BIOS updates / settings

This page is dedicated to up-to-date BIOS update downloads as well as a generic instruction on how to install them.


Product families

DEC800, DEC3800 & DEC4000 series

08-2023: Version 13 (latest)

OS

Download

SHA256 Checksum

Windows

Windows installer

cd2904cbf9357ea506925b8ab882525c771789f3e2a862c47ab752fe0109a726

Linux

Image

dea85532b7ddd50924d5bd6589150f44f38d9e4ace1a196c6b8d3114ba44b290

CVE update.

12-2022: Version 10a

OS

Download

SHA256 Checksum

Windows

Windows installer

7911491dd1980affc189c290a4590c72105445aab3c74163b649daba1b9fd271

Linux

Image

19d2d011b2d63eff3d6e422b475a1bde2dd76c752d1abcb224c2c4310f273a44

CVE update.

03-2022: Version 9

OS

Download

SHA256 Checksum

Windows

Windows installer

e92dc8e3822ae295e218a3e67fe86743ccb0220fcbd98e22dbfa5fd9e3b7d9f7

Linux

Image

d217149a90f5ed2b3fe6a317b5317c94d4f4988a9065249ce6addf790e42b609

Addresses a series of vulnerabilities found in the InsydeH2O UEFI firmware, which affects the NetBoard A20 security appliances from Deciso.

DEC700 and DEC2700 series

08-2023: Version 28 (latest)

OS

Download

SHA256 Checksum

Windows

Windows installer

0c17614f5c0a2d6216ce6af065a2465e6127893f13bf2257eafa22c01e8bdd78

Linux

Image

9a6a7350c9a29b630273f7200033629b37f08479165e8f5b6a905d81662b0b31

CVE Update.

03-2023: Version 24

OS

Download

SHA256 Checksum

Windows

Windows installer

a4f63ac91a20a74ef32a74e18f791186fba1b281734024fe52f317a59ddc3eb3

Linux

Image

6831eb1945ea71b27c9fe420a842b2a8a6966c53c1935232d57cef35e1598e25

CVE Update and improved fan control.

03-2022: Version 22

OS

Download

SHA256 Checksum

Windows

Windows installer

5fc6fcc98d17d207b29e4e8f9ac5a0765a2f69b2ff058f958e7727519d0b676f

Linux

Image

a4c107d7fa1240fbb1e2fd5368c30d5ff7e66897424cf34942dd260b11eca9b8

Addresses a series of vulnerabilities found in the InsydeH2O UEFI firmware, which affects the NetBoard A10 security appliances from Deciso.


Installation instructions

Updating the UEFI firmware requires writing a bootable image to a USB drive on a separate machine. Make sure you have an empty or unused USB drive before starting this procedure.

Warning

All data on the USB drive will be overwritten. Make sure you have no important data on there. As a general warning, following this procedure is on your own risk.

Step 1

Download the right file depending on your platform from the section above. For Windows, an installer is provided. For Linux, an image is provided.

Step 2

Optionally verify the SHA256 checksum.

Step 3

Insert the USB drive. For Windows, unzip and start the installer executable and follow the instructions. When prompted for a drive select the USB drive.

For Linux, decompress the image and write the image to the USB drive:

cd /<directory where image is located>
bzip2 -d <image name>.bz2
sudo dd if=./<image name>.img of=/dev/<drivename> bs=1024k

Where image name refers to the downloaded image, and drivename refers to the USB drive.

Note

When selecting a drive on Linux, make sure you select the entire drive, not a single partition (e.g. /dev/sdb, not /dev/sdb1)

Step 4

If all went well and no errors occurred, safely remove the USB drive from the computer and plug it into the appliance.

Step 5

Connect to the appliance using a Serial Console connectivity connection. Open a terminal to the relevant COM port.

Step 6

Boot the appliance and enter the BIOS by pressing Escape. The current BIOS version (suffix) should show up. Make note of it so you can compare it to the new version to verify everything went well.

Step 7

Go to Setup Utility –> AMD CBS –> FCH Common Options –> UART Configuration Options –> UART 0 Legacy Options. Make sure this setting is set to Disabled. This is explained in Legacy UART vs. UEFI serial.

Note

Should your serial terminal highlight a BIOS option selection in such a way that it is unreadable, for the A20 appliance it’s the very first option in the UART Configuration Options menu screen.

Step 8

Select Boot manager and boot the USB drive. The UEFI shell will take over and execute the necessary BIOS update. If the update is complete, the machine will power off. Do NOT do anything until the machine has shutdown.

Note

Should the USB drive not show up, something went wrong during writing. The newly created FAT32 partition should be the very first block on the drive. Inspect the drive on a different machine to check the layout.

Step 9

Reboot the machine and check the new BIOS version in either the boot log or the BIOS itself.

Hyper threading

Selected models do support hyper threading, but as effectiveness depends on workload, we tend to disable it by default. If you do want to enable it when supported, enter the setup utility and search for the following menu item:

AMD CBS -> Zen Common Options -> Core/Thread Enablement -> SMTEN

Select Auto here to enable the feature.