Skip to content

novacustom/firmware-update.md: update, include Intel ME #1273

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
filipleple wants to merge 1 commit into
base: master
Choose a base branch
from
Open

novacustom/firmware-update.md: update, include Intel ME #1273

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
89 changes: 43 additions & 46 deletions docs/unified/novacustom/firmware-update.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,28 +15,33 @@ firmware version is currently installed on your device.

=== "Dasharo (UEFI)"

=== "Laptops"
## Prerequisites

Your firmware version can be checked by entering the
[Dasharo Setup Menu](../../dasharo-menu-docs/overview.md#dasharo-menu-guides)
using the ++f2++ key while booting.

## Prerequisites
!!! note "Please note"

Your firmware version can be checked by entering the
[Dasharo Setup Menu](../../dasharo-menu-docs/overview.md#dasharo-menu-guides)
using the ++f2++ key while booting.
Before updating, it is recommended to set the Intel Management Engine to
Disabled (HAP) in [Dasharo System Features](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#intel-management-engine-options).

> Advanced users can also [build](./building-manual.md) and/or flash the
> binaries themselves by following the steps under the [Manual
> update](#manual-update) section.
> Advanced users can also [build](./building-manual.md) and/or flash the
> binaries themselves by following the steps under the [Manual
> update](#manual-update) section.

### Capsule Update via fwupd
### Capsule Update via fwupd

Using fwupd is the recommended and simplest way to perform Dasharo
firmware updates on supported devices.
Using fwupd is the recommended and simplest way to perform Dasharo
firmware updates on supported devices.

To check which firmware versions support fwupd updates, check
[Firmware Update Guide](../../guides/firmware-update.md#fwupd--lvfs).
To check which firmware versions support fwupd updates, check
[Firmware Update Guide](../../guides/firmware-update.md#fwupd--lvfs).

For instructions on how to use fwupd and update the firmware, follow the
[Dasharo fwupd documentation](../../kb/fwupd.md#update-instructions).
For instructions on how to use fwupd and update the firmware, follow the
[Dasharo fwupd documentation](../../kb/fwupd.md#update-instructions).

=== "Laptops"

### Firmware Update Mode

Expand All @@ -54,48 +59,40 @@ firmware version is currently installed on your device.
Check out our [YouTube video](https://www.youtube.com/watch?v=muWjhrQ7bQk)
for a demonstration of Firmware Update Mode.

### Updating older versions

1. First, ensure that [UEFI Secure Boot](../../dasharo-menu-docs/device-manager.md#custom-mode-and-key-management)
has been disabled and that [Network Boot](../../dasharo-menu-docs/dasharo-system-features.md#networking-options)
has been enabled.
=== "NUC BOX"

2. Boot to the [Dasharo Tools Suite](../../dasharo-tools-suite/documentation/running.md#bootable-over-a-network).
We recommend the network boot option.
### Updating via DTS

3. In the main menu of Dasharo Tools Suite, select option `5` to proceed with
the installation of the firmware update.
1. First, ensure that [UEFI Secure Boot](../../dasharo-menu-docs/device-manager.md#custom-mode-and-key-management)
has been disabled and that [Network Boot](../../dasharo-menu-docs/dasharo-system-features.md#networking-options)
has been enabled.

4. In case you want to know more about the firmware update option in Dasharo
Tools Suite, please check out the
[features section](../../dasharo-tools-suite/documentation/features.md#firmware-update)
of the dedicated Dasharo Tools Suite documentation page.
2. Boot to the [Dasharo Tools Suite](../../dasharo-tools-suite/documentation/running.md#bootable-over-a-network).
We recommend the network boot option.

### Manual update
3. In the main menu of Dasharo Tools Suite, select option `5` to proceed with
the installation of the firmware update.

This update method is for advanced users only and is not recommended for
regular end users.
4. In case you want to know more about the firmware update option in Dasharo
Tools Suite, please check out the
[features section](../../dasharo-tools-suite/documentation/features.md#firmware-update)
of the dedicated Dasharo Tools Suite documentation page.

> Please make sure you that you update the BIOS firmware and the EC firmware
> respectively, as the laptop will power off after the EC firmware flash.
### Manual update

=== "NUC BOX"
This update method is for advanced users only and is not recommended for
regular end users.

### Manual update
> Please make sure you that you update the BIOS firmware and the EC firmware
> respectively, as the laptop will power off after the EC firmware flash.

Currently, the NUC BOX only supports updating the firmware manually via DTS.
Ensure that the firmware protections are disabled:

Ensure that the firmware protections are disabled (1) in
[Dasharo Security Options](../../dasharo-menu-docs/dasharo-system-features.md).
Both `BIOS boot medium lock` and `Enable SMM BIOS write protection` should
be unchecked. [UEFI Secure Boot](../../dasharo-menu-docs/device-manager.md#secure-boot-configuration)
must be disabled as well (uncheck `Attempt Secure Boot` if
`Current Secure Boot State` does not say `Disabled`). To apply changes, you
will need to reboot.
{ .annotate }
* in [Dasharo Security Options](../../dasharo-menu-docs/dasharo-system-features.md) both `BIOS boot medium lock` and `Enable SMM BIOS write protection` should be unchecked.
* [UEFI Secure Boot](../../dasharo-menu-docs/device-manager.md#secure-boot-configuration) must be disabled (uncheck `Attempt Secure Boot` if `Current Secure Boot State` does not say `Disabled`).
* the Intel Management Engine must be set to `Disabled (HAP)` in [Dasharo System Features](https://docs.dasharo.com/dasharo-menu-docs/dasharo-system-features/#intel-management-engine-options).

1. These options were introduced in v1.5.0 for TGL models and v1.7.0 for ADL
models. You can skip these steps if you are using an older firmware version.
To apply changes, you will need to reboot.

Follow the local firmware update procedure described in the [DTS firmware update
documentation](../../dasharo-tools-suite/documentation/features.md#local-firmware-update).
Expand Down
Loading