Artesyn ATCA-8330 Installation and Use (April 2015) - Manual (Page 171)

Intelligent Peripheral Management Controller
ATCA-8330 Installation and Use (6806800S82B) 171
This function is implemented within the IPMI management controller. In case of the firmware
does not boot and the BMC watchdog expires, the IPMI management controller will swap the
boot banks before resetting the CPU. Thus, the blade can recover by booting from its
redundant boot flash, which contains the old active firmware image, which did work before
firmware upgrade.
Failsafe in general can recover from many scenarios:
 Missing or defect boot block
 Firmware image has a bad checksum
Figure 7-4 Failsafe Mechanism
Failsafe enabled?
Swap Boot Bank and
send a System
Firmware Hang event to
the ShMM
Increment Failsafe
count
Yes
Yes
Watchdog expired?
Watchdog running?
MainLoop
Yes
Failsafe count < 3?
Send a BMC
Watchdog event to
the ShMM
Yes
Payload Reset
Stop Watchdog
( Failsafe
Aborting)