Nuvoton and AMI Bring OpenBMC to AI Servers With Hardware-Rooted Security

Nuvoton and AMI have announced the availability of the AMI MegaRAC OneTree management firmware for Nuvoton’s Arbel NPCM8XX baseboard management controllers, a platform aimed at enterprise servers and AI data centers. The integration combines an OpenBMC-based architecture with remote management, telemetry and hardware-backed security features. The goal is to make it easier for server manufacturers and infrastructure providers to build systems ready for large-scale AI deployments.

The key points on OpenBMC for AI servers in 30 seconds

  • Nuvoton is integrating its Arbel NPCM8XX controller family with AMI’s commercial MegaRAC OneTree firmware.
  • The solution allows servers to be managed remotely, controls power and cooling, and monitors telemetry.
  • It includes support for Redfish, IPMI 2.0, MCTP, PLDM and SPDM.
  • Security relies on secure boot, a hardware-based root of trust and cryptographic capabilities.
  • The platform is already available for evaluation and development on the Arbel EVB board, while support for production servers is offered through both companies.

The announcement, published on October 6, 2026, targets original equipment manufacturers (OEMs), original design manufacturers (ODMs) that design and build equipment for other brands, cloud providers and AI infrastructure developers. These players need to manage hundreds or thousands of servers without relying on physical intervention for routine maintenance tasks.

The offering combines two components with different roles. Nuvoton provides the Arbel NPCM8XX management controller, while AMI supplies MegaRAC OneTree, a commercial OpenBMC-based firmware. The integration aims to cut the work needed to adapt and validate firmware when developing new server platforms.

An Independent Controller for Managing AI Servers

The baseboard management controller, known as a BMC, is a component that allows a server to be monitored and managed independently of its main operating system. It can collect sensor data, control certain power and cooling parameters, and provide remote access to maintenance functions.

This separation is especially useful in data centers. If a server stops responding properly, the operations team can pull diagnostic information or perform certain management tasks without needing the operating system to be running. The specific functions available depend on the hardware and firmware installed.

Nuvoton’s Arbel NPCM8XX family uses a fourth-generation architecture with four Arm Cortex-A35 cores. On top of that controller, MegaRAC OneTree provides the firmware layer that connects the hardware’s capabilities with the management tools used by manufacturers and operators.

The announced features include remote monitoring, thermal and power management, telemetry collection, system maintenance and firmware lifecycle management. These capabilities matter especially for AI servers, which can pack power-hungry accelerators, advanced cooling systems and numerous components that need to work in a coordinated way.

Thermal management deserves particular attention in high-density equipment. The controller can gather sensor data and take part in the platform’s monitoring and control mechanisms. However, the announcement doesn’t specify which accelerators the integration supports, nor does it offer figures for improvements in power consumption, temperature or availability.

Standard Protocols for Integrating Equipment From Different Manufacturers

MegaRAC OneTree for Arbel NPCM8XX supports several protocols commonly used in data center hardware management:

  • Redfish: a management interface based on web services and structured data that allows operations on servers and other equipment to be automated.
  • IPMI 2.0: the traditional protocol for intelligent platform management, especially for remote monitoring and control tasks.
  • MCTP: a transport protocol for communication between components on a platform.
  • PLDM: a set of specifications for exchanging management, inventory, sensor and firmware information between devices.
  • SPDM: a protocol for discovering devices, authenticating components and establishing secure communications, depending on the capabilities implemented.

Supporting these standards can simplify integration with inventory, automation and observability tools. It also makes it easier for operators to work with platforms that combine components from different vendors.

That said, supporting a protocol doesn’t mean every one of its functions is available in any given configuration. Real-world interoperability depends on the implementation, the connected devices and the firmware versions involved.

OpenBMC With Commercial Support and a Chain of Trust From Boot

OpenBMC is an open-source project that provides a software foundation for server management controllers. Its architecture allows management functions to be developed and adapted for different hardware platforms.

AMI MegaRAC OneTree builds on that open foundation but is offered as a commercial solution with support and maintenance. That distinction matters for companies that need a validated distribution, security updates and assistance throughout the development and lifetime of their equipment.

AMI also offers a community edition of MegaRAC OneTree. That variant is geared toward development and collaboration around the open firmware, while the commercial offering announced for Arbel NPCM8XX comes with the company’s enterprise support model. The two shouldn’t be confused: sharing a technology base doesn’t mean they come with identical licensing, maintenance or support terms.

Security is another pillar of the integration. According to Nuvoton and AMI, the chain of trust starts in the controller’s immutable boot ROM and extends through secure boot mechanisms and runtime protection.

A hardware-based root of trust establishes an initial verification point that doesn’t depend solely on the software that runs afterward. Secure boot, in turn, helps verify the integrity and authenticity of firmware components before they run, provided the validation chain is configured correctly.

According to the companies, the NPCM8XX family also holds OCP S.A.F.E. certification and cryptographic capabilities validated under FIPS 140-3. These credentials apply to specific security areas and don’t amount to a comprehensive certification of the entire platform, nor do they guarantee that a server is immune to attacks.

The integration can be extended with AMI Tektagon, a family of security technologies that adds firmware integrity monitoring and recovery functions. The announcement presents this as an additional option, not as something that should be assumed to come included in every configuration of MegaRAC OneTree for Arbel.

For data center operators, the combination of firmware verification, device identity and remote management helps strengthen control over components that can stay active for long periods and that, in many cases, manage critical equipment even when the main operating system is powered down.

Availability: The Evaluation Board First, Then the Servers

The integration is available for evaluation and development through the Arbel Evaluation Board (EVB). Customers can use this platform to test the firmware, validate management functions and prepare the integration for their own server designs.

AMI and Nuvoton also offer support for production platforms and custom configurations through their commercial channels. The announced availability doesn’t mean every NPCM8XX-based server automatically ships with MegaRAC OneTree: each manufacturer must choose the solution and complete the corresponding integration and validation work.

AMI has published information about the MegaRAC OneTree development kit for Arbel NPCM8XX, which includes an evaluation board and components for experimenting with sensors, management interfaces and firmware development. The documentation lets technical teams get familiar with the work environment, although the kit’s specific features should be checked on the product page.

The collaboration also fits the industry’s interest in the open architectures promoted by the Open Compute Project (OCP). For manufacturers, a standards-compliant management base can cut some of the adaptation work between hardware generations. For operators, it can help unify the tools they use to monitor equipment from different vendors.

The companies haven’t published figures quantifying how much development time is saved, how much the integration costs, or what performance gains it offers compared with other alternatives. For now, the announcement confirms the solution’s availability for evaluation and the commercial support planned for production deployments, but it doesn’t provide independent comparative results.

Frequently Asked Questions

What is AMI MegaRAC OneTree?

It’s a commercial BMC firmware platform based on OpenBMC. It allows servers to be managed and provides monitoring, telemetry, thermal control and remote management functions.

What is the Nuvoton Arbel NPCM8XX controller for?

It’s a baseboard management controller that allows server functions to be monitored and managed independently of the main operating system. The NPCM8XX family uses four Arm Cortex-A35 cores.

What protocols does MegaRAC OneTree support on Arbel?

The announced integration supports Redfish, IPMI 2.0, MCTP, PLDM and SPDM. These standards cover different needs around management, component-to-component communication and security.

Is the solution available for production servers?

The solution is already available for evaluation and development on the Arbel EVB board. AMI and Nuvoton offer support for production platforms and custom configurations through their commercial channels.

Scroll to Top