Skip to content

Commit e8aa986

Browse files
Copilottlaurion
andcommitted
Update documentation to reflect flashrom->flashprog transition in newer Heads firmware
Co-authored-by: tlaurion <[email protected]>
1 parent 4f67e52 commit e8aa986

File tree

3 files changed

+9
-5
lines changed

3 files changed

+9
-5
lines changed

About/Historical-Legacy-Migration.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ It was possible to upgrade from Legacy to Maximized boards under certain conditi
8686

8787
- **If you come from 1vyrain, this was impossible**. 1vyrain does not unlock neither IFD nor ME regions of the SPI. Consequently, flashing internally anything else then Legacy boards produced ROMs would result in a brick.
8888

89-
- **If coming from Skulls**, if and only optional unlocking step has been followed, you could upgrade internally through a manual flashrom call, just like if you were coming from Heads Legacy boards while having followed the me_cleaning page instructions prior of initial flash.
89+
- **If coming from Skulls**, if and only optional unlocking step has been followed, you could upgrade internally through a manual flash tool call (`flashprog` on newer firmware or `flashrom` on older firmware), just like if you were coming from Heads Legacy boards while having followed the me_cleaning page instructions prior of initial flash.
9090

9191
- **If coming from Skulls or Heads Legacy board configurations** while having unlocked IFD initially, you could flash from the recovery shell manually.
9292

@@ -96,9 +96,11 @@ Having a full xxxx-hotp-maximized or xxxx-maximized board config produced ROM av
9696

9797
```
9898
mount-usb
99-
flashrom -p internal -w /media/PathToMaximizedRom.rom
99+
flashprog -p internal -w /media/PathToMaximizedRom.rom
100100
```
101101

102+
**Note**: Use `flashprog` on newer Heads firmware (2025+) or `flashrom` on older firmware versions, depending on what is available in your Heads system.
103+
102104
On next reboot, Heads would guide you into factory resetting your USB Security dongle or import your previously generated public key matching your USB Security dongle's private key.
103105

104106
It would then regenerate a TOTP/HOTP secret and sign /boot content. You would then have to define a new default boot and optionally renew/change your Disk Unlock Key to be released to to OS to unlock your encrypted OS installation to move forward.

Installing-and-Configuring/Upgrading.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -164,9 +164,11 @@ First, verify the [supported platforms]({{ site.baseurl }}/Prerequisites#support
164164
Review whether the Intel Firmware Descriptor (IFD) and Intel Management Engine (ME) regions are unlocked from the [Recovery Shell]({{ site.baseurl }}/RecoveryShell):
165165

166166
```shell
167-
flashrom -p internal
167+
flashprog -p internal
168168
```
169169

170+
**Note**: On older Heads firmware (pre-2025), use `flashrom -p internal` if `flashprog` is not available. Newer firmware versions use `flashprog` as the flash tool.
171+
170172
The output will show whether you can upgrade internally or need external flashing.
171173

172174
Unlocked IFD and ME (Modern Firmware)
@@ -177,7 +179,7 @@ This is the expected output for modern Heads firmware with unlocked IFD and ME r
177179
- **Current firmware**: You can safely upgrade through the Heads GUI using `.zip` files
178180
- **Very old firmware**: If upgrading from pre-2024 firmware, you may need to manually flash:
179181
- `mount-usb`
180-
- `flashrom -p internal -w /media/heads-current-version-gcommit.rom`
182+
- `flashprog -p internal -w /media/heads-current-version-gcommit.rom` (or `flashrom` on older firmware)
181183
- ![InternalUpgradeToMaximizedROM](https://user-images.githubusercontent.com/827570/167729694-6ff8da60-986a-4ec3-9b2d-4fa94e42d3fa.jpeg)
182184

183185
Locked IFD and ME (Very Old Firmware)

Installing-and-Configuring/configuring-keys.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -146,7 +146,7 @@ inserted. Select "Add a GPG key to the running BIOS" to enter the GPG
146146
Management menu, then "Add a GPG key to the running BIOS + reflash". Follow the
147147
steps and your GPG key will be added to the Heads rom.
148148

149-
Once `flashrom` is complete, reboot and now you should now be back in the Heads
149+
Once the flash tool (`flashprog` on newer firmware or `flashrom` on older firmware) is complete, reboot and now you should now be back in the Heads
150150
runtime. It should display a message that it is unable to unseal TOTP.
151151

152152
## Configuring the TPM

0 commit comments

Comments
 (0)