Surface Pro 7 PXE issue using ZCM 23.4

I recently upgrade to ZCM 23.4 from 23.3. BIOS and UEFI imaging work on all machines except for Surface Pro 7's. The Surface Pro 7 is set to secure boot using Microsoft & 3rd Party CAs.

When PXE booting the Surface Pro 7, I see:

Start PXE over IPv4
Static IP address is 172.21.0.45
Server IP address is 172.20.80.19
NBP filename is efi/x86_64/nfnbpx64.efi
NBP filesize is 955808 Bytes
Downloading NBP file...

NBP file downloaded successfully.
Failed to find fs:  Unsupported
Fetching Netboot Image

And this is where it sits. It never moves on.

We are using ENGL Imaging Toolkit 12.0.4 with our WIM imaging for additional information.

Any ideas what would cause this or fix it?

  • Hi knellertr

    first try to disable secure boot and after that, reduce the video ram settings in bios if avalaible. After Imaging you can revert the settings.

    Also you have to upgrade initrd from ENGL. You need the modified initrd for 23.4 from ENGL.

  • Try what Aaron suggested, but if that does not help you may need to contact ENGL Support.

    NBP filename is efi/x86_64/nfnbpx64.efi is an ENGL file not an OpenText/ZENworks file.

    Perhaps setup a Test Zone w/23.4 w/o ENGL and test for any native ZENworks issues to help confirm nothing on the ZENworks side.  Normally the 3rd Party CA stuff should be enough.

    --

    On a related note....Normally WinPE needs to be re-uploaded after major upgrades....I'm not sure how that impacts ENGL.

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • I tried the suggestions but they made no change.

    I already contacted ENGL, too, and they eluded to it possibly being a PXE stack issue.

    The WinPE was updated to the latest, but I had to roll back the ADK/WinPE to the Win10 2004 in order to get BIOS imaging working. So, the WinPE has been re-uploaded.

  • I have copied the TFTP folder from my new 23.4 ZENworks appliance and put it on my imaging server. I tested with an EFI machine and there are no traces of ENGL in the mix. The EFI loaded ZENworks Preboot Services Menu as expected and then into the imaging environment just fine.

    The Surface Pro 7 still stops at "Fetching Netboot Image" but it doesn't say the "Failed to find fs:  Unsupported" anymore.

    Start PXE over IPv4
    Static IP address is 172.21.0.45
    Server IP address is 172.20.80.19
    NBP filename is efi/x86_64/nfnbpx64.efi
    NBP filesize is 955808 Bytes
    Downloading NBP file...

    NBP file downloaded successfully.
    Fetching Netboot Image

  • NFNBPX64.efi "IS" an  ENGL file.  

    w/o ENGL you have...

    ./var/opt/microfocus/zenworks/common/tftp/efi/ia32/mfnbpia32.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/ia32/mfgrubia32.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/ia32/nvlgrubia32.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/ia32/nvlnbpia32.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/microsoft/boot/bootmgfw.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/x86_64/nvlgrubx64.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/x86_64/grub.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/x86_64/mfgrubx64.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/x86_64/nvlnbpx64.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/x86_64/mfnbpx64.efi
    ./var/opt/microfocus/zenworks/common/tftp/efi/x86_64/bootx64.efi

    --

    So presumably ENGL's NFNBPX64.efi is supposed to do something after it downloads and fails.

    It could be a signing issue.....that is one issue we had with our code for a while, it would not work with Secure Boot on some systems.  It would download and not execute.

    You may just want to turn off Proxy DHCP on your Existing server for a bit and Turn it on for the Fresh Appliance.....But If the appliance is in the same "Zone"....your Imaging files may have replicated back over not sure if that is why/how the ENGL file is still loading.  Maybe ENGL made some other changes that ignore out folder....I really don't know much about how ENGL injects into our Imaging system....

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • Apologies, I copied the message above. Actual text using 23.4 TFTP (without ENGL) on Surface Pro 7 is:

    >>Start PXE over IPv4.
      Station IP address is 172.21.0.33

      Server IP address is 172.20.80.19
      NBP filename is efi/x86_64/mfnbpx64.efi
      NBP file size is 955888 Bytes
    Downloading NBP file...

      NBP file downloaded successfully.
    Failed to find fs:  Unsupported
    Fetching Netboot Image

    I have TFTP replication turned off and just one imaging satellite server. The listing you have above is exactly what I have copied from my 23.4 appliance.

     Directory of C:\Program Files (x86)\Novell\ZENworks\share\tftp\efi

    01/30/2024  07:32 AM    <DIR>          .
    01/30/2024  07:32 AM    <DIR>          ..
    01/30/2024  07:32 AM    <DIR>          ia32
    01/30/2024  07:32 AM    <DIR>          microsoft
    01/30/2024  07:32 AM             1,770 settings.txt
    01/30/2024  07:32 AM    <DIR>          x86_64
                   1 File(s)          1,770 bytes

     Directory of C:\Program Files (x86)\Novell\ZENworks\share\tftp\efi\ia32

    01/30/2024  07:32 AM    <DIR>          .
    01/30/2024  07:32 AM    <DIR>          ..
    01/30/2024  07:32 AM            77,936 mfgrubia32.efi
    01/30/2024  07:32 AM           761,872 mfnbpia32.efi
    01/30/2024  07:32 AM            75,840 nvlgrubia32.efi
    01/30/2024  07:32 AM         1,125,976 nvlnbpia32.efi
    01/30/2024  07:32 AM             2,756 pxemenu.txt
                   5 File(s)      2,044,380 bytes

     Directory of C:\Program Files (x86)\Novell\ZENworks\share\tftp\efi\microsoft

    01/30/2024  07:32 AM    <DIR>          .
    01/30/2024  07:32 AM    <DIR>          ..
    01/30/2024  07:32 AM    <DIR>          boot
                   0 File(s)              0 bytes

     Directory of C:\Program Files (x86)\Novell\ZENworks\share\tftp\efi\microsoft\boot

    01/30/2024  07:32 AM    <DIR>          .
    01/30/2024  07:32 AM    <DIR>          ..
    01/30/2024  07:32 AM            12,288 bcd
                   1 File(s)         12,288 bytes

     Directory of C:\Program Files (x86)\Novell\ZENworks\share\tftp\efi\x86_64

    01/30/2024  07:32 AM    <DIR>          .
    01/30/2024  07:32 AM    <DIR>          ..
    01/30/2024  07:32 AM               363 autoyast.conf
    01/30/2024  07:32 AM         1,226,416 bootx64.efi
    01/30/2024  07:32 AM               498 dell-dtk.conf
    01/30/2024  07:32 AM               524 dell-dtk_maint.conf
    01/30/2024  07:32 AM         1,226,064 grub.efi
    01/30/2024  07:32 AM       151,822,564 initrd
    01/30/2024  07:32 AM               332 kickstart.conf
    01/30/2024  07:32 AM        11,550,680 linux
    01/30/2024  07:32 AM           479,632 mfgrubx64.efi
    01/30/2024  07:32 AM           955,808 mfnbpx64.efi
    01/30/2024  07:32 AM           467,600 nvlgrubx64.efi
    01/30/2024  07:32 AM         1,366,712 nvlnbpx64.efi
    01/30/2024  07:32 AM             2,773 pxemenu.txt
    01/30/2024  07:32 AM        60,489,728 root
    01/30/2024  07:32 AM               336 winpe.conf
    01/30/2024  07:32 AM               381 z_auto.conf
    01/30/2024  07:32 AM               381 z_maint.conf
    01/30/2024  07:32 AM               412 z_zpdis.conf
    01/30/2024  07:32 AM               410 z_zpen.conf
                  19 File(s)    229,591,614 bytes

  • Can you tell me what type of HDD is in your Surface Pro?

    SSD? EMMC? UFS?  I'm starting to read about some UFS issues and Imaging due to new "UFS" Drives.

    (Note: Not Specific to ZCM).

    Are you using LinuxPE or WinPE?  I Presume you never even see the OS Start to download?

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • It is SSD.

    I use WinPE.  You are correct, on the Surface Pro 7+ I never see the OS start downloading.

  • Can you email an "MSINFO32" NFO to Craig_D_Wilson at yahoo .....

    Just a fresh out of the box one before you try and image....

    --

    If you found this post useful, give it a “Like” or click on "Verify Answer" under the "More" button

    Be sure to "Like" My (and a few others) Cool Solutions below! 

    https://community.microfocus.com/members/craigdwilson/bookmarks

  • Craig, we don't have any fresh out of the box units. We've had these a year or two and imaged them all before. Sorry.