Baremetals e.g. dgx nodes should update the firmware. VMs shouldnot. And hypervisors are done somewhere else