diff --git a/user/how-to-guides/how-to-update.md b/user/how-to-guides/how-to-update.md index 79e1333c..9c80c0f6 100644 --- a/user/how-to-guides/how-to-update.md +++ b/user/how-to-guides/how-to-update.md @@ -149,5 +149,57 @@ Which one to use depends on the device whose firmware is being updated. tool to update the firmware. Firmware updates are important on all systems, but they are especially -important on AMD client systems. These doesn't support loading microcode from +important on AMD client systems. These do not support loading microcode from the OS, so firmware updates are the **only** way to obtain microcode updates. +## Firmware updates + +As of Qubes 4.2, firmware updates can be performed from within Qubes for [fwupd-supported computers](https://fwupd.org/). + +### In dom0 + +First, ensure that your [UpdateVM](/doc/Software/UpdateVM/) +contains the `fwupd-qubes-vm` package. This package is installed +by default for qubes with `qubes-vm-recommended` packages. + +In a dom0 terminal, install the `fwupd-qubes-dom0` package: + + ``` + $ sudo qubes-dom0-update fwupd-qubes-dom0 + ``` + +Once the package is installed: + + ``` + $ sudo qubes-fwupdmgr get-devices + ``` + +Examine the terminal output for warnings or errors. +You may see the following warning: + + ``` + WARNING: UEFI capsule updates not available or enabled + ``` +If so, [adjust your BIOS settings](https://github.com/fwupd/fwupd/wiki/PluginFlag:capsules-unsupported) to enable UEFI updates. This setting is sometimes named "Windows UEFI Firmware Update." + +Once resolved, in a dom0 terminal: + + ``` + $ sudo qubes-fwupdmgr get-devices + $ sudo qubes-fwupdmgr refresh + $ sudo qubes-fwupdmgr update + ``` + +A numbered list of devices with available updates will be presented. Ensure your computer is plugged in to a stable power source, then type the list number of the device you wish to update. If a reboot is required, you will be prompted at the console to confirm. + +Repeat the update process for any additional devices on your computer. + +### In other qubes + +Devices that are attached to non-dom0 qubes can be updated via a graphical tool for `fwupd`, or via the `fwupdmgr` commandline tool. + +To update the firmware of offline qubes, use the [Updates +proxy](/doc/how-to/install/software/#updates-proxy). + +### Computers without fwupd support + +For computers that do not have firmware update support via `fwupd`, follow the firmware update instructions on the manufacturer's website. Verify the authenticity of any firmware updates you apply.