# EDK2: new support for ASRock Rack ALTRAD8UD-1L2T / ALTRAD8UD2-1L2Q and build improvements for Mt Jade and COM-HPC-ALT **URL:** \ **Category:** General Discussion\ **Tags:** ampere, ampere-altra, edk2\ **Created:** [June 12, 2025, 5:21pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969 "2025-06-12T17:21:59Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 12, 2025, 5:22pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/1 "2025-06-12T17:22:00Z")
Last night I merged a large set of changes into TianoCore’s edk2-platforms repo. Among them were commits to add support for ASRock Rack’s ALTRAD8UD-1L2T and ALTRAD8UD2-1L2Q boards, and improvements to the new build script, buildfw.sh which affect builds of firmware for Ampere’s Mt Jade and ADLINK’s COM-HPC-ALT (AADP, AADK, AADR) platforms too. I added buildfw.sh because I didn’t find the scripts in the edk2-ampere-tools repo to be very user-friendly. buildfw.sh can be used whether you have access to the TF-A (ATF) binaries or not. If you don’t have them, you’ll see the following message at the end of the build: > Warning: the TF-A (Trusted Firmware) binary wasn’t found. Only the UEFI firmware was built. > Done. Firmware is in Build/\/. You can use this firmware by reading out the existing BIOS/UEFI SPI-NOR, dd’ing the new firmware into the correct location and then writing the file back to the EEPROM. Another optional binary is the Renesas USB controller firmware, K2026090.mem. It’s freely available, but if you choose not to use it you’ll see the following message at the end of the build: > Warning: the Renesas UPD720202 USB3 Controller firmware file $HOME/src/uefi/K2026090.mem was not found. > The firmware was built without the firmware. The USB3 controller will not work unless the firmware is loaded in the OS. > See edk2-platforms/Drivers/OptionRomPkg/RenesasFirmwarePD720202/README.md for details on how to obtain it. To build the firmware, run buildfw.sh: ```auto ./edk2-platforms/Platform/Ampere/buildfw.sh --help Usage: ./edk2-platforms/Platform/Ampere/buildfw.sh [options] Options: -b , --build Specify the build type: DEBUG or RELEASE -t , --toolchain Specify the toolchain to use: GCC or CLANG -m , --manufacturer Specify platform manufacturer (e.g. Ampere) -p , --platform Specify platform to build (e.g. Jade) -l , --linuxboot Build LinuxBoot firmware instead of full EDK2 with UEFI Shell, specifying path to flashkernel -f, --flash Copy firmware to BMC and flash firmware (keeping EFI variables and NVPARAMs) after building -F, --full-flash Copy firmware to BMC and flash full EEPROM (resetting EFI variables and NVPARAMs) after building Note: flash options require bmc.sh file with env vars BMC_HOST, BMC_USER and BMC_PASS defined Available manufacturers: ADLINK Ampere ASRockRack Available platforms: ADLINK -> ComHpcAlt Ampere -> Jade ASRockRack -> Altra1L2Q ASRockRack -> Altra1L2T Environment Variables: SECUREBOOT_DIR - directory to store SecureBoot keys, certs etc. USE_EXISTING_SB_KEYS - use existing Secure Boot Platform and Update keys DOWNLOAD_MS_SB_KEYS - force re-download of Microsoft Secure Boot KEK and DB certificates CERT_PASSWORD - password to use when generating Platform and Update Keys and certificates defaults to "password" if not specified. EDK2_SECURE_BOOT_ENABLE (TRUE) EDK2_NETWORK_ENABLE (TRUE) EDK2_INCLUDE_TFTP_COMMAND (TRUE) EDK2_NETWORK_IP6_ENABLE (TRUE) EDK2_NETWORK_ALLOW_HTTP_CONNECTIONS (FALSE) EDK2_NETWORK_TLS_ENABLE (TRUE) EDK2_REDFISH_ENABLE (TRUE) EDK2_PERFORMANCE_MEASUREMENT_ENABLE (FALSE) EDK2_TPM2_ENABLE (TRUE) EDK2_HEAP_GUARD_ENABLE (FALSE) EDK2_X86_EMULATOR_ENABLE (TRUE) EDK2_SHELL_ENABLE (TRUE) ``` Other improvements are the build-time generation of ./edk2-platforms/Platform/\/\Pkg/Capsule/SystemFirmwareDescriptor/HostFwInfo.h - this contains the firmware version generated from the current date combined with the build number (which is stored in the file `.fw_bld`). This means the version is now monotonically increasing and the Linux `fwupdmgr` tool can be used to initiate the firmware upgrade by running `fwupdmgr install `. Run `fwupdmgr get-details ` to see information about the currently installed firmware and the firmware in the file specified. I’ve also changed the way Secure Boot and Capsule updates are done: instead of using test keys from e.g. edk2/BaseTools/Source/Python/Pkcs7Sign/, I added edk2-platforms/Platform/Ampere/Tools/GenerateSecureBootKeys.sh which generates fresh keys during the build and downloads the set of Microsoft certificates for Windows. Set `USE_EXISTING_SB_KEYS` to prevent that automatic generation process and use existing keys in the `secureboot_objects` directory. ---
**Author:** ![vikingforties](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/vikingforties/32/1192_2.png) [@vikingforties](https://community.amperecomputing.com/u/vikingforties)\ **Post date:** [June 13, 2025, 5:27am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/2 "2025-06-13T05:27:00Z")
@cltran any of this helpful to you as well? ---
**Author:** ![cltran](https://avatars.discourse-cdn.com/v4/letter/c/e480ec/32.png) [@cltran](https://community.amperecomputing.com/u/cltran)\ **Post date:** [June 13, 2025, 7:03am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/3 "2025-06-13T07:03:33Z")
Actually, I was the guy who participated into the review and granted approval for Rebecca’s PR so I know what the changes are :D. I am reviewing buildfw.sh again to make sure that other platforms can benefit from that script with minimal changes required, or we can improve it for wider usage. As you can see, the script can only builds EDK2 firmware for “Available platforms” while comparing with edk2-ampere-tools/Makefile, it supports building firmware for any board if the package follows naming conventions in Platform/Ampere package (like JadePkg). ---
**Author:** ![hrw](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/hrw/32/31_2.png) [@hrw](https://community.amperecomputing.com/u/hrw)\ **Post date:** [June 13, 2025, 9:58am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/4 "2025-06-13T09:58:35Z")
NICE! I not booted ASRockRack Altra1L2T yet (some parts did not arrived yet) but I am going to use this for sure. How much does it differ from whatever is provided by AsrockRack? ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 13, 2025, 2:30pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/5 "2025-06-13T14:30:13Z")
The script doesn’t only support the listed platforms! I just added that because the script is in Platform/Ampere but also supports Platform/ADLINK and Platform/ASRockRack which probably isn’t obvious. It supports any platform which follows the naming conventions. ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 13, 2025, 2:31pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/6 "2025-06-13T14:31:47Z")
@hrw ASRock Rack provides firmware that uses AMI Aptio which is obviously proprietary. That’s the big difference between them. ---
**Author:** ![cltran](https://avatars.discourse-cdn.com/v4/letter/c/e480ec/32.png) [@cltran](https://community.amperecomputing.com/u/cltran)\ **Post date:** [June 13, 2025, 2:54pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/7 "2025-06-13T14:54:43Z")
Oh. I thought it is not. Thanks for pointing it out! Let me see if I can adapt the script for other boards and get rid of using ampere-edk2-tools. By the way, regarding the new feature to store tiny OS in UEFI\_EXTRA region, we need to support to build LINUXBOOT\_IN\_UEFI\_EXTRA firmware with the script. ---
**Author:** ![sevo](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@sevo](https://community.amperecomputing.com/u/sevo)\ **Post date:** [June 14, 2025, 5:20pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/8 "2025-06-14T17:20:19Z")
Thank you for your hard work on this! I’m excited to try this out (and hopefully not screw up and brick my ASRock motherboard 😅.) Excited to hopefully get gpu oproms working on my workstation. ---
**Author:** ![sevo](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@sevo](https://community.amperecomputing.com/u/sevo)\ **Post date:** [June 15, 2025, 12:51am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/9 "2025-06-15T00:51:39Z")
One question… should I expect any weird interactions with the ASRockRack OpenBMC when running EDK2 firmware? ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 15, 2025, 1:25am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/10 "2025-06-15T01:25:28Z")
I don’t _think_ there’s anything like that, but it’s possible I’ve missed it. ---
**Author:** ![hrw](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/hrw/32/31_2.png) [@hrw](https://community.amperecomputing.com/u/hrw)\ **Post date:** [June 26, 2025, 7:33am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/11 "2025-06-26T07:33:23Z")
Trying to build it reminded me how I dislike EDK2 being written by MS Windows programmers… ```auto make: Leaving directory '/home/marcin/devel/linaro/sbsa-qemu/code/edk2/BaseTools' + . /home/marcin/devel/linaro/sbsa-qemu/code/edk2-platforms/Platform/Ampere/Tools/fw_ver.sh UPDATE ++ touch $'.fw_bld\r' +++ cat .fw_bld cat: .fw_bld: No such file or directory ++ BUILD=$'\r' ``` \r everywhere… ---
**Author:** ![hrw](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/hrw/32/31_2.png) [@hrw](https://community.amperecomputing.com/u/hrw)\ **Post date:** [June 26, 2025, 7:37am UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/12 "2025-06-26T07:37:01Z")
A few `dos2unix` calls later it built. Now will hunt for TF-A binaries. EDIT: ALTRAD8UD-1L2T 2.06 firmware is 32MB file. EDK2 binary is 10MB file. Now, which parts of 2.06 firmware I should take as SCP and TF-A? Or should I follow edk2-ampere-tools/README.md and write to [developer@amperecomputing.com](mailto:developer@amperecomputing.com) instead? ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 26, 2025, 1:56pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/13 "2025-06-26T13:56:23Z")
> Or should I follow edk2-ampere-tools/README.md and write to [developer@amperecomputing.com](mailto:developer@amperecomputing.com) instead? I tried emailing them in early 2023 and got no reply. > Now, which parts of 2.06 firmware I should take as SCP and TF-A? Try searching for ‘layout’ in the git log of edk2-ampere-tools. ---
**Author:** ![hrw](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/hrw/32/31_2.png) [@hrw](https://community.amperecomputing.com/u/hrw)\ **Post date:** [June 26, 2025, 2:58pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/14 "2025-06-26T14:58:13Z")
OK ```auto The new SPI-NOR layout: SPI-NOR Absolute ADDRESS Size Description 0x000.0000 0x0007.FFFF 512 KB UEFI ENV 0x008.0000 0x000F.FFFF 512 KB UEFI ENV (backup) 0x010.0000 0x0010.FFFF 64 KB NV-parameter (backup) 0x011.0000 0x0011.FFFF 64 KB NV-parameter 0x012.0000 0x0012.FFFF 64 KB Failsafe status 0x013.0000 0x0015.FFFF 192 KB BERT / Crash dump 0x016.0000 0x001E.FFFF 512 KB DDR parameters 0x01F.0000 0x002E.FFFF 1 MB Secure variable 0x02F.0000 0x003E.FFFF 1 MB Custom MM SP 0x03F.0000 0x003F.FFFF 64 KB Reserved 0x040.0000 0x004F.FFFF 1 MB ATF BL1, BL2, BL31, BL32 0x050.0000 0x005E.FFFF 960 KB ATF reserved 0x05F.0000 0x005F.FFFF 64 KB Board Settings 0x060.0000 0x01FF.FFFF 26 MB UEFI ``` 0x400000 is 1MB part with TF-A. The other part required by the `buildfw.sh` script is SCP. Which is used by the other script (`edk2-build.sh` in edk2-ampere-tools). I suspect that it is 0x5F0000 part called ‘Board Settings’ as space for SCP is 256KB. ---
**Author:** ![sevo](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@sevo](https://community.amperecomputing.com/u/sevo)\ **Post date:** [June 26, 2025, 7:01pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/15 "2025-06-26T19:01:48Z")
For the ASRock ALTRA8UD8-1L2T, the 10 MB EDK2 UEFI image without TF-A goes at address 0x600000 in the EEPROM. I used dd to write it into a stock bios update image (which is a 32 MB image with the TF-A at 0x400000 and the AMI UEFI starts at 0x600000 with what is probably a signing certificate followed by a UEFI firmware volume), in my case I used the 3.06 beta image from ASRock. I run the 3.06 beta OpenBMC and was on the ASRock stock 3.06 beta UEFI. eg, dd if=edk2-uefi.bin of=stock-bios.bin bs=1MB seek=6 conv=notrunc I copied the now-customized 32 MB EEPROM image to /tmp in the BMC, and ran ampere\_flash\_bios.sh on the BMC. By default the script only copies the passed image starting at 0x400000 to EEPROM, leaving the variable storage, etc from 0x0-0x3fffff untouched. ADDENDUM: You would get the same result functional result starting with a zero’d 32 MB image, copying the stock firmware segment from 0x400000-0x5fffff (TF-A stuff), and putting the EDK2 image starting at 0x600000. ---
**Author:** ![sevo](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@sevo](https://community.amperecomputing.com/u/sevo)\ **Post date:** [June 26, 2025, 7:19pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/16 "2025-06-26T19:19:47Z")
I should also note that in my testing, I found editing Altra1L2T.dsc to change the default video resolution to 800x600 instead of 0x0 (auto maximum) made video output on the splash screen and the UEFI Setup more consistent and useable between the AST (BMC KVM), the serial console, and my Nvidia RTX 3060. And if you use Intel Arc graphics (tested with A380) a) there is no UEFI video output even with the X86 firmware emulator enabled, and b) you have to enable Resizable BAR in EDK2, which is a one-line addition in the same .dsc file, added after some of the other Pcie Pcd settings gEfiMdeModulePkgTokenSpaceGuid.PcdPcieResizableBarSupport|TRUE Also, not sure if it is a race condition or a soft versus hard reset issue with the Nvidia 3060, but some boots I don’t get UEFI video output on the 3060. If I run “reconnect -r” in the UEFI shell, the 3060 will then start to output video. For now, my default boot entry is the shell, and my startup.nsh runs the reconnect, followed by my default boot loader. ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 27, 2025, 3:20pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/17 "2025-06-27T15:20:34Z")
> [@hrw](#): > > I suspect that it is 0x5F0000 part called ‘Board Settings’ as space for SCP is 256KB. Nope, the SCP code is stored in a separate EEPROM. On the BMC, the `/usr/sbin/ampere_firmware_upgrade.sh` script updates it, using the `ampere_eeprom_prog.sh` helper. ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 27, 2025, 3:27pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/18 "2025-06-27T15:27:58Z")
> [@hrw](#): > > \r everywhere… Hmm, shell scripts are exempt from the DOS line ending rules, and I just checked and fw\_ver.sh doesn’t have any CRs - only LFs. ---
**Author:** ![bdherouville](https://avatars.discourse-cdn.com/v4/letter/b/e9c0ed/32.png) [@bdherouville](https://community.amperecomputing.com/u/bdherouville)\ **Post date:** [June 30, 2025, 2:22pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/19 "2025-06-30T14:22:51Z")
Hi, Do you have some guidance to build the firmware from the begining for a ALTRAD8UD-1L2T ? I end with error 000E: File/directory not found in workspace Platform/Ampere/JadePkg/root.cer.gEfiSecurityPkgTokenSpaceGuid.PcdPkcs7CertBuffer.inc is not found in packages path: ---
**Author:** ![bexcran](https://yyz1.discourse-cdn.com/flex027/user_avatar/community.amperecomputing.com/bexcran/32/188_2.png) [@bexcran](https://community.amperecomputing.com/u/bexcran)\ **Post date:** [June 30, 2025, 2:49pm UTC](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969/20 "2025-06-30T14:49:15Z")
@bdherouville That file _should_ have been created by the build script, by running Platform/Ampere/Tools/GenerateSecureBootKeys.sh. Could you share the full build output please? If you’re not aware of it, you can use the `script` command - e.g. `script -c "buildfw.sh -m ASRockRack -p Altra1L2T -b RELEASE" buildoutput.txt` [Next page](https://community.amperecomputing.com/t/edk2-new-support-for-asrock-rack-altrad8ud-1l2t-altrad8ud2-1l2q-and-build-improvements-for-mt-jade-and-com-hpc-alt/2969.md?page=2)