Have a Question?
How to Use Flashli
Overview
The Vault supports standard AMI BIOS as well as coreboot BIOS. It is possible to update BIOS in the field and it is possible to change from AMI to coreboot and back. There is always a certain degree of user error when manually flashing the BIOS. If an error occurs when attempting to flash a Vault, it is possible to render the device useless. To reduce the risk of user error, Protectli has produced a script that will flash AMI or coreboot to supported Vaults. Protectli’s script, also known as "Flashli", allows users to automate the flashing process.
Flashli is a python script that runs on Linux. It uses the "flashrom" program to flash the BIOS. The script automatically identifies the platform and selects the correct BIOS file. Ubuntu 22.04 has been tested with Flashli. It's recommended to use Ubuntu 22.04 with Flashli version 1.1.32 and newer.
Note: Flashing new firmware onto any hardware is potentially dangerous in that if the procedure is interrupted or otherwise not able to complete, your hardware may be rendered useless. Please proceed with caution only after fully understanding each step of the following instructions. If there are any questions, please contact Protectli support BEFORE proceeding.
Protectli can not be held responsible for devices that are rendered unusable as a result of flashing the BIOS. If your device becomes unusable as a result of a BIOS flashing operation, we will help recover the device, but the customer will be responsible for all shipping costs.
Flashli BIOS Flash Support
Flashli recent version: 1.1.41
Flashli will flash the following AMI or coreboot BIOS
| Model | AMI | coreboot |
|---|---|---|
| FW1 | BTL4A012 | N/A |
| FW2 | BTL4A012 | N/A |
| FW4A | E38L4A12 | N/A |
| FW2B | BSW4L011 | v4.9.0.3 |
| FW4B | BSW4L011 | v4.12.0.8 |
| FW4C | MBSW0103 | v4.12.0.12 |
| FW6A | KBR6L 1.50 | DF_v1.0.14 (4.12) |
| FW6B | KBR6L 1.50 | DF_v1.0.14 (4.12) |
| FW6C | KBR6L 1.50 | DF_v1.0.14 (4.12) |
| FW6D | KBR6L 1.50 | DF_v1.0.14 (4.12) |
| FW6E | KBR6L 1.50 | DF_v1.0.14 (4.12) |
| VP2410 | GLK4L 2.60/ GLK4L 3.10 | coreboot 4.13, Dasharo 1.0.9/ coreboot 4.13, Dasharo 1.0.15 |
| VP2420 | vp2420 v1.02 | v1.1.0 |
| VP4630 | CML6A 2.40 x64 | v1.2.0 |
| VP4650 | CML6A 2.40 x64 | v1.2.0 |
| VP4670 | CMUL6 2.10 x64 | v1.2.0 |
Disabling the BIOS Lock on the Vault Pro 4600 series
The VP series by default has the BIOS lock enabled, but must be disabled prior to using Flashli. If BIOS Lock is not disabled the flash will fail and could brick the device. Verify the BIOS Lock is disabled.
Reboot the device. While rebooting, press “DEL” to enter the BIOS menu.
In AMI, from the main menu;
- Navigate to the Chipset tab
- Select the PCH-IO Configuration option
- Disable BIOS lock by pressing the space bar.
Verify BIOS lock shows Disabled. Save the changes with F4 and allow the system to reboot.
In Coreboot, from the main menu;
- Select Dasharo System Features
- Then select Dasharo Security Options
- Press space bar on Lock the BIOS boot medium to remove the “X”
Save and confirm all changes with F10. Return to the Main Menu by pressing escape and select reset to reboot.
Get Flashli using Ubuntu LiveCD with Firefox
Flashli is located on github, a site used for uploading and sharing code. To download the Flashli files you can access github through [here].
One way to use Flashli is by using Ubuntu LiveCD, which allows you to use Ubuntu without installing the OS. To use LiveCD you have to create a bootable USB drive. Here is how you can create a bootable USB drive [Link].
Ubuntu has to be in Legacy mode for Flashli to work, with the exception of flashing VP series vaults from coreboot to AMI.
(Flashli will allow a VP series and FW4C vault that has coreboot (UEFI) to be flashed to AMI. If any unit besides the VP series and FW4C runs in UEFI mode Flashli will not work.)
Notes: All Flashli procedures are the same on other vaults excluding the BIOS lock.
-
- When Booting the Vault press F11 at the Protectli splash screen.
-
- Verify the boot menu is displayed.
-
- Select the USB drive that does not have UEFI (Unless it is for a VP series vault with coreboot).
-
- Verify that the option is highlighted.
(Example for AMI)
(Example for VP2410 with coreboot)
-
- Verify the unit boots up to the Ubuntu install screen
-
- Select "Try Ubuntu".
-
- Verify the Ubuntu desktop is displayed
-
- Verify the Firefox browser icon is displayed
-
- Select the Firefox browser
-
- Verify the Firefox browser is displayed.
-
- Browse to Protectli github page at https://github.com/protectli-root/protectli-firmware-updater
-
- Verify the github page is displayed
-
- Select the green "Code" button
-
- Verify a dropdown menu appears
-
- Select "Download Zip"
-
- Verify the "Save File" window appears
-
- Select "Save File", press "OK".
-
- To navigate to the download folder, click on the folder icon.
-
- Verify the protectli-firmware-updater.zip appears.
-
- Extract file, right click protectli-firmware-updater.zip and select "extract here".
-
- Verify that protectli-firmware-updater folder appears.
-
- Navigate to the protectli-firmware-updater folder
-
- Verify that "flashli", "images" and "vendor" folders are present.
-
- Verify that "flashbios" file is present
To Run Flashli
-
- Right click anywhere in the white space (not including the left gray area) and select open terminal.
-
- Verify the terminal appears.
-
- In the terminal type the following command and press enter to run the script:
#sudo ./flashbios
-
- Verify that the Flashli menu appears.
-
- Select the option that is applicable.
-
- Verify the script is running.
-
- Verify that messages "flash completed and successful" and "please restart your device appear" or "please POWER OFF the device and turn it back on"
-
- Restart or power off the device
-
- For the VP2420 please power off
-
- Power off by pressing the power button and selecting power off (Ubuntu)
-
- Power off by typing "poweroff" in the terminal (Ubuntu)
-
- Restart or power off the device
If the flash has failed DO NOT turn off or restart the Vault and run the script again from the instruction above.