TABLE OF CONTENTS
UEFI Defaults Update (Feb 2022) - Recommended
This is the recommended UEFI BIOS version for these devices. It has the latest updates and the CSM settings correctly pre-configured and Secure Boot settings are Enabled by default. This improves upon the fTPM update below and continues to include Windows 11 compatibility*.
Please ensure that an Ethernet Cable is not connected to the device during the update. In rare circumstances, if it is left in, the Network Port can become intermittent or non-functional after the flash and it is very difficult to recover from that state.
1.
Download the updated UEFI BIOS:
3020E - FP50E101
2500U - FP50T106 (*Still not supported on Windows 11)
3500U - FP50U301
Please note you must use the correct version for your device. If you use the wrong one, it could damage the device or 'brick' it.
2.
Extract the contents to the root directory of a USB (e.g. E:\).
(It may need formatting as FAT32 for this to function)
3.
Reboot the WAP and repeatedly press F11 until you see the Boot Menu.
(If you get an error about Secure Boot incompatibility, reboot again press Del instead to get into the UEFI BIOS settings then go to the Security tab and under Secure Boot choose to Disable Secure Boot and Save & Exit and do the F11 key again)
4.
Select your USB from the list (with EFI or UEFI in front of the USB's name) and it will boot and launch into the update process automatically.
(If your USB doesn't show up check go back to stage 2 and try with FAT32)
5.
It will prompt to remove the Network Cable - please make sure this is done before pressing Enter to flash the device.
6.
Press E when Prompted (we know it's a scary sounding warning) to accept the changes and apply the UEFI BIOS.
7.
It will automatically reboot after the flash and boot back into Windows.
You may need to re-Enable Secure Boot after the flash:
Press Del instead to get into the UEFI BIOS settings then go to the Security tab and under Secure Boot choose to Enable Secure Boot and Save & Restart. If it is already Enabled (but not functioning) change the second option from Standard to Custom and back again allowing the device to reinstall the factory keys during the process and Save & Restart.
Network Stack Update (March 2022)
This is only recommended for customers who require Network Stack (PXE over IPv4) and is more similar to the 2021 fTPM update than the recommended UEFI Defaults Update above, despite being launched later. Currently we only believe this update is required on 2500U devices as the Network Stack function was left hidden on the UEFI Default Update above, but please let us know if that is not the case.
Please ensure that an Ethernet Cable is not connected to the device during the update. In rare circumstances, if it is left in, the Network Port can become intermittent or non-functional after the flash and it is very difficult to recover from that state.
1.
Download the updated UEFI BIOS:
2500U - FP50T108 (*Still not supported on Windows 11)
Please note you must use the correct version for your device. If you use the wrong one, it could damage the device or 'brick' it.
2.
Extract the contents to the root directory of a USB (e.g. E:\).
(It may need formatting as FAT32 for this to function)
3.
Reboot the WAP and repeatedly press F11 until you see the Boot Menu.
(If you get an error about Secure Boot incompatibility, reboot again press Del instead to get into the UEFI BIOS settings then go to the Security tab and under Secure Boot choose to Disable Secure Boot and Save & Exit and do the F11 key again)
4.
Select your USB from the list (with EFI or UEFI in front of the USB's name) and it will boot and launch into the update process automatically.
(If your USB doesn't show up check go back to stage 2 and try with FAT32)
5.
It will prompt to remove the Network Cable - please make sure this is done before pressing Enter to flash the device.
6.
It will automatically reboot after the flash and Network Stack will be Enabled with PCE over IPv4 to choose from.
You may need to re-Enable Secure Boot after the flash:
Press Del instead to get into the UEFI BIOS settings then go to the Security tab and under Secure Boot choose to Enable Secure Boot and Save & Restart. If it is already Enabled (but not functioning) change the second option from Standard to Custom and back again allowing the device to reinstall the factory keys during the process and Save & Restart.
fTPM Update (2021)
We have created a UEFI BIOS update for our AMD WAP Ultimate systems (3020E / 2500U / 3500U) that adds the fTPM options to the UEFI BIOS. These options were present but hidden and Disabled by default on the original UEFI BIOS release. This update is intended for Windows 11 compatibility*.
1.
Download the updated UEFI BIOS:
3020E - FP50R104
2500U - FP50T106 (*Still not supported on Windows 11, even with this fix, as Microsoft have not added the CPU to their official support list)
3500U - FP50T306
Please note you must use the correct version for your device. If you use the wrong one, it could damage the device or 'brick' it.
2.
Extract the contents to the root directory of a USB (e.g. E:\)
(It may need formatting as FAT32 for this to function)
3.
Reboot the WAP and repeatedly press F11 until you see the Boot Menu
(If you get an error about Secure Boot incompatibility, reboot again press Del instead to get into the UEFI BIOS settings then go to the Security tab and under Secure Boot choose to Disable Secure Boot and Save & Exit and do the F11 key again)
4.
Select your USB from the list (with EFI or UEFI in front of the USB's name) and press Enter when it's highlighted
(If your USB doesn't show up check go back to stage 2 and try with FAT32)
5.
Type: (press Enter after each line)
CD AMD[MODEL]
DIR
flash.nsh
(Replace [MODEL] with the number above e.g. AMD3020E or AMD2500U or AMD3500U)
Once the flashing process finishes and says it's successful, reboot the PC. Please ensure it is 100% complete before doing this. I believe the easiest way to reboot this device is to turn off the power at the wall and turn it back on again after.
6.
Make the required UEFI BIOS changes:
Press Del repeatedly to get into the UEFI BIOS.
Advanced Tab
CSM Configuration (Compatibility Support Module)
Change Boot Option Filter -> UEFI Only
Reboot using the Save & Exit screen
Back into the UEFI BIOS (Del)
Advanced Tab
CSM Configuration (Compatibility Support Module)
Change CSM Support -> Disabled
Reboot using the Save & Exit screen
Back into the UEFI BIOS (Del)
Security Tab
Change Secure Boot -> Enabled
Reboot using the Save & Exit screen
You should be good to use the system now. If you'd like to verify the TPM status, you can either do this in Windows or you can go back into the BIOS and check under the Advanced Tab that fTPM exists and is Enabled.