This page is dedicated to up-to-date BIOS update downloads as well as a generic instruction on how to install them.
Table of Contents
To address a series of vulnerabilities found in the InsydeH2O UEFI firmware, which affects security appliances from Deciso, the necessary downloads as well as the instructions to update the UEFI firmware are included here.
The following appliances using the NetBoard A20 are affected:
The following apliances using the NetBoard A10 are affected:
Updating the UEFI firmware requires writing a bootable image to a USB drive on a separate machine. Make sure you have an empty or unused USB drive before starting this procedure.
All data on the USB drive will be overwritten. Make sure you have no important data on there. As a general warning, following this procedure is on your own risk.
Download the right file depending on your platform from the section above. For Windows, an installer is provided. For Linux, an image is provided.
Optionally verify the SHA256 checksum.
Insert the USB drive. For Windows, unzip and start the installer executable and follow the instructions. When prompted for a drive select the USB drive.
For Linux, decompress the image and write the image to the USB drive:
cd /<directory where image is located> bzip2 -d <image name>.bz2 sudo dd if=./<image name>.img of=/dev/<drivename> bs=1024k
Where image name refers to the downloaded image, and drivename refers to the USB drive.
When selecting a drive on Linux, make sure you select the entire drive, not a single partition (e.g. /dev/sdb, not /dev/sdb1)
If all went well and no errors occurred, safely remove the USB drive from the computer and plug it into the appliance.
Connect to the appliance using a Serial Console connectivity connection. Open a terminal to the relevant COM port.
Boot the appliance and enter the BIOS by pressing Escape. The current BIOS version (suffix) should show up. Make note of it so you can compare it to the new version to verify everything went well.
Go to Setup Utility –> AMD CBS –> FCH Common Options –> UART Configuration Options –> UART 0 Legacy Options. Make sure this setting is set to Disabled. This is explained in Legacy UART vs. UEFI serial.
Should your serial terminal highlight a BIOS option selection in such a way that it is unreadable, for the A20 appliance it’s the very first option in the UART Configuration Options menu screen.
Select Boot manager and boot the USB drive. The UEFI shell will take over and execute the necessary BIOS update. If the update is complete, the machine will power off. Do NOT do anything until the machine has shutdown.
Should the USB drive not show up, something went wrong during writing. The newly created FAT32 partition should be the very first block on the drive. Inspect the drive on a different machine to check the layout.
Reboot the machine and check the new BIOS version in either the boot log or the BIOS itself.