diff --git a/source/hardware/bios.rst b/source/hardware/bios.rst new file mode 100644 index 00000000..e78f657a --- /dev/null +++ b/source/hardware/bios.rst @@ -0,0 +1,125 @@ +==================================== +BIOS updates +==================================== + +This page is dedicated to up-to-date BIOS update downloads as well as a generic instruction on +how to install them. + +===================================================================================================================== + +------------------- +BIOS version 0009 +------------------- + +To address a series of +`vulnerabilities `_ +found in the InsydeH2O UEFI firmware, which affects security appliances from Deciso, the necessary +downloads as well as the instructions to update the UEFI firmware are included here. + +**Affected appliances** +===================================================================================================================== + +The following appliances using the Netboard `A20 `_ +are affected: + +- `DEC800 series `_ +- `DEC3800 series `_ + +===================================================================================================================== + +-------------------------- +Installation instructions +-------------------------- + +Updating the UEFI firmware requires writing a bootable image to a USB drive on a separate machine. +Make sure you have an empty or unused USB drive before starting this procedure. + +.. warning:: + + All data on the USB drive will be overwritten. Make sure you have no important data on there. + As a general warning, following this procedure is on your own risk. + + +**Step 1** +===================================================================================================================== + +Download the right file depending on your platform from the :ref:`downloads ` section below. For Windows, +an installer is provided. For Linux, an image is provided. + +**Step 2** +===================================================================================================================== + + +Optionally verify the SHA256 checksum. + +**Step 3** +===================================================================================================================== + +Insert the USB drive. For Windows, unzip and start the installer executable and follow the instructions. +When prompted for a drive select the USB drive. + + +For Linux, decompress the image and write the image to the USB drive:: + + cd / + bzip2 -d .bz2 + sudo dd if=./.img of=/dev/ bs=1024k + +Where *image name* refers to the downloaded image, and *drivename* refers to the USB drive. + +.. note:: + + When selecting a drive on Linux, make sure you select the *entire* drive, not a single partition + (e.g. */dev/sdb*, not */dev/sdb1*) + + +**Step 4** +===================================================================================================================== + +If all went well and no errors occurred, safely remove the USB drive from the computer and plug it into +the appliance. + +**Step 5** +===================================================================================================================== + +Boot the appliance and enter the BIOS by pressing Escape. The current BIOS version (suffix) should show up. +Make note of it so you can compare it to the new version to verify everything went well. + +**Step 6** +===================================================================================================================== + +Select **Boot manager** and boot the USB drive. The UEFI shell will take over and execute the necessary BIOS update. +If the update is complete, the machine will power off. **Do NOT do anything until the machine has shutdown.** + +.. note:: + + Should the USB drive not show up, something went wrong during writing. The newly created FAT32 partition + should be the very first block on the drive. Inspect the drive on a different machine to check the layout. + +**Step 7** +===================================================================================================================== + +Reboot the machine and check the new BIOS version in either the boot log or the BIOS itself. + +.. _downloads: + +-------------------- +Downloads +-------------------- + +**BIOS version 0009** +===================================================================================================================== + +===================================================================================================================== + +**Windows** + +*Netboard A20*: :download:`Windows installer ` + +NetBoard-A20-USB-installer.zip (SHA256):13be16e3d7b081e7293a51d811610b87b265ee306396ff18a90450758c9c652d + +**Linux** + +*Netboard A20*: :download:`Image ` + +A20_009_BIOS_USB_IMAGE.img.bz2 (SHA256):da38482d3f9bcbea8aa6fe34c68b64ffb6f896ac9daa3011efb70b420e31ca01 diff --git a/source/hardware/files/A20_0009_BIOS_USB_IMAGE.img.bz2 b/source/hardware/files/A20_0009_BIOS_USB_IMAGE.img.bz2 new file mode 100644 index 00000000..949782c5 Binary files /dev/null and b/source/hardware/files/A20_0009_BIOS_USB_IMAGE.img.bz2 differ diff --git a/source/hardware/files/NetBoard-A20-0009-USB-installer.zip b/source/hardware/files/NetBoard-A20-0009-USB-installer.zip new file mode 100644 index 00000000..18e47532 Binary files /dev/null and b/source/hardware/files/NetBoard-A20-0009-USB-installer.zip differ diff --git a/source/index.rst b/source/index.rst index c972e505..855f63b8 100644 --- a/source/index.rst +++ b/source/index.rst @@ -35,6 +35,7 @@ Table of Contents third_party_plugins troubleshooting develop + vendor relations legal support diff --git a/source/vendor.rst b/source/vendor.rst new file mode 100644 index 00000000..caed2d89 --- /dev/null +++ b/source/vendor.rst @@ -0,0 +1,15 @@ +==================================== +Vendor +==================================== + +-------------------- +Hardware +-------------------- + +.. toctree:: + :maxdepth: 2 + :titlesonly: + + hardware/bios + + \ No newline at end of file