This wiki post is a community guide to the Framework Laptop BIOS.
- Framework Laptop
- Based BIOS product: InsydeH2O UEFI BIOS, Press release
- BIOS vendor: Insyde Software - Wikipedia
- BIOS Security Advisories (CVEs)
- Proprietary BIOS. Framework bought the source code from Insyde Software, and modifies the code to meet Framework’s needs.
- Framework Laptop Chromebook Edition
- Based BIOS project: coreboot, Press release
- BIOS vendor: coreboot (software project).
- Open source BIOS.
- See also Coreboot on the Framework Laptop.
Framework Laptop (12th Gen Intel® Core™)
Current released version: 3.05 (not mentioned on the knowledge base yet) - Knowledge Base - BIOS releases (Linux installer in Beta)
Current beta version: 3.06
Initial version: 3.04
CVEs: 12th Gen BIOS Vulnerability
Framework Laptop (11th Gen Intel® Core™)
Current released version: 3.10 - Knowledge Base - BIOS releases (Linux installer in Beta)
Current beta version: 3.17
Initial version: 3.02
Framework Laptop Chromebook Edition (12th Gen Intel® Core™)
The detail has not been reported yet. We can’t access the BIOS.
Framework BIOS Setup/Boot Keys
F2: enter BIOS
F12: one-time boot override
F10: AMT setup (i7-1185G7 only)
Note: the current default timeout during startup is 0 seconds, so the time window in which these keys will register is short. Immediately after powering on the laptop, repeatedly tap the desired key until the appropriate menu shows.
Note: if “fn lock” has been toggled (Fn+Esc) then use Fn+F2 / Fn+F12 / Fn+F10 instead during startup.
After installing an OS, if the above keys are not working try the following:
click to show workaround
- Turn off the laptop
- Unplug the AC adapter
- Wait 30 seconds
- Turn on
- Repeatedly tap startup key
Alternatively, reboot directly to the BIOS from within the OS:
click to show for Windows 10
Shift + Restart
- Hold Shift
- Click “Restart” in Start Menu
- Wait for the Advanced Startup menu
- Go to Troubleshoot > Advanced Options
- Click “UEFI Firmware Settings”
Command Prompt
- Open Command Prompt with Admin / PowerShell with Admin
- Enter:
shutdown /fw /r
click to show for Linux (distros with systemd)
- Open terminal
- Enter:
systemctl reboot --firmware-setup
BIOS Shortcuts
F1: Help
Esc: Exit
↑↓: Select Item
←→: Select Item
F5F6: Change Values
Enter: Select / Enter SubMenu
F9: Setup Defaults
F10: Save and Exit
BIOS Guide key:
Page > SubMenu > SubSubMenu
| Item name | <Default | Other | Values> | Note: default is listed first |
| Item name | [ ## | Yes | No ] | ##: enter number | Yes: accept | No: cancel |
| ►SubMenu |
BIOS Pages / Table of Contents
Main
Advanced
►CPU Configuration
Security
►Storage Password Setup Page
►Device
►I/O Interface
►Secure Boot
Boot
►EFI Boot Order
Exit
Main
System UUID, System Serial Number, BIOS version, CPU info, RAM info, etc.
| Language | <English | Français | 中文 | 日本語> |
| System Time | <HH:MM:SS> |
| System Date | <MM/DD/YYYY> |
Advanced
| ►CPU Configuration | ||
| VT-d | <Enabled | Disabled> | |
| Boot performance mode | <Turbo Performance | Max Non-Turbo Performance | Max Battery> | |
| Intel SpeedStep | <Enabled | Disabled> | |
| Intel Speed Shift Technology | <Enabled | Disabled> | |
| Intel Turbo Boost Max Technology 3.0 | <Enabled | Disabled> | |
| PS2 Mouse emulation | <Auto | Disabled> | used to enable touchpad during OS install |
| G-Sensor Connection | <Disabled | Enabled> | I think this is the accelerometer [removed 3.06] |
| Swap Ctrl-Fn | <Normal | Swap> | |
| Power Button LED Brightness Level | <High | Medium | Low> | [added 3.06] |
| Battery Disconnect | [Yes | No] | see guide below |
Battery Disconnect guide:
As a safety precaution, please remove power from the motherboard before working inside the laptop. This BIOS option serves as a convenient alternative to physically unplugging the battery connector.
- Set Battery Disconnect to [Yes]
- Exit Saving Changes
- Unplug AC adapter*
- Open laptop
- Reassemble laptop
- Plug AC adapter in
- Power on
* Note: the battery reconnects once the AC adapter is plugged back in.
Advanced > CPU Configuration
More CPU info
| CPU Flex Ratio Override | <Disabled | Enabled> |
| CPU Flex Ratio Settings | [ ## | Yes | No ] |
| Hardware Prefetcher | <Enabled | Disabled> |
| Adjacent Cache Line Prefetch | <Enabled | Disabled> |
| Intel (VMX) Virtualization Technology | <Enabled | Disabled> |
| Active Processor Cores | <All | 1 | 2 | 3> |
| Hyper-Threading | <Enabled | Disabled> |
| AP threads Idle Manner | <MWAIT Loop | HALT Loop | RUN Loop> |
| AES | <Enabled | Disabled> |
Security
TPM info
| TrEE Protocol Version | <1.1 | 1.0> | |
| TPM Availability | <Available | Hidden> | |
| TPM Operation | click to show<No Operation | Enable | SetPCRBanks(Algorithm) | LogAllDigests | SetPPRequiredForClear_True | SetPPRequiredForClear_False | SetPPRequiredForTurnOn_False | SetPPRequiredForTurnOn_True | SetPPRequiredForTurnOff_False | SetPPRequiredForTurnOff_True | SetPPRequiredForChangePCRs_False | SetPPRequiredForChangePCRs_True | SetPPRequiredForChangeEPS_False | SetPPRequiredForChangeEPS_True | ChangeEPS> |
|
| Clear TPM | [ | x ] | |
| Set Supervisor Password | ||
| Power on Password | <Enabled | Disabled> | Requires Supervisor Password first |
| Set All Hdd Password | ||
| Set All Master Hdd Password | ||
| ►Storage Password Setup Page | ||
| ►I/O Interface | ||
| ►Secure Boot | ||
| Chassis Intrusion Prevention | <Disabled | Enter supervisor Password> | [added 3.03] this switch? |
Security > Storage Password Setup Page
| TCG Storage Action | click to show<No Operation | Enable_BlockSIDFunc | Disable_BlockSIDFunc | PPRequiredForEnableBlockSID_True | PPRequiredForEnableBlockSID_False | PPRequiredForDisableBlockSID_True | PPRequiredForDisableBlockSID_False> |
Security > Storage Password Setup Page > Device
| Set Master Hdd Password | ||
| PSID Revert to factory default |
Security > I/O Interface
| External I/O Ports | <Enabled | Disabled> |
| WIFI and BlueTooth Device | <Enabled | Disabled> |
| Finger Print Device | <Enabled | Disabled> |
| Camera Device | <Enabled | Disabled> |
Security > Secure Boot
| ►Select a UEFI file as trusted for execution | |
| Enforce Secure Boot | <Enabled | Disabled> |
| Erase all Secure Boot Settings | <Disabled | Enabled> |
| Restore Secure Boot to Factory Settings | <Disabled | Enabled> |
| ►PK Options | |
| ►KEK Options | |
| ►DB Options | |
| ►DBX Options | |
| ►DBT Options | |
| ►DBR Options |
Security > Secure Boot > PK Options
| ►Enroll PK | |
| ►Delete PK |
Boot
| Power on AC attach | <Disabled | Enabled> | |
| Quick Boot | <Enabled | Disabled> | |
| Quiet Boot | <Enabled | Disabled> | |
| Network Stack | <Disabled | Enabled> | |
| USB Boot | <Enabled | Disabled> | |
| Timeout | [ # | Yes | No ] | |
| Automatic Failover | <Enabled | Disabled> | |
| New Boot Device Priority | <Auto | First | Last> | |
| ►EFI Boot Order |
Boot > EFI Boot Order
Exit
| Exit Saving Changes | |
| Save Change Without Exit | |
| Exit Discarding Changes | |
| Load Optimal Defaults | |
| Load Custom Defaults | |
| Save Custom Defaults | |
| Discard Changes |
These were taken of an i5-1135G7 model. If anyone has an i7-1185G7 and could chime in if there are any differences due to the vPro support I’d appreciate it!
Pedantry note: Yes, I realize UEFI and BIOS are technically different things.
BIOS Version Changelog
click to expand
3.02: Initial public launch version
3.03 (currently in beta): release notes
3.06 (was beta, pulled due to bug): release notes
3.07: Current version, with Linux installer in Beta. release notes
