Jump to content
Toggle menu
Toggle preferences menu
Toggle personal menu
Not logged in
Your IP address will be publicly visible if you make any edits.

VBIOS and firmware

From CMP Wiki
Revision as of 08:05, 30 October 2026 by ImportBot (talk | contribs) (CMP 170HX VBIOS facts, the vix no-flash loaders, the bogus "unlocked VBIOS" repos, SPI flasher voltage, GSP-off and vGPU; flashing risks as warnings. Discord Oct 2026 and the repos.; sources: @rrickk420, @ghostinthedatacenter_87281, @lxtend, @scallion_9883, @xanthefin, @bigptoughneigh, @c133, @globalapathy, @wakeupmbrc1, @youngju10000, @zarknoth, @_j3ns (+1 more); GitHub Consensus-Protocol/cmp170hx, Panchovix/nvidia-linux-vbios-vix-loader, Panchovix/nvidia-vbios-vix-editor, a)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

The 170HX VBIOS is signed, and the memory/compute unlock does not come from flashing a modified VBIOS; it comes from the driver patch (cmpunlocker). Most VBIOS work on these cards is either identification, power-limit editing, or dead ends. Treat anything that writes the flash chip as high-risk.

Stock VBIOS inventory

Version Card Notes
92.00.67.00.01 8 GB stock production (2021-05-14, 250 W)
92.00.6D.00.0A 8 GB 300 W OC image, memory OC allowed
92.00.6D.00.09 8 GB 300 W, no memory OC
92.00.66.00.02 10 GB the only 10 GB image
92.00.6D.00.01 8 GB (ES) PG199 engineering-sample 170HX, unlocks to 32 GB only

The VBIOS version does not decide whether the unlock works. Source: @rrickk420, 2026-08-22 92.00.6D.00.0A is an 8 GB image. Source: @ghostinthedatacenter_87281, 2026-10-17 Board part numbers: 900-11001-0108-000 (8 GB), 900-11001-0105-000 (10 GB); an ES/32 GB card uses a 699-xxxxx-xxxx-RCx number. See Which card do I have.

The vix no-flash loaders (Panchovix)

nvidia-linux-vbios-vix-loader (Linux) and nvidia-windows-vbios-vix-loader load a modified VBIOS at boot in memory by patching the 615.x open modules so GSP starts with the override image; the flash chip is never written, and the companion nvidia-vbios-vix-editor edits power limits, voltages and fan curves. Warning These do not support the CMP 170HX today: the device table has no 0x20C2/0x2082 entry and GA100 GSP firmware is explicitly unaudited.

lxwx tested the Linux loader on a 170HX 10 GB and reports it works and let him tweak TDP to 300 W on 610/615 drivers, together with the gen3 unlock. Source: @lxtend, 2026-10-20 But the override is applied in GSP, which is too late in boot to change anything still locked, so for the unlock it adds nothing new; it should reach clocks and power only. Source: @scallion_9883, 2026-10-19 The 300 W power-limit bytes sit outside the VBIOS signature section, implying the power limit is editable without the signing key. Source: @xanthefin, 2026-10-18

An older method: before the vix loader, the 10 GB card's VF offset and 300 W limit were reached by giving the driver the 8 GB unlocked VBIOS, truncated, instead of normal operation; Mr Pec got 300 W max on a 10 GB card this way. Source: @bigptoughneigh, 2026-10-04

The "64 GB unlocked VBIOS" repos (bogus)

Warning The repos 344303947/CMP-170HX-64GB-Unlocked-VBIOS and its mirror justin-kk-coder/CMP-170HX-64GB-Unlocked-VBIOS (git author "Thaurock") present a 1 MB ROM (sha256 2e8961ac518924cebd52363555c875071e6a58ece1ef494e192e42d5c1dcd5a2) as a "64 GB unlocked" VBIOS with nvflash -6 instructions. By version, date and IDs it is the stock 8 GB production VBIOS (92.00.67.00.01); the 64 GB readout in its screenshot is what the driver-side unlock produces, not the ROM. The unlock involves no VBIOS change. When members compared the file to the original in August there was no difference. Do not flash it. Source: @c133, 2026-10-18 Source: @globalapathy, 2026-10-18

SPI flashing (if you must)

Flashing a different VBIOS (e.g. A100) means opening the card and programming the flash IC. Warning Be careful which programmer you buy: flash ICs are 1.8 V or 3 V and a 3 V programmer fries a 1.8 V flash; some "3.3 V" CH341a units are really 5 V. Prefer a CH347-based flasher (its software selects the voltage). Source: @wakeupmbrc1, 2026-10-13 The 170HX VBIOS is signed, so flashing a modified image is a separate (unsolved) problem; and Warning a VBIOS TOCTOU test was reported to brick a card permanently, unrecoverable even after restoring the original image. Source: @youngju10000, 2026-10-08

A dead-on-arrival 10 GB card whose VBIOS ROM reads 0xFFFF and fails GSP init is likely a bad SPI flash; see Troubleshooting.

GSP-off and vGPU

  • GSP disabled: applying the unlock, building a dual-stack driver that persists the unlock kernels, then loading
 the proprietary driver with NVreg_EnableGpuFirmware=0 let certain register changes survive the reload
 with no GSP panics (works well on the 90HX). Most people think it adds little since everything software-unlockable is
 already found. Source: @zarknoth, 2026-10-27
  • vGPU: close to working in cmpunlocker on the vGPU-and-others branch (three patches:
 vgpu-kvm-build, vgpu-ga100-host, vgpu-umd-version). Source: @_j3ns, 2026-10-26
 A longer build note by @arabus_74064 (declaring the vgpu patches in constants.yaml) exists; see Discord.

Fuse RE references

The GA100 fuse / RIR architecture is reverse-engineered read-only in ahnguyen17/ga100-fuse-re (FF instruction layout, RIR macro, the corrected Gen3 burn list, the 80 GiB fold). Use it as a cross-check before trusting any burn list; the repo's own verdict on burning a working card is NO-GO. Source: @exile_1ck, 2026-10-07

Status

VBIOS editing can change power/clocks (reported); it cannot do the memory/compute/PCIe unlock (that is driver-side). Flashing modified or third-party ROMs is a warning, not a recommendation.

Related

RIR fuse burn, Which card do I have, Driver unlock, NVLink, Troubleshooting, Tools.