> Source: [sk172446](https://support.checkpoint.com/results/sk/sk172446)

# sk172446 - LOM/iDRAC firmware installation fails on Quantum Smart-1 appliances

| Property | Value |
|----------|-------|
| Solution ID | sk172446 |
| Date Created | 2021-03-17 |
| Last Modified | 2022-04-20 |
| Technical Level | General |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |
| OS | Gaia |
| Platform | Smart-1 |

## Symptoms

- * LOM/iDRAC firmware installation fails on Quantum Smart-1 appliances.
* You see these messages in the */var/log/cp_idrac.log* file:

  ` in idrac_setup_usbnic`

  `Error:failed to read to iDRAC cmd output`
* lominfo output shows


  \[Expert@R80_40_MDS_A:0\]# lominfo


  Firmware Revision : 3.15


  IP Address : 0.0.0.0


  Error:failed to read to iDRAC cmd output


  Error:failed to read to iDRAC cmd output

  <br />

## Cause

During the installation of the firmware, an internal ssh connection is established between GAIA and LOM/iDRAC. A possible reason for installation failure is a connection issue due to an incorrect fingerprint.  

The LOM/iDRAC fingerprint in the file *known_hosts* is different from the current one for the LOM.

## Solution

<br />

To fix the issue:  

Scenario 1

1. In Expert mode, run this command to get an ssh key:  
   `> ssh-keyscan 169.254.0.1`  
   ...  
   *169.254.0.1 **ecdsa-sha2-nistp256** \<new-fingerprint\>
   ...*
2. Copy *\<new-fingerprint\>*.
3. In Clish, enter this command and update the *\<new-fingerprint\>* with the copied fingerprint:  
   `> add ssh hba ipv4-address 169.254.0.1 public-key access-mode standalone encoded-data <new-fingerprint>`
4. Install the firmware again.

For more upgrade information, see [**sk122914**](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk122914&partition=Basic&product=Quantum).

Scenario 2  

Check NIC state  

# **cpidrac --get_external_nic_state**   

Example  

\[Expert@R80_40_MDS_A:0\]# **cpidrac --get_external_nic_state**   
External NIC status:disabled  
\[Expert@R80_40_MDS_A:0\]#  

To enable   

# **cpidrac --set_external_nic_state=enable**   

Example  

\[Expert@R80_40_MDS_A:0\]# **cpidrac --set_external_nic_state=enable**   
\[Expert@R80_40_MDS_A:0\]# **cpidrac --set_external_nic_state=enableget_external_nic_state**   
External NIC status:enabled  
\[Expert@R80_40_MDS_A:0\]# **lominfo**   
Firmware Revision : 3.15  
IP Address : 0.0.0.0  
IPv6 Status : Disabled  
\[Expert@R80_40_MDS_A:0\]#

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content