RODAUSB UPDATEKEY VERSION 2.9.6(orhigher) USERSMANUAL BIOS,EC-FIRMWARE,HEATER FIRMWARE,ME-FIRMWARE

Transcription

1 EK_7.5.1_1_04 USB_UpdateKey RODAUSB UPDATEKEY VERSION 2.9.6(orhigher) USERSMANUAL BIOS,EC-FIRMWARE,HEATER FIRMWARE,ME-FIRMWARE Proprietary Notice Information disclosed herein is the property of roda computer GmbH. It is furnished for evaluation purposes only and shall not be disclosed or used for any other purposes except as specified by contract between recipient and roda computer GmbH. Recipient duplication of any portion of this information is limited to above purpose and must include this legend. CAGE Code C6315 Number of Sheets 28

2 Document Revisions Rev Change Description Date Author 1 Initial release M. Schroeder 2 Update company Logo S. Kalms 3 Update for Stick Version 2.5 and up M. Schroeder 3 Checked actuality and validity F. Aschmoneit 4 10 and 11 series Intel ME related Updates M. Schroeder EK_7.5.1_01_04 Page 2 of

3 Table of Content 1 Creating a bootable USB-Key DB7, 10- and 11- Series Products Boot your USB-Key Start BIOS Update Hardening Intel ME/ AMT Enter the configuration menu Disable AMT Features Securing the Intel ME Access DB6, 786EX-, 886EX- and 9- Series Products Boot your USB-Key Start BIOS Update Proceed Heater Firmware Update (for 786EX series only) Possible problems Description of the Stick Versions EK_7.5.1_01_04 Page 3 of

4 Table of Figures Figure 1 Extrakting Installer... 5 Figure 2 Select USB device by driver letter... 6 Figure 3 USB Key creation process... 6 Figure 4 Creation Finish dialog... 7 Figure 5 PCH-FW Configration... 8 Figure 6 Me FW Image Re-Flash... 8 Figure 7 BIOS-Key Boot Screen... 9 Figure 8 BIOS Key Automatic BIOS detection... 9 Figure 9 Start BIOS Update Figure 10 Accept Warning Figure 11 BIOS Update RK10 example Figure 12 BIOS POST Figure 13 Intel ME Hotkey Figure 14 Intel ME Password Figure 15 Intel ME Password Verification Figure 16 Intel ME Configuration Figure 17 Intel AMT Configuration Figure 18 Intel AMT Notice Figure 19 Managability Feature Selection Figure 20 BIOS Advanced Settings Figure 21 BIOS Disable AMT features Figure 22 BIOS Disable Intel AMT Figure EX boot priority Figure EX Save & Exit Figure 25 RK886EX BIOS Update dialog Figure 26 Continue BIOS Update Figure 27 Final Warning Figure 28 BIOS Update Procedure Figure 29 BIOS Update finished Figure 30 BIOS POST Figure 31 BIOS load default Figure 32 BIOS Save & Exit Figure 33 Overview 786EX series Figure 34 Heater Firmware Flash Figure 35 Heter Firmware Flash guide Figure 36 Heater Firmware Flash tool Figure 37 Heater Flash Procedure Figure 38 Heater configuration Procedure Figure 39 possible Problems EK_7.5.1_01_04 Page 4 of

5 1 Creating a bootable USB-Key Download roda-update-key-installer exe from our Webserver Prepare an empty USB-Stick or a USB-Stick where data can be deleted Remove all USB Storage devices except the one you want to convert to a roda-usb-update key. The preparation could be done on any Windows PC Execute roda-update-key-installer exe Make sure you enable Administrator rights if asked to Unpack Procedure Figure 1 Extrakting Installer You will be asked to select a USB drive, by drive letter. Select by double click or by using cursor and hit Enter. Be careful with your choice! Once selected, the installer immediately starts formatting the drive and prepare for booting. Better make sure you have a backup of your USB drive data if needed. EK_7.5.1_01_04 Page 5 of

6 Figure 2 Select USB device by driver letter It will take a while until finish. Figure 3 USB Key creation process EK_7.5.1_01_04 Page 6 of

7 1.1.9 When you see this message, all is done. Click OK and make sure you safely remove the USB drive. Figure 4 Creation Finish dialog If an error occurs, an error Message will be displayed in the Dialogbox. Check chapter 5 of this manual. EK_7.5.1_01_04 Page 7 of

8 2 DB7,10-and11-SeriesProducts Check whether Intel ME Firmware is allowed for Update Press F2 during POST to Enter BIOS and go to Advanced->PCH-FW Configuration Figure 5 PCH-FW Configration If there is no Firmware Update Configuration Menu entry, your BIOS is outdated, please go ahead with the BIOS Update procedure first (Continue at chapter 2.2) and repeat a full 2 nd flash procedure from here, after the update Enable Intel ME Firmware Update Figure 6 Me FW Image Re-Flash Toggle this entry to [Enabled] EK_7.5.1_01_04 Page 8 of

9 Press F4 to Save & Exit 2.2 Boot your USB-Key Plug the USB-Key to a free port on the unit that needs to be updated Change the Boot Order in your BIOS Settings. The USB KEY or USB HDD (depending on your KEY) needs to be set in order before the first HDD or use the F4 Boot Menu to boot your USB device Figure 7 BIOS-Key Boot Screen Figure 8 BIOS Key Automatic BIOS detection EK_7.5.1_01_04 Page 9 of

10 2.3 Start BIOS Update The software automatically detects the model. So all you have to do is select BIOS to start the procedure. If no model was found here, call the roda Support! Figure 9 Start BIOS Update Accept the security hint. Figure 10 Accept Warning EK_7.5.1_01_04 Page 10 of

11 2.3.3 BIOS Update runs automated Figure 11 BIOS Update RK10 example If the Me Image Reflash was enabled as in section 2.1.2, the MEBlock will be updated, otherwise it will show an error message but all other tasks will complete. If you got the error message, go back to section and enable the Me Image Reflash now and repeat BIOS update. If the MEBlock earasing and writing shows done as in this screenshot, you are good The automated procedure will also update the EC firmware, than power off the unit. It might be required to power on the unit 4 times, until it operates normal after this update. This is required due to the firmware re-initialization process For RK10, RF10, MK10, DR10, DK10, ML10 the minimum required Intel ME Firmware Version is , it can also be reviewed in the PCH-FW Configuration of in the BIOS Enter the BIOS Setup and load defaults, before continue any other step! EK_7.5.1_01_04 Page 11 of

12 3 HardeningIntelM E/AM T To protect the unit from unauthorized remote access, it is possible to disable the Intel AMT features. If this is required or not, depends on your personal preferences or you company/ governmental IT-security policy. If it is intended to actually use the remote administration capability of the device this section also can be skipped. If you plan to disable Intel AMT it is important to keep the exact order of the following steps. 3.1 Enter the configuration menu Shortly after the BIOS Power On Self Test, Figure 12 BIOS POST you will see a hotkey Hint <Strg+P>, press this hotkey to enter the Intel ME settings dialog. Figure 13 Intel ME Hotkey EK_7.5.1_01_04 Page 12 of

13 The default password is admin. It is required to be changed on first login. Figure 14 Intel ME Password The new password must be a complex password, including Capital Letters, Numbers and special characters. Figure 15 Intel ME Password Verification EK_7.5.1_01_04 Page 13 of

14 3.2 Disable AMT Features Select: AMT Configuration Figure 16 Intel ME Configuration Select: Managability Feature Selection Figure 17 Intel AMT Configuration EK_7.5.1_01_04 Page 14 of

15 Confirm Notification Figure 18 Intel AMT Notice Select: Disabled Figure 19 Manageability Feature Selection Exit the Intel ME Settings and reboot the Computer. EK_7.5.1_01_04 Page 15 of

16 3.3 Securing the Intel ME Access Before continue, make sure Section 3.1 and 3.2 have been setup properly. Enter the BIOS Settings Advanced -> AMT Configuration Figure 20 BIOS Advanced Settings Make sure the lower 3 options are disabled Figure 21 BIOS Disable AMT features EK_7.5.1_01_04 Page 16 of

17 After disabling the lower 3 options, also disable the first entry, Intel AMT. The lower 3 options will be grayed out and can no longer be toggled. Figure 22 BIOS Disable Intel AMT Now, all Intel AMT features and dialogs are turned off. To protect these settings it can be useful to protect the BIOS with a password. Please keep secure record of any password protection of the BIOS. EK_7.5.1_01_04 Page 17 of

18 4 DB6, 786EX-, 886EX- and 9- Series Products 4.1 Boot your USB-Key 1. Plug the USB-Key to a free port on the unit that needs to be updated. 2. Change the Boot Order. The USB KEY or USB HDD (depending on your KEY) needs to be set in order before the first HDD. Example for 886EX product series: Figure EX boot priority 3. Now choose Exit Saving Changes to leave BIOS-Setup. Figure EX Save & Exit EK_7.5.1_01_04 Page 18 of

19 4.2 Start BIOS Update 4. Re-Boot your Computer. 5. Proceed BIOS Update 6. The software automatically detects the model. So all you have to do is select BIOS to start the procedure. If no model was found here, call the roda Support! Figure 25 RK886EX BIOS Update dialog EK_7.5.1_01_04 Page 19 of

20 7. Accept the security hint. Figure 26 Continue BIOS Update 8. Launch BIOS Update by selecting OK. Figure 27 Final Warning EK_7.5.1_01_04 Page 20 of

21 9. BIOS Update is performed automatically. Figure 28 BIOS Update Procedure 10. After BIOS Update, reboot your computer. Figure 29 BIOS Update finished 11. Press F2 during memory testing, to access the BIOS settings. 12. You can read the new BIOS version at the yellow marked position (this is just an example. EK_7.5.1_01_04 Page 21 of

22 Figure 30 BIOS POST 13. Under Exit in BIOS-Setup choose Load Setup Defaults and press Enter. In the popup message, make sure that yes is selected and accept with Enter once more. Figure 31 BIOS load default EK_7.5.1_01_04 Page 22 of

23 14. Now choose Exit Saving Changes to leave BIOS-Setup. Figure 32 BIOS Save & Exit 15. BIOS Update done. EK_7.5.1_01_04 Page 23 of

24 4.3 Proceed Heater Firmware Update (for 786EX series only) 1. Choose Heater. Figure 33 Overview 786EX series 2. Follow the instructions on the screen. IMPORTANT: Disconnect any device connected to the FDD/Printer Port! Don t perform a heater Update to any computer of the 886EX series or higher.. Figure 34 Heater Firmware Flash EK_7.5.1_01_04 Page 24 of

25 3. Keep following (select OK). Figure 35 Heter Firmware Flash guide 4. Press w to start update. Figure 36 Heater Firmware Flash tool EK_7.5.1_01_04 Page 25 of

26 5. Select OK. Figure 37 Heater Flash Procedure 6. Type y on the keyboard. Figure 38 Heater configuration Procedure 7. Heater update done. EK_7.5.1_01_04 Page 26 of

27 5 Possible problems If no model is displayed here, the program can t update the BIOS correctly. In this case call the roda Support to get assistance, for a manual procedure. Figure 39 possible Problems EK_7.5.1_01_04 Page 27 of

28 6 Description of the Stick Versions Release Version Major Version Sub Version Release Version Major Version Sub Version : will be raised if software on the key gets new features : will be raised if content is updated, for example new BIOS release : will be raised if software features are changed or bug fixed, for example new Notebook model is added EK_7.5.1_01_04 Page 28 of