Found in the lab run: pve-redfish runs with ProtectSystem=strict, so it could not write its firmware state and dropped the reset request that applies a staged BIOS. Tested end to end on the lab: iDRAC profile multipart BMC update, iLO profile pull of BMC and BIOS through rack controller pxe-rack2 with -reboot, model check and -force, resume of a running update across a region restart. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>