CPU microcode not updated during boot

[jb82]

Hi,
this is a not that recent Lenovo Xeon 2276M laptop. Some time ago, I do remember, that dmesg showed some updates regarding the microcode. But now, there's just "no matching update found". Please see the logs below. I assume those microcode updates cannot be persistent and they need to be uploaded to the CPU each time a machine boots. Could anybody elaborate on that please? Do UEFI firmware updates as they come from Lenovo affect this?

jb@p1 ~> doas dmesg | grep -i micro
CPU microcode: no matching update found

jb@p1 ~> cat /boot/loader.conf | grep -i microco
# CPU microcode update
cpu_microcode_load="YES"
cpu_microcode_name="/boot/firmware/intel-ucode.bin"

jb@p1 ~> freebsd-version -kru
14.1-RELEASE-p5
14.1-RELEASE-p5
14.1-RELEASE-p6

 

[SirDice]

Do UEFI firmware updates as they come from Lenovo affect this?

It would likely be mentioned in the release notes of said firmware update.

 

[rbranco]

I'm also having this issue.

 

[fmc000]

Do you have the sysutils/cpu-microcode-intel package installed? It doesn't come by default.

 

[T-Aoki]

Do UEFI firmware updates as they come from Lenovo affect this?

100% sure of course.
UEFI firmware updates can (not in all updates, though) contain microcode updates. And if the microcode in the UEFI firmware of the computer is same or newer than the ones FreeBSD ports has, no matching microcodes (mean, applicable updates) can be found, thus, the message is shown.

For example, in the Version Information section of document "BIOS Update CD (ISO image file for bootable CD)" for N2CUR42W, in the descriptions for N2CUR39W, a line

- (New) Updated the CPU microcode.

can be seen among others.