Archives
/
opensense-docs
mirror of https://github.com/opnsense/docs
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

bios: restructure page for future additions. we might need to split this up into more pages in the future since installation instructions will vary.

Browse Source
pull/386/head
Stephan de Wit 2 years ago
parent 8762637792
commit 88e1ab675e
1 changed files with 32 additions and 43 deletions
Show Stats Download Patch File Download Diff File

75
source/hardware/bios.rst
Unescape Escape View File

@ -7,29 +7,48 @@ how to install them.
=====================================================================================================================
-------------------
BIOS version 0009
-------------------
.. contents:: Table of Contents
:local:
To address a series of
`vulnerabilities <https://www.bleepingcomputer.com/news/security/uefi-firmware-vulnerabilities-affect-at-least-25-computer-vendors/>`_
found in the InsydeH2O UEFI firmware, which affects security appliances from Deciso, the necessary
downloads as well as the instructions to update the UEFI firmware are included here.
**Affected appliances**
**Product families**
=====================================================================================================================
-------------------------
DEC800 and DEC3800 series
-------------------------
The following appliances using the Netboard `A20 <https://www.deciso.com/netboard-a20/>`_
are affected:
- `DEC800 series <https://shop.opnsense.com/dec800-series-opnsense-desktop-security-appliance/>`_
- `DEC3800 series <https://shop.opnsense.com/dec3800-series-opnsense-rack-security-appliance/>`_
=====================================================================================================================
^^^^^^^^^^^^^^^^^^^^^^^^^^^
BIOS version 0009 (latest)
^^^^^^^^^^^^^^^^^^^^^^^^^^^
--------------------------
Installation instructions
--------------------------
To address a series of
`vulnerabilities <https://www.bleepingcomputer.com/news/security/uefi-firmware-vulnerabilities-affect-at-least-25-computer-vendors/>`_
found in the InsydeH2O UEFI firmware, which affects security appliances from Deciso, the necessary
downloads as well as the instructions to update the UEFI firmware are included here.
**Windows**
*Netboard A20*: :download:`Windows installer <files/NetBoard-A20-0009-USB-installer.zip>`
NetBoard-A20-USB-installer.zip (SHA256):13be16e3d7b081e7293a51d811610b87b265ee306396ff18a90450758c9c652d
**Linux**
*Netboard A20*: :download:`Image <files/A20_0009_BIOS_USB_IMAGE.img.bz2>`
A20_009_BIOS_USB_IMAGE.img.bz2 (SHA256):da38482d3f9bcbea8aa6fe34c68b64ffb6f896ac9daa3011efb70b420e31ca01
**Installation instructions**
=====================================================================================================================
Updating the UEFI firmware requires writing a bootable image to a USB drive on a separate machine.
Make sure you have an empty or unused USB drive before starting this procedure.
@ -41,19 +60,16 @@ Make sure you have an empty or unused USB drive before starting this procedure.
**Step 1**
=====================================================================================================================
Download the right file depending on your platform from the :ref:`downloads <downloads>` section below. For Windows,
an installer is provided. For Linux, an image is provided.
**Step 2**
=====================================================================================================================
Optionally verify the SHA256 checksum.
**Step 3**
=====================================================================================================================
Insert the USB drive. For Windows, unzip and start the installer executable and follow the instructions.
When prompted for a drive select the USB drive.
@ -74,19 +90,16 @@ Where *image name* refers to the downloaded image, and *drivename* refers to the
**Step 4**
=====================================================================================================================
If all went well and no errors occurred, safely remove the USB drive from the computer and plug it into
the appliance.
**Step 5**
=====================================================================================================================
Boot the appliance and enter the BIOS by pressing Escape. The current BIOS version (suffix) should show up.
Make note of it so you can compare it to the new version to verify everything went well.
**Step 6**
=====================================================================================================================
Select **Boot manager** and boot the USB drive. The UEFI shell will take over and execute the necessary BIOS update.
If the update is complete, the machine will power off. **Do NOT do anything until the machine has shutdown.**
@ -97,29 +110,5 @@ If the update is complete, the machine will power off. **Do NOT do anything unti
should be the very first block on the drive. Inspect the drive on a different machine to check the layout.
**Step 7**
=====================================================================================================================
Reboot the machine and check the new BIOS version in either the boot log or the BIOS itself.
.. _downloads:
--------------------
Downloads
--------------------
**BIOS version 0009**
=====================================================================================================================
=====================================================================================================================
**Windows**
*Netboard A20*: :download:`Windows installer <files/NetBoard-A20-0009-USB-installer.zip>`
NetBoard-A20-USB-installer.zip (SHA256):13be16e3d7b081e7293a51d811610b87b265ee306396ff18a90450758c9c652d
**Linux**
*Netboard A20*: :download:`Image <files/A20_0009_BIOS_USB_IMAGE.img.bz2>`
A20_009_BIOS_USB_IMAGE.img.bz2 (SHA256):da38482d3f9bcbea8aa6fe34c68b64ffb6f896ac9daa3011efb70b420e31ca01

Write Preview
Loading…
Cancel
Save