| Article original publié le : 22 août 2021 Mise a jour le : |
Mettre a jour depuis la cli le bios et les différents firmwares
Environnement
- Dell Latitude 7380 sous xUbuntu 20.04
Pré-requis
- Vérifier que sa machine soit bien supporté: https://fwupd.org/lvfs/devices/
- Avoir installé et amorcé son système en UEFI
Installation
- Le paquet est normalement natif, sinon l’installer
|
1 |
$ sudo apt install fwupd |
Déploiement
- Un check rapide de la machine et des versions présentes
|
1 |
$ sudo fwupdmgr get-devices |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 |
Latitude 7380 │ ├─Thunderbolt Controller: │ Device ID: 2d5321a33012b32ad1a5c03334edd6ce55f9c59e │ Summary: Unmatched performance for high-speed I/O │ Current version: 23.00 │ Vendor: Dell (TBT:0x00D4) │ GUIDs: a2bfa54c-09b3-58d5-9131-df101f690d6c ← TBT-00d4079f │ 427240dc-7bd8-5229-ac76-b2deff370dce ← TBT-00d4079f-controller0-0 │ Device Flags: • Internal device │ • Updatable │ • Requires AC power │ • Device stages updates │ ├─SK hynix SC311 SATA 256GB: │ Device ID: 64ec4cd1e1c9565e79b00f4e7221b1c689b33e96 │ Summary: ATA Drive │ Current version: 70000P10 │ Serial Number: MS79N601011609J2G │ GUIDs: cdd8cb3a-3604-5af9-a7db-f502a05214ed ← IDE\SK_hynix_SC311_SATA_256GB_______________70000P10 │ 64d370ac-e8e2-51c6-a419-3d02aacfe39b ← IDE\0SK_hynix_SC311_SATA_256GB_______________ │ db0a94bf-8c1a-587f-ae81-d43aab70f084 ← SK hynix SC311 SATA 256GB │ Device Flags: • Internal device │ • Updatable │ • Requires AC power │ • Needs a reboot after installation │ • Device is usable for the duration of the update │ ├─System Firmware: │ Device ID: 07e9e86366cf9f3ea796c4d2f1f07ce837f8fa0d │ Current version: 1.8.2 │ Minimum Version: 1.8.2 │ Vendor: Dell Inc. (DMI:Dell Inc.) │ GUID: 53f51f56-eff2-4516-9dda-ed501b3f0f8a │ Device Flags: • Internal device │ • Updatable │ • Requires AC power │ • Needs a reboot after installation │ • Cryptographic hash verification is available │ • Device is usable for the duration of the update │ └─TPM 2.0: Device ID: c6a80ac3a22083423992a3cb15018989f37834d6 Summary: Platform TPM device Current version: 1.3.1.0 Vendor: Dell Inc. (PCI:0x1028) Update Error: Updating disabled due to TPM ownership GUIDs: 7638cc91-f619-5966-8bde-4555262888d2 ← 07f3-2.0 ff71992e-52f7-5eea-94ef-883e56e034c6 ← system-tpm dd853888-f2c5-5a5d-b0c0-a068bdd2e6c8 ← DELL-TPM-2.0-NTC-rls dc37fd1f-2db4-5bae-ab0a-20e268a2e918 ← DELL-TPM-2.0-NTC-rlsNPCT Device Flags: • Internal device • Requires AC power |
- Vérifier l’état distant
|
1 |
$ sudo fwupdmgr refresh |
|
1 2 3 4 5 |
Fetching metadata https://cdn.fwupd.org/downloads/firmware.xml.gz Downloading… [***************************************] Fetching signature https://cdn.fwupd.org/downloads/firmware.xml.gz.asc Successfully downloaded new metadata: 1 local device supported |
- Vérifier la présence de nouvelle mise à jour
|
1 |
$ sudo fwupdmgr get-updates |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 |
• Thunderbolt Controller has no available firmware updates • SK hynix SC311 SATA 256GB has no available firmware updates Latitude 7380 │ └─System Firmware: │ Device ID: 07e9e86366cf9f3ea796c4d2f1f07ce837f8fa0d │ Current version: 1.8.2 │ Minimum Version: 1.8.2 │ Vendor: Dell Inc. (DMI:Dell Inc.) │ GUID: 53f51f56-eff2-4516-9dda-ed501b3f0f8a │ Device Flags: • Internal device │ • Updatable │ • Requires AC power │ • Supported on remote server │ • Needs a reboot after installation │ • Cryptographic hash verification is available │ • Device is usable for the duration of the update │ ├─Latitude 7X80 System Update: │ New version: 1.21.1 │ Remote ID: lvfs │ Summary: Firmware for the Dell Latitude 7X80 │ License: Proprietary │ Size: 13,6 MB │ Vendor: Dell Inc. │ Flags: is-upgrade │ Description: This stable release fixes the following issues: │ │ • Fixed the issue where the Administrator and System Password cannot be set through Windows Management Instrumentation (WMI) command. This issue occurs when you enter more than 16 characters. │ • Fixed the issue where the system stops responding when you restart the system after installing Intel Rapid Storage Technology driver. │ │ Some new functionality has also been added: │ │ • Firmware updates to address the Intel Security Advisory . │ • Firmware updates to address security vulnerabilities. │ ├─Latitude 7X80 System Update: │ New version: 1.20.2 │ Remote ID: lvfs │ Summary: Firmware for the Dell Latitude 7X80 │ License: Proprietary │ Size: 10,3 MB │ Vendor: Dell Inc. │ Flags: is-upgrade │ Description: This stable release fixes the following issues: │ │ • Firmware updates to address the Intel Security Advisory. │ • Firmware updates to address the Intel Security Advisory. │ • Firmware updates to address the Intel Security Advisory. │ • Firmware updates to address the Intel Security Advisory. │ │ Some new functionality has also been added: │ │ • Updated the graphics names in the BIOS to match with the graphics names in the operating system. │ ├─Latitude 7X80 System Update: │ New version: 1.19.0 │ Remote ID: lvfs │ Summary: Firmware for the Dell Latitude 7X80 │ License: Proprietary │ Size: 10,2 MB │ Vendor: Dell Inc. │ Flags: is-upgrade │ Description: This stable release fixes the following issues: │ │ • Firmware updates to address the Intel Technical Advisory │ ├─Latitude 7X80 System Update: │ New version: 1.18.0 │ Remote ID: lvfs │ Summary: Firmware for the Dell Latitude 7X80 │ License: Proprietary │ Size: 10,4 MB │ Vendor: Dell Inc. │ Flags: is-upgrade │ Description: This stable release fixes the following issues: │ │ • Fixed the issue where the system Master Password does not work. │ • Firmware updates to address the Intel Security Advisory. │ └─Latitude 7X80 System Update: New version: 1.17.1 Remote ID: lvfs Summary: Firmware for the Dell Latitude 7X80 License: Proprietary Size: 10,4 MB Vendor: Dell Inc. Flags: is-upgrade Description: This stable release fixes the following issues: • Firmware updates to address security advisory. • Firmware updates to address Intel security advisories. • Firmware updates to address the Intel Security Advisory. • Firmware updates to address. • Firmware updates to address the Intel Security Advisories. • Fixed a BIOS Setup configuration issue that occurs after clearing the CMOS. • Removed the IpSec driver and application. Some new functionality has also been added: • Updated the Intel Management Engine firmware. • Updated the Embedded Controller Engine firmware. • Updated the Power Delivery firmware. • Updated the BIOS warning message that is displayed when an AC adapter with low wattage is connected to the system. • Updated the external LAN firmware. |
- Procéder a la mise à jour et redémarrer
|
1 |
$ sudo fwupdmgr update |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
• Thunderbolt Controller has no available firmware updates • SK hynix SC311 SATA 256GB has no available firmware updates Upgrade available for System Firmware from 1.8.2 to 1.21.1 Latitude 7380 must remain plugged into a power source for the duration of the update to avoid damage. Continue with update? [Y|n]: y Downloading 1.21.1 for System Firmware... Fetching firmware https://fwupd.org/downloads/7a58936c482df4f3d825c2b85367fe17da9c32b40283838c47d733e9d6fa25d5-Latitude_7x80_1.21.1.cab Downloading… [***************************************] Less than one minute remaining… Decompressing… [***************************************] Authenticating… [***************************************] Updating System Firmware…[ - ] Scheduling… [***************************************] Successfully installed firmware An update requires a reboot to complete. Restart now? [y|N]: y |
- Re-check des mises à jour restantes
|
1 |
$ sudo fwupdmgr get-updates |
|
1 2 3 4 5 6 7 |
Devices with no available firmware updates: • SC311 SATA 256GB • ST32000542AS • UEFI dbx Devices with the latest available firmware version: • System Firmware No updates available for remaining devices |
- Vérifier l’historique
|
1 |
$ sudo fwupdmgr get-history |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 |
Latitude 7380 │ └─System Firmware: │ Device ID: 07e9e86366cf9f3ea796c4d2f1f07ce837f8fa0d │ Previous version: 1.8.2 │ Update State: Success │ Last modified: 2021-08-21 19:37 │ GUID: 53f51f56-eff2-4516-9dda-ed501b3f0f8a │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Reported to remote server │ • Cryptographic hash verification is available │ • Device is usable for the duration of the update │ └─Latitude 7X80 System Update: New version: 1.21.1 Remote ID: lvfs Summary: Firmware for the Dell Latitude 7X80 License: Proprietary Size: 13,6 MB Created: 2021-05-25 Urgency: Critical Vendor: Dell Inc. Description: This stable release fixes the following issues: • Fixed the issue where the Administrator and System Password cannot be set through Windows Management Instrumentation (WMI) command. This issue occurs when you enter more than 16 characters. • Fixed the issue where the system stops responding when you restart the system after installing Intel Rapid Storage Technology driver. Some new functionality has also been added: • Firmware updates to address the Intel Security Advisory . • Firmware updates to address security vulnerabilities. |
Quelques options supplémentaires
|
1 |
$ fwupdmgr --help |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 |
Usage: fwupdmgr [OPTION…] activate [DEVICE-ID] Activate devices clear-history Erase all firmware update history clear-offline Clears any updates scheduled to be updated offline clear-results DEVICE-ID Clears the results from the last update disable-remote REMOTE-ID Disables a given remote downgrade [DEVICE-ID] Downgrades the firmware on a device enable-remote REMOTE-ID Enables a given remote get-approved-firmware Gets the list of approved firmware. get-details FILE Gets details about a firmware file get-devices Get all devices that support firmware updates get-history Show history of firmware updates get-releases [DEVICE-ID] Gets the releases for a device get-remotes Gets the configured remotes get-results DEVICE-ID Gets the results from the last update get-topology Alias to get-devices get-updates Gets the list of updates for connected hardware get-upgrades Alias to get-updates install FILE [DEVICE-ID] Install a firmware file on this hardware modify-config KEY,VALUE Modifies a daemon configuration value. modify-remote REMOTE-ID KEY VALUE Modifies a given remote refresh [FILE FILE_SIG REMOTE-ID] Refresh metadata from remote server reinstall [DEVICE-ID] Reinstall current firmware on the device. report-history Share firmware history with the developers set-approved-firmware CHECKSUM1[,CHECKSUM2][,CHECKSUM3] Sets the list of approved firmware. unlock DEVICE-ID Unlocks the device for firmware access update [DEVICE-ID] Updates all firmware to latest versions available upgrade [DEVICE-ID] Alias to update verify [DEVICE-ID] Checks cryptographic hash matches firmware verify-update [DEVICE-ID] Update the stored cryptographic hash with current ROM contents Help Options: -h, --help Show help options Application Options: -v, --verbose Show extra debugging information --version Show client and daemon versions --offline Schedule installation for next reboot when possible --allow-reinstall Allow reinstalling existing firmware versions --allow-older Allow downgrading firmware versions --force Override warnings and force the action -y, --assume-yes Answer yes to all questions --sign Sign the uploaded data with the client certificate --no-unreported-check Do not check for unreported history --no-metadata-check Do not check for old metadata --no-reboot-check Do not check for reboot after update --no-safety-check Do not perform device safety checks --no-history Do not write to the history database --show-all-devices Show devices that are not updatable --disable-ssl-strict Ignore SSL strict checks when downloading files --filter Filter with a set of device flags using a ~ prefix to exclude, e.g. 'internal,~needs-reboot' This tool allows an administrator to query and control the fwupd daemon, allowing them to perform actions such as installing or downgrading firmware. |