BIOS guide

Just wanted to have it on record for the Framework team (will send a message, too).
I use a bios password on boot, and for the first month it worked flawlessly. Recently, it still works, but there is significant and random/variable delay between when I press a key and when it registers on screen. I use capital letters in the BIOS password and this sometimes causes them to not register correctly unless I hold the shift key down the whole time from when I press and let go of the letter key until the character entry shows up on the screen. I donā€™t know why all of a sudden it became unpredictably laggy like this. The rest of the BIOS is a bit laggy too, but I donā€™t remember if that was always like that or not. Itā€™s not a huge deal; it just takes a bit longer and a pinch of patience to boot up the computer. But something that could be addressed in an update or something.

I found others having the same issue and confirmed the solution in this thread.
:melting_face: :ok_hand: :+1: :pinched_fingers: Took a little digging to find but good to go!

2 Likes

I just checked my BIOS version and I apparently have 3.05

Hi @chrissobel see this thread on the minor bios version difference for 12th Gen Intel mother boards.

I think we might be able to update this pageā€™s first comment with the information about the Framework Laptop Chromebook Edition now. Itā€™s such as the knowledge base page, the BIOS product/vendor/initial version and etc.

Guys who bought the edition, can you report the info on this thread? Thanks.

1 Like

Hey folks, apologies if this is not the right thread to post this on, but does anyone know if there is a way to disable secure boot from within Linux, i.e. edit a BIOS setting via a script?

In general, there is no (and there should not be a) way to disable secure boot from within the operating system. That would somewhat defeat the purpose of secure boot, as a rootkit could just turn off the security features before it installed itself. :slightly_smiling_face:

6 Likes

I just updated this threadā€™s first comment with the info about Framework Laptop Chromebook Edition based on what we know.

2 Likes

Updated about a month ago, but having major issues with eGPU and Thunderbolt Hub (Windows 11, i7-1280P, 64GB, 4TB), which I didnā€™t have with 3.05. Can someone provide the link for 3.05, so I can go back?

1 Like

@Danny_Goff You canā€™t go back with 12th gen or it screws your left ports. They will only operate at USB 3 speeds if you downgrade.

So going back to 3.05 causes USB3 speeds on USB4/TB4 hardware? DEFINITELY a gap/concern thereā€¦

1 Like

@Danny_Goff Tbf, they did warn you about that in the initial post. And it looks like I was wrongā€¦its USB 2.0 speeds.

Just to be clear, 11th gen can still downgrade. Only 12th gen gets borked doing so as far as I know.

2 Likes

It seems that InsydeH2O BIOS is used for both Framework 13 Intel 13 Gen and AMD - https://twitter.com/insydesw/status/1639393614148296705

Disappointing but not unexpected, maybe us software turbonerds will get some love next time around.

Is there any reason to update to 3.10 now? I just checked and found they have released 3.10 UEFI update. What are the improvements and reasons to update.
I am currently on 3.07 with Windows 10, my CPU is 11th gen. I am planning on going to Windows 11 with a clean install soon.
Thanks

@R_P Just take a look at the thread for the change log, here is the very first thing written on the post.

1 Like

What are the security vulnerabilities? How serious it? People want to know.
Thanks

The BIOS vendor Inside Softwareā€™s CVE list is below. The link is also in the first comment on this page. Then you see CVSS v3 numbers. As on the page, itā€™s not easy to search by CVE such as e.g. ā€œCVE-2021-41842ā€ by browser search, but you can open Inspect menu or the HTML source, and search by ā€œCVE-2021-41842ā€. And you see the CVSS v3 number of this CVE is 8.2. In my impression, if the number is more than ā€œhighā€, itā€™s better to apply it.

https://nvd.nist.gov/vuln-metrics/cvss

High 7.0-8.9
Critical 9.0-10.0

See the list of CVEs here:

Itā€™s been a while since it was discussed, maybe thereā€™s news:

  • Will there eventually be a charging hysteresis for all OSes, i.e. in BIOS? ā€œStart charging at or belowā€¦ā€ and ā€œStop charging atā€¦ā€?

Other wishes:

  • Power button sleep indicator to work with all sleep states.

  • Device charge through usb can be turned off for sleeping/hibernating/powered down state.
    Even better: turn on/off separately for each port. That way, disks can spin down (and stop blinkenlights) that are on port A while the phone on port B is still charged.

  • A similarly differentiated wake on usb. Useful eg, to wake only when the keyboard sends a key but not when someone bumps against the table and jerks the mouse. (Needs them to be not on the same port via hub, of course.)

3 Likes

I have some specific question regarding the BIOS for the 13th gen Framework.

A) Intel Trusted Execution Technology

  1. Should I activate it or not?
  2. What does it do exactly to my system?
  3. What is the DPR Memory size and which value should I use, if question 1. is ā€œyesā€?

B) Standalone operation/detection

  1. What are those options?
  2. Standalone Operation is disabled and Standalone Detection is enabled. Is that okay?

C) TPM

  1. TPM Availability is enabled > okay butā€¦
  2. TPM Operation is ā€œno operationā€. Should I change it?
  3. If 2. is ā€œyesā€, to what? I use Bitlocker with a PIN currently.

D) Supervisor Password

  1. Is that the BIOS password?

E) Chassis intrusion detection

  1. What is it and should I activate it?

Thanks in advance

1 Like