The Vault supports standard AMI BIOS as well as coreboot BIOS. It is possible to update BIOS in the field and it is possible to change from AMI to coreboot and back. There is always a certain degree of user error when manually flashing the BIOS. If an error occurs when attempting to flash a Vault, it is possible to render the device useless. To reduce the risk of user error, Protectli has produced a script that will flash AMI or coreboot to supported Vaults. Protectli’s script, also known as “Flashli”, allows users to automate the flashing process.
Flashli is a python script that runs on Linux. It uses the “flashrom” program to flash the BIOS. The script automatically identifies the platform and selects the correct BIOS file. Ubuntu 20.04 and Debian 10 buster have been tested with Flashli.
Note: Flashing new firmware onto any hardware is potentially dangerous in that if the procedure is interrupted or otherwise not able to complete, your hardware may be rendered useless. Please proceed with caution only after fully understanding each step of the following instructions. If there are any questions, please contact Protectli support BEFORE proceeding.
Protectli can not be held responsible for devices that are rendered unusable as a result of flashing the BIOS. If your devices becomes unusable as a result of a BIOS flashing operation, we will help recover the device, but the customer will be responsible for all shipping costs.
Flashli BIOS Flash Support
Flashli recent version: 1.1.23
Flashli will flash the following AMI or coreboot BIOS
|FW6A||KBR6L 1.50||DF_v1.0.14 (4.12)|
|FW6B||KBR6L 1.50||DF_v1.0.14 (4.12)|
|FW6C||KBR6L 1.50||DF_v1.0.14 (4.12)|
|FW6D||KBR6L 1.50||DF_v1.0.14 (4.12)|
|FW6E||KBR6L 1.50||DF_v1.0.14 (4.12)|
|coreboot 4.13, Dasharo 1.0.9/
coreboot 4.13, Dasharo 1.0.15
|VP4630||CML6A 1.70 x64||v1.0.17|
Get Flashli using Ubuntu LiveCD with Firefox
Flashli is located on github, a site used for uploading and sharing code. To download the Flashli files you can access github through [here].
One way to use Flashli is by using Ubuntu LiveCD, which allows you to use Ubuntu without installing the OS. To use LiveCD you have to create a bootable USB drive. Here is how you can create a bootable USB drive [Link].
Ubuntu has to be in Legacy mode for Flashli to work, with the exception of flashing VP series vaults from coreboot to AMI.
(Flashli will allow a VP series vault that has coreboot (UEFI) to be flashed to AMI. If any unit besides VP2410 run in UEFI mode Flashli will not work.)
Notes: The procedure for flashing a VP series vault using Flashli is the same as other units.
- When Booting the Vault press F11 at the Protectli splash screen.
- Verify the boot menu is displayed.
- Select the USB drive that does not have UEFI (Unless it is for a VP series vault with coreboot).
- Verify that the option is highlighted.
(Example for AMI)
(Example for VP2410 with coreboot)
- Verify the unit boots up to the Ubuntu install screen
- Select “Try Ubuntu”.
- Verify the Ubuntu desktop is displayed
- Verify the Firefox browser icon is displayed
- Select the Firefox browser
- Verify the Firefox browser is displayed.
- Browse to Protectli github page at https://github.com/protectli-root/protectli-firmware-updater
- Verify the github page is displayed
- Select the green “Code” button
- Verify a dropdown menu appears
- Select “Download Zip”
- Verify the “Save File” window appears
- Select “Save File”, press “OK”.
- To navigate to the download folder, click on the folder icon.
- Verify the windows folder appears.
- Select the “Downloads” folder
- Verify the protectli-firmware-updater.zip appears.
- Extract file, right click protectli-firmware-updater.zip and select “extract here”.
- Verify that protectli-firmware-updater folder appears.
- Navigate to the protectli-firmware-updater folder
- Verify that “flashli”, “images” and “vendor” folders are present.
- Verify that “flashbios” file is present
To Run Flashli
- Right click anywhere in the white space (not including the left gray area) and select open terminal.
- Verify the terminal appears.
- In the terminal type the following command and press enter to run the script:
- Verify that the Flashli menu appears.
- Select the option that is applicable.
- Verify the script is running.
- Verify that messages “flash completed and successful” and “please restart your device appear”.
- Restart the device
If the flash has failed DO NOT turn off or restart the Vault and run the script again from the instruction above.