  2. Dell: I went to Dell’s website, and tried to download a BIOS package for a Dell R620. No problems, no need to login, nothing – download was easy to find, and started streaming down.
  3. Cisco: Cisco’s been cracking down on IOS downloads for a while now. Although I’m a CCIE, I don’t get access to any downloads. I don’t even get access to the Bug Toolkit, unless I have a support contract. But I just tried downloading “Software for the UCS B-Series blade server products“, and I was allowed to, once I had logged in. That account has no support contracts attached to it, so they’re tracking downloads, but not stopping me. Yes, I was surprised by this too.
  4. HP Networking: Lifetime warranty – HP Networking promises free software upgrades for as long as you own the product. They make quite a song and dance about this policy even.

So why are they doing it?

It’s all about the 3rd-party support providers. Joe Blow can set up a support organisation for HP servers, and not bother going through official partner accreditation. Buy a few hardware spares, build up your own internal knowledge-base, and just grab the firmware from the HP site. Provides the support that most customers need, at a lower cost than official partners or HP direct.

Now those 3rd-parties will need to keep one example of each system nominally under support, so they can get updates, then re-distribute them. Presumably we’ll see HP crack down harder on those organisations though, as they’ll make sure their EULAs include language about “these updates are only to be used on systems under support by HP, blah blah”.

It’s not much different to Cisco’s crackdowns on grey-market support providers. That led to much more onerous Cisco licensing procedures…hopefully server vendors don’t start something like that.

Do what you must, but be honest

HP can do as they please. They can charge whatever they like, and make us jump through all manner of hoops to download updates. But please don’t insult us by telling us that it’s the “right decision for customers.” Be honest about your motives. This decision will mean extra work and hassle for already-stressed system administrators, and it won’t give them a single thing in return. Unless maybe it’s to give sysadmins another reason when they’re telling the boss why that old G5 server needs replacing?

7 Responses to HP Restricting Access to Server Firmware Updates

  1. Gallifreyan February 11, 2014 at 8:27 am #

    Good write-up. IBM does let you download firmware for at least two currently-available x86 standard servers; I tried this over the weekend. Like Cisco they require registration and email confirmation, but like Cisco’s server platforms, they do not require entitlement (so far).

    I suspect they are going to require entitlement for their higher end non-ISS gear, but at least so far, they allow relatively open access to the servers that compete with ProLiant, Cisco C-Series, Dell PowerEdge R-Series, and Fujitsu. If HP goes through with this, they’ll be joining the Oracle category in terms of baseline ISS system maintenance availability.


    My writeup on the topic: http://rsts11.wordpress.com/2014/02/06/planned-obsolescence-is-not-green-rsts11-ciscoucs-hp-proliant/

  2. Nick Lowe February 13, 2014 at 5:50 pm #

    HP are, of course, free to do this as are we not to purchase their server hardware from now on. For me, it’s very simple, Dell will get the business.

  3. Dmitry Semenov February 20, 2014 at 1:42 pm #

    I’m not going to buy any HP products from now on for our company or any of our customers. We’re software development company. We will use dell/supermicro from now on. The more hassle they do – the less clients they have. We already migrating MOST of our clients to Amazon AWS and with such stupid move from HP – we will have no reason to buy physical hardware from HP if we can spend less time provisioning systems through Amazon. Stupid, stupid move HP

  4. Beau January 27, 2016 at 9:43 am #

    I have been using HP for many years, and this has really soured me on them as my solutions provider. This is just a pretty nasty business practice having nothing to do with adding value to the customer and everything to do with adding value to HP. As a consumer I paid for perpetual ownership – if they sell me a product that is defective and requires updates, then they need to do provide said updates for as long as I own the product. I have never know of and HP BIOS update that “enhances” or improves the product, all they do is fix crap. Right now we are running a total 48 blades and 18 rack mount systems – all of which are coming up for replacement next year, guess we will be considering Dell as an alternative. And perhaps a class-action lawsuit is in order. Could you imagine if car makers tried this kind of crap on a defect that they built into the car?


  1. Changes regarding HP ProLiant Server firmware access | vcloudnine.de - February 9, 2014

    […] like to link to Lindsay Hills blog. He wrote a great article about the restricted access to the server […]

  2. HP to begin charging for firmware updates and service packs for servers – ZDNet | Web Design Egypt - February 10, 2014

    […] as networking consultant Lindsay Hill points out in a recent blog post, IBM also requires “entitlement validation” for “select software products and […]

  3. Továbbra is szabadon elérhetők firmware-frissítések a HP ProLiant szerverekhez.. | IPR-Insights License Consulting - February 18, 2014

    […] A téma iránt részletesen érdeklődők itt találják a HP által közzétett közleményt és a kapcsolódó FAQ-t, valamint a szaksajtóban megjelent egy-egy magyar és angol nyelvű cikket, valamint egy véleményt. […]