Skip to content

Firmware update

The following documentation describes the process of Dasharo open-source firmware update. If your device is currently flashed with the proprietary firmware please refer to the Initial deployment documentation.

For simplicity of the update process, we recommend using Dasharo Tools Suite.

Before starting the update procedure be sure to disable Dasharo BIOS Boot medium lock, SMM BIOS Write Protection and Secure boot:

  1. Power on the device.
  2. While the device is booting, hold the DELETE key to enter the UEFI Setup Menu.
  3. Enter the Dasharo System Features menu using the arrow keys and Enter.
  4. Enter the Dasharo Security Options submenu.
  5. Verify the state of the Lock the BIOS boot medium and Enable SMM BIOS write protection options - if any of those are set, press Space to unselect them and then F10 to save the changes.
  6. Go back to the main menu using the ESC key.
  7. Enter the Device Manager menu.
  8. Enter the Secure Boot Configuration submenu.
  9. Verify that the Current Secure Boot State field says Disabled - if not, unselect the Attempt Secure Boot option below then press F10 to save the changes.
  10. Reboot the device to properly apply the changes.

The settings of all the above options can be restored after a firmware update.

Updating minor versions v1.x.y

Both WP_RO and RW_SECTION_A partitions of the flash needs to be updated. Flash it using the following command:

flashrom -p internal -w [path] --fmap -i RW_SECTION_A -i WP_RO

This command also preserves current Dasharo UEFI settings and the boot order.

Updating patch version v1.0.x

Only the RW_SECTION_A partition of the flash needs to be updated. Flash it using the following command:

flashrom -p internal -w [path] --fmap -i RW_SECTION_A

This command also preserves Dasharo UEFI settings and the boot order.