Install Canoeboot HP Compaq Elite 8300 USDT

Download from release

Build from source

./mk -b coreboot hp_elite_8300_usdt_16mb_uefi

Software

Before internal flashing, Disable /dev/mem protection first.

In short add this kernel parameter: iomem=relaxed(linux distro)/kernel.securelevel=-1(bsd distro)

THEN REMOVE THIS KERNEL PARAMETER TO PREVENT UNAUTHORIZED/MALICIOUS ACCESS TO YOUR SYSTEM AFTER FLASHING LIBREBOOT.

(An important reminder for those who might forget to delete it, even better, replace it with lockdown=integrity / lockdown=confidentiality)

Backup the previous (working) firmware (atleast) twice (to check and compare if reading it gone wrong and backups differs.)

flashprog -p internal -r Backup1.bin

flashprog -p internal -r Backup2.bin

Check and compare those if reading from the flash were successful:

diff Backup1.bin Backup2.bin

For more than 2:

shasum Backup1.bin Backup2.bin Backup3.bin

If those differs, something gone wrong and proceeding further may (DON’T) leave your device unrecoverable (without a reliable backup) if flashing fails as well.

Internal flashing is possible. OEM BIOS versions 2.87, 2.90, 2.99, and 3.08 are confirmed compatible with this guide. BIOS 2.05 is confirmed not to work.

If you have some other BIOS version, please do tell about it on IRC or comment on this issue, so this guide can be updated.

The jumper labelled “FDO” (for Flash Descriptor Override) needs to be shorted. That removes all write protections on this board.

We can borrow a shunt from another header on the board: PSWD. It is right next to the SO-DIMM RAM slots. Move it to the FDO header between the quartz crystal (small metal cylinder) and the power cable for the optical drive.

The BIOS should no longer impose any write-protections. You can now use flashprog -p internal freely.

You can now move the jumper back to its original place. By default, Canoeboot applies no write-protection, so updating it can be done without the jumper anyway.

Hardware

For general information, please refer to 25xx NOR flash instructions - that page refers to use of socketed flash.

Backup the previous (working) firmware twice (to check and compare if reading it gone wrong and backups differs.)

flashprog -p serprog:dev=/dev/ttyACM0,spispeed=16M -r Backup1.bin

flashprog -p serprog:dev=/dev/ttyACM0,spispeed=16M -r Backup2.bin

Check and compare those if reading from the flash were successful:

diff Backup1.bin Backup2.bin

For more than 2:

shasum Backup1.bin Backup2.bin Backup3.bin

If those differs, something gone wrong and proceeding further may (DON’T) leave your device unrecoverable (without a reliable backup) if flashing fails as well.

Please only flash the BIOS region; if migrating from Libreboot, you must skip the IFD region. If migrating from vendor firmware, please also flash the IFD region. Optionally change the GbE region. Use the --ifd option along with e.g. -i bios to flash a specific region. DO NOT flash the entire chip, because this would overwrite the Intel ME, thus bricking your mainboard.

Unbricking is possible by external flashing. You first need to remove the optical disk drive and 2.5" HDD/SSD and the metal bracket that supports them. This requires you to open one torx (T15) screw in total.

The SOIC-16 flash chip is located on the edge of the board near the group of yellow cubes. Follow the general SPI flashing guide.

You might need to power the board by plugging it in. In that case, do not connect the Vcc (3v3) pin of the flash chip. Also make sure the board doesn’t fully power on (that is, boot).

If you don’t have a suitable clip, you can also use the ROM_RCVRY header right next to the flash chip. By default only the footprint is present, so you have to solder a pin header of your own. End result can be seen and the pinout can be seen in the photo earlier. Consult the HP service manual (page 241) on how to remove the motherboard from the chassis.

http://web.archive.org/web/20210305234331/https://h10032.www1.hp.com/ctg/Manual/c03612798.pdf

If you do this, you have to reapply thermal paste. That might be a good idea anyway, considering how old these are getting

This platform uses an Intel Flash Descriptor, and defines an Intel GbE NVM region. As such, release/build ROMs will contain the same MAC address. To change the MAC address, please read nvmutil documentation.

So far, only Quadro 1000M and 2000M have been tested with Libreboot (hp8560w). Guide

If a MXM gpu is installed, all three monitor ports should be active. The igpu will use the top DisplayPort and the MXM gpu will operate the bottom DisplayPort & VGA. (Untested)

It should be possible to use both gpus in a dual-gpu setup.

The Libreboot version of this page is: https://libreboot.org/docs/install/hp8300usdt.html

SPDX-License-Identifier: GFDL-1.3-or-later

Markdown file for this page: https://canoeboot.org/docs/install/hp8300usdt.md

Site map

This HTML page was generated by the Libreboot Static Site Generator.