Firmware update on Smart Connect UPS via IT Expert

[A360]

Is there really no way to update the firmware on these devices via IT Expert?  If so, what a waste for the IT Expert license and these devices.  It's ridiculous that an ethernet connected device can be updated directly from the Smart Connect portal but not the IT Expert portal.  What is the difference between them if you have provided it can be done in the Smart Connect portal.  It doesn't make any sense.  Please fix ASAP and allow IT Expert to update the firmware on Smart Connected UPS'.

[Teken]

Given you have provided absolutely no information as to what specific model APC UPS you’re talking about?!? 🤦‍♂️

I’ll simply put this out there for the benefit of others.

UPS Firmware: This process must be done while the hardware is under warranty live over the phone with APC Technical Support.

If the hardware is not under warranty you risk bricking a perfectly working unit! ☝️ Regardless of in warranty or out of warranty the firmware must be done locally and physically via the RS232 (Serial) to RJ50 proprietary cable supplied by APC or one you’ve made and validated as working.

All of this assumes you have met all requirements and prerequisites to upgrade the UPS Firmware as outlined by this APC Resource Link:

https://www.apc.com/us/en/faqs/FA164737/

If you have not met all requirements - Stop!

If we ignore all of the above for now one of the key things to validate is what firmware is on the target machine now.

Why?!?

Because depending upon the current version firmware updates are disabled on the Ethernet port(s) to protect the system from the last few exploits.

In later firmware releases the ability to enable / disable the serial connections have been implemented: USB, Serial, NMC

As an aside, Smart Connect devices require smart communications to be enabled before you may update the UPS firmware. Older devices this was a simple toggle switch on the rear. On newer devices this must be done via the LCD Menu.

At the end of the day nobody serious would be updating any APC UPS via network regardless if it’s over the LAN, especially through the WAN! 🤦‍♂️

Even when all requirements have been met you have a better than 50% chance of bricking a perfectly working system.

You need only read this forum and others along with a simple Google search! A UPS firmware update is the highest risk and expensive option endeavour you’ll ever undertake in the power management space besides high voltage dangers.

Questions Ask . . . 👍

[dmarchewka]

It's only updating the Smart Connect NMC, not the UPS.  It can be done on the Smart Connect portal, but on on the IT Expert platform.  Major oversite on APC.  On the Smart Connect portal, it shows up as a critical alert, so it's not a novel or haphazard patch.  It's a security patch and published for a reason.  Updating NMC firmware from IT Expert is also seen a critical endeavor, so I am not sure what you are talking about.  I agree, updating the UPS firmware should not be done unless there is a valid reason.  However, updating NMC firmware over LAN or WAN is perfectly fine.  I should have clarified my subject, but if you have worked in either the Smart Connect or IT Expert platform, you would be aware there is no way to push a UPS firmware update from either of these platforms.  The only firmware update that is supported is for the NMC.

[Teken]

Not sure what you’re talking about because your reply counters what you state in the beginning and at the end?!?

Smart Connect allows and supports upgrading the UPS Firmware. This also updates the Smart Connect dedicated RJ45 Ethernet port.

As such this network interface will be updated when the UPS Firmware is installed.

An external / embedded NMC such as the following AP9630, 31, 35, AP9640, 41, etc and (Not) related to the Smart Connect interface absolutely can be updated via the LAN / WAN / Locally.

Regardless of all the above any firmware should be completed on site! Anyone who has been working on any APC UPS for a week in the field or has read the millions of threads affirms the same.

As this is a high risk procedure that requires boots on the ground in front of the target device.