This is a finer-grained state indicator of the endpoint's firmware beyond operState, capturing conditions such as a corrupted or incompatible image that operState alone might not distinguish. An admin seeing operState report something ambiguous would check firmwareState next for a more specific diagnosis. A value flagging 'corrupted' here on a specific endpoint would explain why that device refuses to boot into its new image even though the update reported as complete.