CINXE.COM

<!DOCTYPE html> <html lang="en" dir="ltr"> <head> <meta charset="utf-8"> <meta name="generator" content="pandoc"> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=yes">  <meta property="og:title" content="Libreboot – Libreboot installation guides"> <meta property="og:type" content="article" /> <meta property="og:image" content="https://av.vimuser.org/bootmenu.jpg"> <meta property="og:url" content="https://libreboot.org/docs/install/"> <meta name="twitter:card" content="summary_large_image"> <meta property="og:description" content="Libreboot – Libreboot installation guides"> <meta property="og:site_name" content="Libreboot – Libreboot installation guides"> <meta name="twitter:image:alt" content="Libreboot – Libreboot installation guides"> <title>Libreboot – Libreboot installation guides</title> <link rel="stylesheet" href="/global.css"> <link rel="stylesheet" href=""> <link rel="alternate" type="application/rss+xml" title="RSS Feed" href="/feed.xml"/> </head> <body> <div class="page"> <header> <div class="title"> <p class="title-logo"> <img loading="lazy" class="title-logo" alt="Libreboot logo" src="/favicon.ico" /> </p> <h1 class="title">Libreboot installation guides</h1> </div> <ul> <li><a href="/">Home</a></li> <li><a href="/faq.html">FAQ</a></li> <li><a href="/download.html">Download</a></li> <li>-</li> <li style="font-size:1.3em;"><em><strong><a href="https://minifree.org/">Buy Libreboot preinstalled</a></strong></em></li> <li>-</li> <li><a href="/docs/install/">Install</a></li> <li><a href="/docs/">Docs</a></li> <li><a href="/news/">News</a></li> <li><a href="https://codeberg.org/libreboot/lbmk/issues">Bugs</a></li> <li><a href="/tasks/">TODO</a></li> <li><a href="/git.html">Send patch</a></li> <li><a href="/contact.html">Contact</a></li> <li>-</li> <li style="font-size:1.3em;"><em><strong><a href="https://www.patreon.com/libreleah">Donate</a></strong></em></li> </ul> <hr/> </header> <nav id="TOC"> <h1>Navigate this page:</h1> <ul> <li><a href="#safety-warning"><strong>SAFETY WARNING!</strong></a></li> <li><a href="#install-libreboot-via-external-flashing">Install Libreboot via external flashing</a></li> <li><a href="#need-help">Need help?</a></li> <li><a href="#which-systems-are-supported-by-libreboot">Which systems are supported by Libreboot?</a> <ul> <li><a href="#games-consoles">Games consoles</a></li> <li><a href="#servers-amd-x86">Servers (AMD, x86)</a></li> <li><a href="#desktops-amd-intel-x86">Desktops (AMD, Intel, x86)</a></li> <li><a href="#laptops-intel-x86">Laptops (Intel, x86)</a></li> <li><a href="#laptops-arm-with-u-boot-payload">Laptops (ARM, with U-Boot payload)</a></li> <li><a href="#emulation">Emulation</a></li> </ul></li> <li><a href="#disable-security-before-flashing"><strong>Disable security before flashing</strong></a></li> <li><a href="#rom-image-file-names">ROM image file names</a></li> <li><a href="#ec-firmware-updates">EC firmware updates</a> <ul> <li><a href="#thinkpads">ThinkPads</a></li> <li><a href="#hp-elitebooks">HP EliteBooks</a></li> <li><a href="#other">Other</a></li> </ul></li> <li><a href="#libreboot-installation-instructions">Libreboot installation instructions</a> <ul> <li><a href="#intel-gbe-mac-address-ifd-based-systems">Intel GbE MAC address (IFD-based systems)</a></li> <li><a href="#flash-lockdown-boot-security">Flash lockdown / boot security</a></li> <li><a href="#updating-an-existing-installation">Updating an existing installation</a></li> <li><a href="#hp-elitebook-820-g2-internal-and-external">HP EliteBook 820 G2 (internal and external)</a></li> <li><a href="#hp-elitebook-8560w-vendor-bios">HP EliteBook 8560w (vendor BIOS)</a></li> <li><a href="#dell-latitude-laptops-vendor-bios">Dell Latitude laptops (vendor BIOS)</a></li> <li><a href="#thinkpad-x200t400t500w500r400r500">ThinkPad X200/T400/T500/W500/R400/R500</a></li> <li><a href="#intel-d510mod410pt-vendor-bios">Intel D510MO/D410PT (vendor BIOS)</a></li> <li><a href="#gigabyte-ga-g41m-es2l-vendor-bios">Gigabyte GA-G41M-ES2L (vendor BIOS)</a></li> <li><a href="#acer-g43t-am3-vendor-bios">Acer G43T-AM3 (vendor BIOS)</a></li> <li><a href="#macbook-11-21-imac-52-vendor-bios">MacBook 1,1 / 2,1 / iMac 5,2 (vendor BIOS)</a></li> <li><a href="#asus-kcma-d8-kgpe-d16-vendor-bios">ASUS KCMA-D8 / KGPE-D16 (vendor BIOS)</a></li> <li><a href="#asus-kfsn4-dre-vendor-bios">ASUS KFSN4-DRE (vendor BIOS)</a></li> <li><a href="#intel-d945gclf-vendor-bios">Intel D945GCLF (vendor BIOS)</a></li> <li><a href="#dell-optiplex-3050-micro-vendor-bios">Dell OptiPlex 3050 Micro (vendor BIOS)</a></li> <li><a href="#dell-optiplex-70109010-sff-vendor-bios">Dell OptiPlex 7010/9010 SFF (vendor BIOS)</a></li> <li><a href="#dell-optiplex-70109010-mt-vendor-bios">Dell OptiPlex 7010/9010 MT (vendor BIOS)</a></li> <li><a href="#dell-precision-t1650-desktop">Dell Precision T1650 desktop</a></li> <li><a href="#dell-optiplex-70209020xe2-sffmt-precision-t1700">Dell OptiPlex 7020/9020/XE2 SFF/MT / Precision T1700</a></li> <li><a href="#hp-elitebook-laptops-vendor-bios">HP EliteBook laptops (vendor BIOS)</a></li> <li><a href="#hp-elite-8200-sff-vendor-bios">HP Elite 8200 SFF (vendor BIOS)</a></li> <li><a href="#hp-elite-8300-usdt-vendor-bios">HP Elite 8300 USDT (vendor BIOS)</a></li> <li><a href="#thinkpad-x220x220tt420t420st520">ThinkPad X220/X220T/T420/T420s/T520</a></li> <li><a href="#thinkpad-x230t430t530w530x230t">ThinkPad X230/T430/T530/W530/X230T</a></li> <li><a href="#thinkpad-t60x60x60tabletx60s">ThinkPad T60/X60/X60Tablet/X60S</a></li> <li><a href="#thinkpad-t440pw541-vendor-bios">Thinkpad T440p/W541 (vendor BIOS)</a></li> <li><a href="#hp-elitebook-laptops-vendor-bios-1">HP EliteBook laptops (vendor BIOS)</a></li> <li><a href="#hp-elite-desktops-vendor-bios">HP Elite desktops (vendor BIOS)</a></li> <li><a href="#arm-based-chromebooks">ARM-based Chromebooks</a></li> <li><a href="#qemu-arm64-and-x86">QEMU (arm64 and x86)</a></li> </ul></li> <li><a href="#install-via-host-cpu-internal-flashing">Install via host CPU (internal flashing)</a> <ul> <li><a href="#run-flashprog-on-host-cpu">Run flashprog on host CPU</a> <ul> <li><a href="#flash-chip-size">Flash chip size</a></li> <li><a href="#howto-readwriteerase-the-boot-flash">Howto: read/write/erase the boot flash</a></li> </ul></li> </ul></li> <li><a href="#removed-boards">Removed boards</a> <ul> <li><a href="#notes-about-removed-boards">NOTES about removed boards</a></li> </ul></li> </ul> </nav> <div class="pagetext"> <p><a href="../">Return to previous index</a></p> <p>This article will teach you how to install Libreboot, on any of the supported laptop, desktop and server motherboards.</p> <p><strong>ALWAYS remember to make a backup of the current flash, when overwriting it, regardless of what firmware you currently have and what firmware you’re re-flashing it with; this includes updates between Libreboot releases. Use the <code>-r</code> option in flashprog instead <code>-w</code>, to read from the flash.</strong></p> <div class="h"><h1 id="safety-warning"><strong>SAFETY WARNING!</strong></h1><a aria-hidden="true" href="#safety-warning">[link]</a></div> <p><strong>IMPORTANT ADVICE: <a href="../../news/safety.html">PLEASE READ THESE INSTRUCTIONS BEFORE INSTALLING/UPDATING LIBREBOOT</a>.</strong>]</p> <p><strong>If you’re using release ROMs, some files may be missing inside them, and must be added. See: <a href="ivy_has_common.html">Inserting Vendor Files</a>.</strong></p> <p>If you’re <a href="../build/">building from source</a>, you can ignore the above guidance.</p> <div class="h"><h1 id="install-libreboot-via-external-flashing">Install Libreboot via external flashing</h1><a aria-hidden="true" href="#install-libreboot-via-external-flashing">[link]</a></div> <p>Refer to the following article:<br /> <a href="spi.html">Externally rewrite 25xx NOR flash via SPI protocol</a></p> <p>You are strongly advised to <em>have</em> an external flashing setup, and make sure it works, before attempting internal flashing. This, in addition to making a backup of the current flash contents, prior to flashing, whether you dump externally or internally - if only external flashing is available, then it’s usually the case that only external dumping is available too.</p> <div class="h"><h1 id="need-help">Need help?</h1><a aria-hidden="true" href="#need-help">[link]</a></div> <p>Help is available on <a href="../../contact.html">Libreboot IRC</a> and other channels.</p> <p>If you want professional installation, Minifree Ltd sells <a href="https://minifree.org/">Libreboot pre-installed</a> on select hardware, and it also provides a <a href="https://minifree.org/product/installation-service/">Libreboot preinstall service</a> if you want to send your machine in to have Libreboot installed for you.</p> <p>Leah Rowe, the founder and lead developer of Libreboot, also owns and operates Minifree Ltd; sales provide funding for the Libreboot project.</p> <div class="h"><h1 id="which-systems-are-supported-by-libreboot">Which systems are supported by Libreboot?</h1><a aria-hidden="true" href="#which-systems-are-supported-by-libreboot">[link]</a></div> <p>Before actually reading the installation guides, please ensure that your system is fully supported by Libreboot. More information about the Libreboot build system can be found in the <a href="../maintain/">lbmk maintenance manual</a>, and information about porting new systems in the <a href="../maintain/porting.html">porting manual</a>.</p> <p>With x86 machines, you can use the SeaBIOS or GNU GRUB payloads. On ARM systems, you can use the U-Boot payload (coreboot still initialises hardware).</p> <p>Libreboot currently supports the following systems:</p> <div class="h"><h2 id="games-consoles">Games consoles</h2><a aria-hidden="true" href="#games-consoles">[link]</a></div> <ul> <li><a href="playstation.html">Sony Playstation</a> (PS1/PSX)</li> </ul> <div class="h"><h2 id="servers-amd-x86">Servers (AMD, x86)</h2><a aria-hidden="true" href="#servers-amd-x86">[link]</a></div> <ul> <li><a href="kfsn4-dre.html">ASUS KFSN4-DRE motherboard</a></li> <li><a href="kgpe-d16.html">ASUS KGPE-D16 motherboard</a></li> </ul> <div class="h"><h2 id="desktops-amd-intel-x86">Desktops (AMD, Intel, x86)</h2><a aria-hidden="true" href="#desktops-amd-intel-x86">[link]</a></div> <ul> <li><strong><a href="dell9020.html">Dell OptiPlex 7020/9020 MT and SFF</a> - Also <a href="https://minifree.org/product/libreboot-9020/">available to buy with Libreboot preinstalled</a></strong> - Dell OptiPlex XE2 MT/SFF also known to work</li> <li><a href="acer_g43t-am3.html">Acer G43T-AM3</a></li> <li>Apple iMac 5,2</li> <li><a href="kcma-d8.html">ASUS KCMA-D8 motherboard</a></li> <li>Dell OptiPlex 7010 <strong>MT</strong> (known to work, using the T1650 ROM, but more research is needed) - 9010 also known to work. No GPIO changes, so it should be safe to flash.</li> <li><a href="dell780.html">Dell OptiPlex 780 variants e.g. MT, USFF</a></li> <li><a href="dell3050.html">Dell OptiPlex 3050 Micro</a></li> <li><a href="dell7010.html">Dell OptiPlex 7010/9010 SFF</a> <strong>(for MT, please use the T1650 image)</strong></li> <li>Dell Precision T1700 (use the same ROM as 9020 MT, but it won’t have ECC support)</li> <li><a href="t1650.html">Dell Precision T1650</a> <strong>(the same ROM works on 7010/9010 MT variant)</strong></li> <li><a href="ga-g41m-es2l.html">Gigabyte GA-G41M-ES2L motherboard</a></li> <li><a href="hp8200sff.html">HP Elite 8200 SFF/MT</a> (HP 6200 Pro Business probably works too)</li> <li><a href="hp8300usdt.html">HP Elite 8300 USDT</a></li> <li>Intel D510MO and D410PT motherboards</li> <li><a href="d945gclf.html">Intel D945GCLF</a></li> </ul> <div class="h"><h2 id="laptops-intel-x86">Laptops (Intel, x86)</h2><a aria-hidden="true" href="#laptops-intel-x86">[link]</a></div> <ul> <li><strong>Lenovo ThinkPad T440p - Also <a href="https://minifree.org/product/libreboot-t440p/">available to buy with Libreboot preinstalled</a></strong></li> <li><strong>Lenovo ThinkPad W541 - Also <a href="https://minifree.org/product/libreboot-w541/">available to buy with Libreboot preinstalled</a></strong> - NOTE: W540 also compatible (same mainboard, so flash the same ROM)</li> <li>Lenovo ThinkPad X230 - <em>Also</em> available on Minifree: <a href="https://minifree.org/product/libreboot-x230/" class="uri">https://minifree.org/product/libreboot-x230/</a></li> <li><a href="macbook21.html">Apple MacBook1,1 and MacBook2,1</a></li> <li><a href="latitude.html">Dell Latitude E4300, E6400, E6400 XFR and E6400 ATG, all with Nvidia or Intel GPU</a></li> <li><a href="latitude.html">Dell Latitude E5420, E5520, E5530, E6420, E6430, E6520, E6530, E6230, E6330, E6220</a> (Intel GPU variants only)</li> <li><a href="hp2170p.html">HP EliteBook 2170p</a></li> <li><a href="hp2560p.html">HP EliteBook 2560p</a></li> <li><a href="hp2570p.html">HP EliteBook 2570p</a></li> <li><a href="hp820g2.html">HP EliteBook 820 G2</a></li> <li><a href="hp8460p.html">HP EliteBook 8460p</a></li> <li><a href="hp8470p.html">HP EliteBook 8470p</a></li> <li><a href="hp8560w.html">HP EliteBook 8560w</a></li> <li><a href="hp9470m.html">HP EliteBook Folio 9470m</a></li> <li><a href="r400.html">Lenovo ThinkPad R400</a></li> <li>Lenovo ThinkPad R500</li> <li><a href="t400.html">Lenovo ThinkPad T400 / T400S</a></li> <li>Lenovo Thinkpad T420 / T420S</li> <li>Lenovo ThinkPad T430 (<strong>but not the T430S</strong>)</li> <li><a href="t500.html">Lenovo ThinkPad T500 / W500</a></li> <li>Lenovo ThinkPad T520 / W520 / T530 / W530</li> <li>Lenovo ThinkPad T60, X60, X60S, X60 Tablet (with Intel GPU)</li> <li><a href="x200.html">Lenovo ThinkPad X200 / X200S / X200 Tablet</a></li> <li>Lenovo Thinkpad X220 / X200 Tablet</li> <li><a href="x230_external.html">Lenovo Thinkpad X230 / X230 Tablet</a></li> </ul> <div class="h"><h2 id="laptops-arm-with-u-boot-payload">Laptops (ARM, with U-Boot payload)</h2><a aria-hidden="true" href="#laptops-arm-with-u-boot-payload">[link]</a></div> <ul> <li><a href="chromebooks.html">ASUS Chromebook Flip C101 (gru-bob)</a></li> <li><a href="chromebooks.html">Samsung Chromebook Plus (v1) (gru-kevin)</a></li> </ul> <div class="h"><h2 id="emulation">Emulation</h2><a aria-hidden="true" href="#emulation">[link]</a></div> <ul> <li><a href="../misc/emulation.html">Qemu x86 and arm64</a></li> </ul> <div class="h"><h1 id="disable-security-before-flashing"><strong>Disable security before flashing</strong></h1><a aria-hidden="true" href="#disable-security-before-flashing">[link]</a></div> <p><strong>Before internal flashing, you must first disable <code>/dev/mem</code> protections. Make sure to re-enable them after you’re finished.</strong></p> <p><strong>See: <a href="devmem.html">Disabling /dev/mem protection</a></strong></p> <div class="h"><h1 id="rom-image-file-names">ROM image file names</h1><a aria-hidden="true" href="#rom-image-file-names">[link]</a></div> <p>Libreboot ROM images are named like this: <code>payload_board_inittype_displaytype_keymap.rom</code></p> <p>The <code>payload</code> option can be SeaBIOS, SeaGRUB or U-Boot. If GRUB is available on a given board, in flash, both SeaBIOS and SeaGRUB are provided; SeaBIOS images still have GRUB available via the SeaBIOS menu, and SeaGRUB means that SeaBIOS automatically loads GRUB from flash first (but you can still choose something else, by pressing ESC in SeaBIOS when prompted).</p> <p>Inittype can be <code>libgfxinit</code>, <code>vgarom</code> or <code>normal</code>. The <code>libgfxinit</code> option means coreboot provides native video initialisation, for onboard graphics. The <code>vgarom</code> option means coreboot executes a VGA option ROM for video initialisation. The <code>normal</code> option means coreboot provides no video initialisation, via VGA ROM or native code.</p> <p>Displaytype can be <code>txtmode</code> or <code>corebootfb</code> - if inittype is <code>normal</code>, this is ignored because <code>txtmode</code> is assumed.</p> <p>If <code>payload</code> is <code>seabios</code> instead of <code>seagrub</code>, no keymaps are inserted into flash and only US QWERTY is assumed, otherwise the keymap refers to what is used in GRUB on <code>seagrub</code> payload setups.</p> <p>If you use a libgfxinit image on a desktop machine, you can still insert a graphics card and it’ll work just fine; its own VGA option ROM will be executed instead, if the primary payload is SeaBIOS, whether that be pure SeaBIOS or a SeaGRUB setup.</p> <div class="h"><h1 id="ec-firmware-updates">EC firmware updates</h1><a aria-hidden="true" href="#ec-firmware-updates">[link]</a></div> <p>Obviously, free EC firmware would be preferable, but it is not the case on all machine. We would like to have free EC firmware on more machines, but for now, we must rely on the vendor in a lot of cases. The EC is usually on a separate flash, so you wouldn’t think about it unless you knew it was there; this is exactly why it’s mentioned, so that you think about it, <a href="../../news/policy.html">because proprietary software is bad</a>.</p> <p>In many cases, the EC firmware must be updated on a separate IC to the main boot flash, and this can usually only be done with the vendor’s own tool, running from the vendor boot firmware, and usually only on Windows, because they provide EC and BIOS/UEFI updates in the same utility. Find out what you need to do for your machine before installing Libreboot.</p> <p>It is recommended that you update to the latest EC firmware version. The <a href="../../faq.html#ec-embedded-controller-firmware">EC firmware</a></p> <p>Updating the EC can sometimes provide benefit depending on the vendor. For example, they might fix power issues that could then enhance battery life.</p> <div class="h"><h2 id="thinkpads">ThinkPads</h2><a aria-hidden="true" href="#thinkpads">[link]</a></div> <p>See: <a href="http://www.thinkwiki.org/wiki/BIOS_update_without_optical_disk" class="uri">http://www.thinkwiki.org/wiki/BIOS_update_without_optical_disk</a></p> <p>Otherwise, check the Lenovo website to find the update utility for your mainboard.</p> <div class="h"><h2 id="hp-elitebooks">HP EliteBooks</h2><a aria-hidden="true" href="#hp-elitebooks">[link]</a></div> <p>EC firmware is required in the main boot flash, but Libreboot’s build system automatically downloads this from HP for each machine, and inserts it, so you don’t have to worry. Just make sure that <a href="ivy_has_common.html">vendor files are inserted</a> if using release images.</p> <div class="h"><h2 id="other">Other</h2><a aria-hidden="true" href="#other">[link]</a></div> <p>The same wisdom applies to other laptop vendors.</p> <p>Non-laptops typically do not have embedded controllers in them.</p> <div class="h"><h1 id="libreboot-installation-instructions">Libreboot installation instructions</h1><a aria-hidden="true" href="#libreboot-installation-instructions">[link]</a></div> <p>In general, if Libreboot is already running, you can skip towards the final section on this page, which provides general internal flashing instructions. Internal flashing is when you flash the target machine from the target machine, inside an operating system running on it.</p> <p>Some boards require special steps, even if Libreboot is already running, for example if you <a href="../linux/grub_hardening.html">locked down the flash</a>, or as another example, <a href="hp820g2.html">SureStart on HP EliteBook 820 G2</a></p> <p>Therefore, before following generic guides, make sure to check first whether your board has special instructions, otherwise use the generic guide at the end of this article.</p> <div class="h"><h2 id="intel-gbe-mac-address-ifd-based-systems">Intel GbE MAC address (IFD-based systems)</h2><a aria-hidden="true" href="#intel-gbe-mac-address-ifd-based-systems">[link]</a></div> <p>On all Intel platforms except X4X (e.g. Gigabyte GA-G41M-ES2L) and i945 ones (e.g. ThinkPad X60, ThinkPad T60, MacBook2,1), an Intel Flash Descriptor is used. If the board has Intel gigabit ethernet, the MAC address is included in flash, and can (must) be changed prior to installation.</p> <p>You can use <a href="nvmutil.html">nvmutil</a> to change the MAC address. You will perform this modification to the ROM image, before flashing it.</p> <div class="h"><h2 id="flash-lockdown-boot-security">Flash lockdown / boot security</h2><a aria-hidden="true" href="#flash-lockdown-boot-security">[link]</a></div> <p>This is referred to informally as <em>Secure libreBoot</em>.</p> <p>Full flash lockdown is possible, with cryptographic verification of your Linux kernel and other files, using special features in the GRUB payload.</p> <p>See: <a href="../linux/grub_hardening.html">GRUB hardening / Secure libreBoot</a></p> <p>If you already did this, it’s possible that you may no longer be able to flash internally. If that is the case, you must <a href="spi.html">flash externally</a>.</p> <div class="h"><h2 id="updating-an-existing-installation">Updating an existing installation</h2><a aria-hidden="true" href="#updating-an-existing-installation">[link]</a></div> <p>Unless otherwise stated, in sections pertaining to each mainboard below, an existing Libreboot installation can be updated via internal flashing, without any special steps; simply follow the general internal flashing guide, in the final section further down this page.</p> <p>If you have an existing Libreboot installation but you <em>locked down the flash</em>, updating it will require external flashing.</p> <p>If you currently have the factory firmware, you probably need to flash externally; on <em>some</em> machines, internal flashing is possible, usually with special steps required that differ from updating an existing installation.</p> <p>The next sections will pertain to specific mainboards, where indicated, followed by general internal flashing instructions where applicable.</p> <div class="h"><h2 id="hp-elitebook-820-g2-internal-and-external">HP EliteBook 820 G2 (internal and external)</h2><a aria-hidden="true" href="#hp-elitebook-820-g2-internal-and-external">[link]</a></div> <p>See: <a href="hp820g2.html">HP EliteBook 820 G2 flashing guide</a></p> <p>The flashprog command is identical, except programmer selection, on external and internal flashing; internal is only possible if you already have Libreboot.</p> <div class="h"><h2 id="hp-elitebook-8560w-vendor-bios">HP EliteBook 8560w (vendor BIOS)</h2><a aria-hidden="true" href="#hp-elitebook-8560w-vendor-bios">[link]</a></div> <p>If you have the factory firmware: <a href="hp8560w.html">HP 8560w external flashing guide</a></p> <div class="h"><h2 id="dell-latitude-laptops-vendor-bios">Dell Latitude laptops (vendor BIOS)</h2><a aria-hidden="true" href="#dell-latitude-laptops-vendor-bios">[link]</a></div> <p>See: <a href="latitude.html">Dell Latitude flashing guide</a></p> <p>This applies to all supported Dell Latitude models. Remember to <a href="nvmutil.html">update the MAC address with nvmutil</a>, before flashing.</p> <div class="h"><h2 id="thinkpad-x200t400t500w500r400r500">ThinkPad X200/T400/T500/W500/R400/R500</h2><a aria-hidden="true" href="#thinkpad-x200t400t500w500r400r500">[link]</a></div> <p>If you’re running one of these with Lenovo BIOS, you must externally flash Libreboot, because the original firmware restricts writes to the flash.</p> <p>There machines all use SOIC8/SOIC16 flash ICs. Refer to pages specifically for each machine:</p> <ul> <li><a href="x200.html">ThinkPad X200</a></li> <li><a href="t400.html">ThinkPad T400</a></li> <li><a href="r400.html">ThinkPad R400</a></li> <li><a href="t500.html">ThinkPad T500/W500</a> (R500 is similar)</li> </ul> <p>NOTE: T400S, X200S and X200 Tablet require different steps, because these have WSON8 flash ICs on them, which will require some soldering. Please read the <a href="spi.html">external flashing guide</a> in the section pertaining to WSON.</p> <p>You can find WSON8 probes online, that are similar to a SOIC8/SOIC16 clip. Your mileage may very, but WSON8 has the same pinout as SOIC8 so you might have some luck with that.</p> <div class="h"><h2 id="intel-d510mod410pt-vendor-bios">Intel D510MO/D410PT (vendor BIOS)</h2><a aria-hidden="true" href="#intel-d510mod410pt-vendor-bios">[link]</a></div> <p>See: <a href="spi.html">External flashing guide</a> - both boards are compatible with the same image.</p> <div class="h"><h2 id="gigabyte-ga-g41m-es2l-vendor-bios">Gigabyte GA-G41M-ES2L (vendor BIOS)</h2><a aria-hidden="true" href="#gigabyte-ga-g41m-es2l-vendor-bios">[link]</a></div> <p>Internal flashing is possible, from factory BIOS to Libreboot, but special steps are required.</p> <p>See: <a href="ga-g41m-es2l.html">Gigabyte GA-G41M-ES2L installation guide</a></p> <div class="h"><h2 id="acer-g43t-am3-vendor-bios">Acer G43T-AM3 (vendor BIOS)</h2><a aria-hidden="true" href="#acer-g43t-am3-vendor-bios">[link]</a></div> <p>See: <a href="acer_g43t-am3.html">Acer G43T-AM3</a></p> <div class="h"><h2 id="macbook-11-21-imac-52-vendor-bios">MacBook 1,1 / 2,1 / iMac 5,2 (vendor BIOS)</h2><a aria-hidden="true" href="#macbook-11-21-imac-52-vendor-bios">[link]</a></div> <p>MacBook <em>1,1</em> requires <a href="spi.html">external flashing</a>. MacBook <em>2,1</em> can always be flashed internally. iMac 5,2 can be flashed internally.</p> <p>Also check the <a href="macbook21.html">Macbook2,1 hardware page</a></p> <div class="h"><h2 id="asus-kcma-d8-kgpe-d16-vendor-bios">ASUS KCMA-D8 / KGPE-D16 (vendor BIOS)</h2><a aria-hidden="true" href="#asus-kcma-d8-kgpe-d16-vendor-bios">[link]</a></div> <p><a href="spi.html">You must flash it externally</a> (DIP-8 section) - also look at the <a href="kgpe-d16.html">KGPE-D16 hardware page</a>.</p> <p>Further information is available on the <a href="kcma-d8.html">KCMA-D8 page</a>.</p> <p>KGPE-D16 installation is essentially the same, with the same type of flash IC (DIP-8). Refer to the external flashing guide.</p> <div class="h"><h2 id="asus-kfsn4-dre-vendor-bios">ASUS KFSN4-DRE (vendor BIOS)</h2><a aria-hidden="true" href="#asus-kfsn4-dre-vendor-bios">[link]</a></div> <p>This board uses LPC flash in a PLCC32 socket. This coreboot page shows an example of the push pin as a proof of concept: <a href="http://www.coreboot.org/Developer_Manual/Tools#Chip_removal_tools" class="uri">http://www.coreboot.org/Developer_Manual/Tools#Chip_removal_tools</a></p> <p>See: <a href="kfsn4-dre.html">ASUS KFSN4-DRE guide</a></p> <p>Hot-swap the flash IC with another one while it’s running, and flash it internally.</p> <div class="h"><h2 id="intel-d945gclf-vendor-bios">Intel D945GCLF (vendor BIOS)</h2><a aria-hidden="true" href="#intel-d945gclf-vendor-bios">[link]</a></div> <p>See: <a href="d945gclf.html">Intel D945GCLF flashing guide</a></p> <div class="h"><h2 id="dell-optiplex-3050-micro-vendor-bios">Dell OptiPlex 3050 Micro (vendor BIOS)</h2><a aria-hidden="true" href="#dell-optiplex-3050-micro-vendor-bios">[link]</a></div> <p>Refer to the <a href="dell3050.html">3050 Micro page</a>. Internal flashing also possible. This has the Intel Boot Guard, but Libreboot uses the <em>deguard</em> utility to disable the Boot Guard on this Intel 7th gen board.</p> <div class="h"><h2 id="dell-optiplex-70109010-sff-vendor-bios">Dell OptiPlex 7010/9010 SFF (vendor BIOS)</h2><a aria-hidden="true" href="#dell-optiplex-70109010-sff-vendor-bios">[link]</a></div> <p>Refer to the <a href="dell7010.html">7010/9020 SFF page</a>. Internal flashing also possible. NOTE: If you have the <em>MT</em> variant, read the sections below instead (the SFF ROM is only for SFF).</p> <div class="h"><h2 id="dell-optiplex-70109010-mt-vendor-bios">Dell OptiPlex 7010/9010 MT (vendor BIOS)</h2><a aria-hidden="true" href="#dell-optiplex-70109010-mt-vendor-bios">[link]</a></div> <p>This board is essentially identical to the Dell Precision T1650, except that it does not support ECC memory. Same wiring.</p> <p>You can flash the T1650 image on this machine. NOTE: This applies to the MT variant, specifically. Do not flash T1650 images on the 7010/9010 <em>SFF</em>.</p> <div class="h"><h2 id="dell-precision-t1650-desktop">Dell Precision T1650 desktop</h2><a aria-hidden="true" href="#dell-precision-t1650-desktop">[link]</a></div> <p>Refer to the <a href="t1650.html">T1650 hardware page</a>. External flashing required, or you can set the Service Mode jumper and flash internally (from vendor firmware, to Libreboot).</p> <div class="h"><h2 id="dell-optiplex-70209020xe2-sffmt-precision-t1700">Dell OptiPlex 7020/9020/XE2 SFF/MT / Precision T1700</h2><a aria-hidden="true" href="#dell-optiplex-70209020xe2-sffmt-precision-t1700">[link]</a></div> <p>Refer to the <a href="dell9020.html">7020/9020 hardware page</a>. Internal flashing (from vendor firmware to Libreboot) is possible if you set the Service Mode jumper.</p> <div class="h"><h2 id="hp-elitebook-laptops-vendor-bios">HP EliteBook laptops (vendor BIOS)</h2><a aria-hidden="true" href="#hp-elitebook-laptops-vendor-bios">[link]</a></div> <p>Refer to the <a href="">hardware page</a> for info about HP laptops, and read the <a href="spi.html">external flashing guide</a>.</p> <p>Links to specific HP laptop pages:</p> <ul> <li><a href="hp2170p.html">HP EliteBook 2170p</a></li> <li><a href="hp2560p.html">HP EliteBook 2560p</a></li> <li><a href="hp2570p.html">HP EliteBook 2570p</a></li> <li><a href="hp820g2.html">HP EliteBook 820 G2</a></li> <li><a href="hp8460p.html">HP EliteBook 8460p</a></li> <li><a href="hp8470p.html">HP EliteBook 8470p</a></li> <li><a href="hp9470m.html">HP EliteBook Folio 9470m</a></li> </ul> <p>These pages provide more info about external flashing. You must remember to <a href="ivy_has_common.html">insert vendor files</a>, if you’re using release ROMs.</p> <div class="h"><h2 id="hp-elite-8200-sff-vendor-bios">HP Elite 8200 SFF (vendor BIOS)</h2><a aria-hidden="true" href="#hp-elite-8200-sff-vendor-bios">[link]</a></div> <p>See: <a href="hp8200sff.html">HP Elite 8200 SFF install guide</a></p> <div class="h"><h2 id="hp-elite-8300-usdt-vendor-bios">HP Elite 8300 USDT (vendor BIOS)</h2><a aria-hidden="true" href="#hp-elite-8300-usdt-vendor-bios">[link]</a></div> <p>See: <a href="hp8300usdt.html">HP Elite 8200 USDT install guide</a></p> <div class="h"><h2 id="thinkpad-x220x220tt420t420st520">ThinkPad X220/X220T/T420/T420s/T520</h2><a aria-hidden="true" href="#thinkpad-x220x220tt420t420st520">[link]</a></div> <p>T420/T520: <a href="t420_external.html">T420 flash instructions</a></p> <p>T420s/T520 are similar, in terms of assembly/disassembly.</p> <p>Now, as for X220/X220:</p> <p>X220/X220 Tablet is essentially the same as the X230, but cannot be flashed internally; you must use <a href="spi.html">an external flasher</a>.</p> <p>Otherwise, look at <a href="x230_external.html">X230 disassembly</a>. Note that the X220 has a single 8MB flash, instead of 8MB and 4MB.</p> <div class="h"><h2 id="thinkpad-x230t430t530w530x230t">ThinkPad X230/T430/T530/W530/X230T</h2><a aria-hidden="true" href="#thinkpad-x230t430t530w530x230t">[link]</a></div> <p>Internal flashing from vendor BIOS to Libreboot is possible, but not recommended. See: <a href="ivy_internal.html">IvyBridge ThinkPad internal flashing</a>.</p> <p>External flashing recommended, but only documented for X230. See: <a href="x230_external.html">ThinkPad X230 install guide</a>.</p> <p>Otherwise, refer to <a href="spi.html">external SPI flashing</a>.</p> <div class="h"><h2 id="thinkpad-t60x60x60tabletx60s">ThinkPad T60/X60/X60Tablet/X60S</h2><a aria-hidden="true" href="#thinkpad-t60x60x60tabletx60s">[link]</a></div> <p>Only the Intel GPU is compatible. Do not flash the ATI GPU models.</p> <p>External flashing guides:</p> <ul> <li><a href="x60_unbrick.html">ThinkPad X60</a></li> <li><a href="x60tablet_unbrick.html">ThinkPad X60 Tablet</a></li> <li><a href="t60_unbrick.html">ThinkPad T60</a></li> </ul> <p>These machines can also be flashed internally, by exploiting a bug in the original Lenovo BIOS. If there’s a BIOS password at boot, you should just flash externally.</p> <p>Internal flashing instructions:</p> <p>First, please ensure that your CR2032/CMOS battery is working. This is what powers the SRAM containing BIOS settings, and it powers the real-time clock. It also holds the BUC.TS value - this is what we need.</p> <p>BUC (Backup Control) register contains a bit called Top Swap (TS). The 64KB bootblock at the top of flash is complemented by a backup Top Swap just above it. The one at the end can’t be flashed internally while Lenovo BIOS is running, but the rest of it can be flashed (everything above the main bootblock).</p> <p>By setting the TS bit, you can make the machine boot from the backup bootblock.</p> <p>Download the Libreboot 20160907 utils archive, and in there you will find these binaries:</p> <ul> <li><code>flashrom</code></li> <li><code>flashrom_i945_sst</code></li> <li><code>flashrom_i945_mx</code></li> </ul> <p>You’ll also find the bucts tool. Run it as root:</p> <pre><code>./bucts 1</code></pre> <p>Now run both of these as root:</p> <pre><code>./flashrom_i945_sst -p internal -w coreboot.rom ./flashrom_i945_mx -p internal -w coreboot.rom</code></pre> <p>You’ll see a lot of errors. This is normal. You should see something like:</p> <pre><code>Reading old flash chip contents... done. Erasing and writing flash chip... spi_block_erase_20 failed during command execution at address 0x0 Reading current flash chip contents... done. Looking for another erase function. spi_block_erase_52 failed during command execution at address 0x0 Reading current flash chip contents... done. Looking for another erase function. Transaction error! spi_block_erase_d8 failed during command execution at address 0x1f0000 Reading current flash chip contents... done. Looking for another erase function. spi_chip_erase_60 failed during command execution Reading current flash chip contents... done. Looking for another erase function. spi_chip_erase_c7 failed during command execution Looking for another erase function. No usable erase functions left. FAILED! Uh oh. Erase/write failed. Checking if anything has changed. Reading current flash chip contents... done. Apparently at least some data has changed. Your flash chip is in an unknown state.</code></pre> <p>If you see this, rejoice! It means that the flash was successful. Please do not panic. Shut down now, and wait a few seconds, then turn back on again.</p> <p>The main bootblock still isn’t flashed, but you can shut down, wait a few seconds and boot up again. When you do, you’ll have Libreboot. Please make sure to flash a second time, like so:</p> <pre><code>flashprog -p internal -w coreboot.rom</code></pre> <p>Libreboot recommends <code>flashprog</code> now, which is a fork of flashrom, but we used flashrom in the 2016 release. The macronix/ssh flashrom binaries there are specifically patched; check the Libreboot 20160907 source code for the actual patches. The patches modify some flash chip definitions in flashrom, to exploit the bug in Lenovo BIOS enabling internal flashing.</p> <p>You must ensure that the second flash is performed, upon reboot, because otherwise if the CR2032 battery dies, bucts will be reset and it will no longer boot.</p> <p>When you’ve done the second flash, which includes overwriting the main bootblock, set bucts back to zero:</p> <pre><code>./bucts 0</code></pre> <p>The second flash can be done by simply following the general internal flashing guide further down on this page.</p> <div class="h"><h2 id="thinkpad-t440pw541-vendor-bios">Thinkpad T440p/W541 (vendor BIOS)</h2><a aria-hidden="true" href="#thinkpad-t440pw541-vendor-bios">[link]</a></div> <p>Guides:</p> <ul> <li><a href="t440p_external.html">ThinkPad T440p flashing guide</a></li> <li><a href="w541_external.html">ThinkPad W541 flashing guide</a></li> </ul> <div class="h"><h2 id="hp-elitebook-laptops-vendor-bios-1">HP EliteBook laptops (vendor BIOS)</h2><a aria-hidden="true" href="#hp-elitebook-laptops-vendor-bios-1">[link]</a></div> <p>Each machine has it’s own guide:</p> <ul> <li><a href="hp2170p.html">HP EliteBook 2170p</a></li> <li><a href="hp2560p.html">HP EliteBook 2560p</a></li> <li><a href="hp2570p.html">HP EliteBook 2570p</a></li> <li><a href="hp820g2.html">HP EliteBook 820 G2</a></li> <li><a href="hp8460p.html">HP EliteBook 8460p</a></li> <li><a href="hp8470p.html">HP EliteBook 8470p</a></li> <li><a href="hp8560w.html">HP EliteBook 8560w</a></li> <li><a href="hp9470m.html">HP EliteBook Folio 9470m</a></li> </ul> <div class="h"><h2 id="hp-elite-desktops-vendor-bios">HP Elite desktops (vendor BIOS)</h2><a aria-hidden="true" href="#hp-elite-desktops-vendor-bios">[link]</a></div> <p>Each machine has it’s own guide:</p> <ul> <li><a href="hp8200sff.html">HP Elite 8200 SFF/MT</a> (HP 6200 Pro Business probably works too)</li> <li><a href="hp8300usdt.html">HP Elite 8300 USDT</a></li> </ul> <div class="h"><h2 id="arm-based-chromebooks">ARM-based Chromebooks</h2><a aria-hidden="true" href="#arm-based-chromebooks">[link]</a></div> <p>See: <a href="chromebooks.html">Chromebook flashing instructions</a></p> <p>NOTE: The generic flashing instructions (later on this page) apply only to the x86 machines, because the Chromebooks still use flashrom with the <code>-p host</code> argument instead of <code>-p internal</code> when flashing, and you typically need to flash externally, due to Google’s security model.</p> <div class="h"><h2 id="qemu-arm64-and-x86">QEMU (arm64 and x86)</h2><a aria-hidden="true" href="#qemu-arm64-and-x86">[link]</a></div> <p>Libreboot can be used on QEMU (virtual machine), which is useful for debugging payloads and generally trying out Libreboot, without requiring real hardware.</p> <p>See: <a href="../misc/emulation.html">Libreboot QEMU guide</a></p> <div class="h"><h1 id="install-via-host-cpu-internal-flashing">Install via host CPU (internal flashing)</h1><a aria-hidden="true" href="#install-via-host-cpu-internal-flashing">[link]</a></div> <p>NOTE: This mainly applies to the x86 machines.</p> <p>Please check other sections listed above, to see if there is anything pertaining to your mainboard. Internal flashing means that you boot Linux or BSD on the target machine, and run <code>flashprog</code> there, flashing the machine directly.</p> <p><strong>If you can’t flash internally, you must <a href="spi.html">flash externally</a>.</strong></p> <p>Internal flashing is often unavailable with the factory firmware, but it is usually possible when Libreboot is running (barring special circumstances).</p> <div class="h"><h2 id="run-flashprog-on-host-cpu">Run flashprog on host CPU</h2><a aria-hidden="true" href="#run-flashprog-on-host-cpu">[link]</a></div> <p><strong>Always remember to <a href="ivy_has_common.html">insert vendor files</a>, when using release images. Otherwise, these files are added automatically at build time, when building from source (but they are not present in release images).</strong></p> <div class="h"><h3 id="flash-chip-size">Flash chip size</h3><a aria-hidden="true" href="#flash-chip-size">[link]</a></div> <p>Use this to find out:</p> <pre><code>flashprog -p internal</code></pre> <p>In the output will be information pertaining to your boot flash.</p> <div class="h"><h3 id="howto-readwriteerase-the-boot-flash">Howto: read/write/erase the boot flash</h3><a aria-hidden="true" href="#howto-readwriteerase-the-boot-flash">[link]</a></div> <p>How to read the current chip contents:</p> <pre><code>sudo flashprog -p internal:laptop=force_I_want_a_brick,boardmismatch=force -r dump.bin</code></pre> <p>You should still make several dumps, even if you’re flashing internally, to ensure that you get the same checksums. Check each dump using <code>sha1sum</code></p> <p>How to erase and rewrite the chip contents:</p> <pre><code>sudo flashprog -p internal:laptop=force_I_want_a_brick,boardmismatch=force -w libreboot.rom</code></pre> <p>NOTE: <code>force_I_want_a_brick</code> is not scary. Do not be scared! This merely disables the safety checks in flashprog. Flashrom and coreboot change a lot, over the years, and sometimes it’s necessary to use this option. If you’re scared, then just follow the above instructions, but remove that option. So, just use <code>-p internal</code>. If that doesn’t work, next try <code>-p internal:boardmismatch=force</code>. If that doesn’t work, try <code>-p internal:boardmismatch=force,laptop=force_I_want_a_brick</code>. So long as you <em>ensure</em> you’re using the correct ROM for your machine, it will be safe to run flashprog. These extra options just disable the safetyl checks in flashprog. There is nothing to worry about.</p> <p>If successful, it will either say <code>VERIFIED</code> or it will say that the chip contents are identical to the requested image.</p> <p>NOTE: there are exceptions where the above is not possible. Read about them in the sections below:</p> <div class="h"><h1 id="removed-boards">Removed boards</h1><a aria-hidden="true" href="#removed-boards">[link]</a></div> <p>These boards were in Libreboot, but have been removed with the intention of re-adding them at a later date. They were removed due to issues. List:</p> <ul> <li><a href="chromebooks.html">Acer Chromebook 13 (CB5-311, C810) (nyan-big)</a></li> <li><a href="chromebooks.html">ASUS Chromebit CS10 (veyron-mickey)</a></li> <li><a href="c201.html">ASUS Chromebook C201PA (veyron-speedy)</a></li> <li><a href="chromebooks.html">ASUS Chromebook Flip C100PA (veyron-minnie)</a></li> <li><a href="chromebooks.html">Hisense Chromebook C11 and more (veyron-jerry)</a></li> <li><a href="chromebooks.html">HP Chromebook 11 G1 (daisy-spring)</a></li> <li><a href="chromebooks.html">HP Chromebook 14 G3 (nyan-blaze)</a></li> <li><a href="chromebooks.html">Samsung Chromebook 2 11" (peach-pit)</a></li> <li><a href="chromebooks.html">Samsung Chromebook 2 13" (peach-pi)</a></li> <li><a href="chromebooks.html">Samsung Chromebook XE303 (daisy-snow)</a></li> <li>Lenovo ThinkPad X301 (still in lbmk, but with <code>release="n"</code>)</li> </ul> <div class="h"><h2 id="notes-about-removed-boards">NOTES about removed boards</h2><a aria-hidden="true" href="#notes-about-removed-boards">[link]</a></div> <p><strong>WARNING: veyron speedy boards (e.g. C201) have non-functional video init as of 19 February 2023, and no fix is yet available on that date. See: <a href="https://notabug.org/libreboot/lbmk/issues/136" class="uri">https://notabug.org/libreboot/lbmk/issues/136</a> - the last tested revision from 2021.01 is known to work, for u-boot on this board. See:<br /> <a href="https://wiki.postmarketos.org/wiki/ASUS_Chromebook_C201_(google-veyron-speedy)" class="uri">https://wiki.postmarketos.org/wiki/ASUS_Chromebook_C201_(google-veyron-speedy)</a> (alpernebbi on IRC is looking into this, to bisect uboot and update the latest revisions) - for now, ROM images deleted from the Libreboot 20221214 and 20230319 releases.</strong></p> <p><strong>WARNING: daisy- and peach- boards require a BL1 bootloader firmware, but the one from coreboot 3rdparty is a fake/placeholder file. We need logic in the Libreboot build system for properly fetching/extracting these, plus docs to cover it. For now, assume that these are broken - ROM images are excluded, for now, and have been deleted from the Libreboot 20221214 and 20230319 releases. - see: <a href="https://review.coreboot.org/plugins/gitiles/blobs/+/4c0dcf96ae73ba31bf9aa689768a5ecd47bac19e" class="uri">https://review.coreboot.org/plugins/gitiles/blobs/+/4c0dcf96ae73ba31bf9aa689768a5ecd47bac19e</a> and <a href="https://review.coreboot.org/plugins/gitiles/blobs/+/b36cc7e08f7337f76997b25ee7344ab8824e268d" class="uri">https://review.coreboot.org/plugins/gitiles/blobs/+/b36cc7e08f7337f76997b25ee7344ab8824e268d</a></strong></p> <p>d945gclf: Doesn’t boot at all, according to last report. D510MO is still in lbmk but still was reported problematic; other boards should be fine (see list above).</p> <p>WARNING: Support for ARM chromebooks is at a proof-of-concept stage. Refer to <a href="../uboot/">docs/uboot/</a> for more info about the U-Boot payload.</p> <div id="footer"> <hr /> <ul> <li><a href="/news/policy.html">Binary Blob Reduction Policy</a></li> <li><a href="/freedom-status.html">Freedom status</a></li> <li><a href="/git.html">Edit this page</a></li> <li><a href="/who.html">Who develops Libreboot?</a></li> <li><a href="/license.html">License</a></li> <li><a href="/template-license.html">Template</a></li> <li><a href="/logo-license.html">Logo</a></li> <li><a href="/contrib.html">Authors</a></li> </ul> <hr /> </div> <p>Markdown file for this page: <a href="https://libreboot.org/docs/install/index.md" class="uri">https://libreboot.org/docs/install/index.md</a></p> <p><a href="/feed.xml">Subscribe to RSS for this site</a></p> <p><a href="/sitemap.html">Site map</a></p> <p>This HTML page was generated by the <a href="https://untitled.vimuser.org/">Untitled Static Site Generator</a>.</p> </div> </div> </body> </html>