BIOS updates

This page is dedicated to up-to-date BIOS update downloads as well as a generic instruction on how to install them.


Product families

To address a series of vulnerabilities found in the InsydeH2O UEFI firmware, which affects security appliances from Deciso, the necessary downloads as well as the instructions to update the UEFI firmware are included here.

DEC800 and DEC3800 series

The following appliances using the NetBoard A20 are affected:

Downloads

DEC800 & DEC3800 series BIOS Version 9

OS

Download

SHA256 Checksum

Windows

Windows installer

b824b7508cdb56bd097afdd64bfca0c23e08f003a93a16846809e7a394187567

Linux

Image

da38482d3f9bcbea8aa6fe34c68b64ffb6f896ac9daa3011efb70b420e31ca01

DEC700 and DEC2700 series

The following apliances using the NetBoard A10 are affected:

Downloads

DEC700 & DEC2700 series BIOS version 22

OS

Download

SHA256 Checksum

Windows

Windows installer

5fc6fcc98d17d207b29e4e8f9ac5a0765a2f69b2ff058f958e7727519d0b676f

Linux

Image

a4c107d7fa1240fbb1e2fd5368c30d5ff7e66897424cf34942dd260b11eca9b8

Installation instructions

Updating the UEFI firmware requires writing a bootable image to a USB drive on a separate machine. Make sure you have an empty or unused USB drive before starting this procedure.

Warning

All data on the USB drive will be overwritten. Make sure you have no important data on there. As a general warning, following this procedure is on your own risk.

Step 1

Download the right file depending on your platform from the section above. For Windows, an installer is provided. For Linux, an image is provided.

Step 2

Optionally verify the SHA256 checksum.

Step 3

Insert the USB drive. For Windows, unzip and start the installer executable and follow the instructions. When prompted for a drive select the USB drive.

For Linux, decompress the image and write the image to the USB drive:

cd /<directory where image is located>
bzip2 -d <image name>.bz2
sudo dd if=./<image name>.img of=/dev/<drivename> bs=1024k

Where image name refers to the downloaded image, and drivename refers to the USB drive.

Note

When selecting a drive on Linux, make sure you select the entire drive, not a single partition (e.g. /dev/sdb, not /dev/sdb1)

Step 4

If all went well and no errors occurred, safely remove the USB drive from the computer and plug it into the appliance.

Step 5

Connect to the appliance using a Serial Console connectivity connection. Open a terminal to the relevant COM port.

Step 6

Boot the appliance and enter the BIOS by pressing Escape. The current BIOS version (suffix) should show up. Make note of it so you can compare it to the new version to verify everything went well.

Step 7

Go to Setup Utility –> AMD CBS –> FCH Common Options –> UART Configuration Options –> UART 0 Legacy Options. Make sure this setting is set to Disabled. This is explained in Legacy UART vs. UEFI serial.

Note

Should your serial terminal highlight a BIOS option selection in such a way that it is unreadable, for the A20 appliance it’s the very first option in the UART Configuration Options menu screen.

Step 8

Select Boot manager and boot the USB drive. The UEFI shell will take over and execute the necessary BIOS update. If the update is complete, the machine will power off. Do NOT do anything until the machine has shutdown.

Note

Should the USB drive not show up, something went wrong during writing. The newly created FAT32 partition should be the very first block on the drive. Inspect the drive on a different machine to check the layout.

Step 9

Reboot the machine and check the new BIOS version in either the boot log or the BIOS itself.