I read somewhere on Reddit that people who use Linux should periodically, manually check for security updates to their computers’ BIOS from their motherboard manufacturers, because Linux apparently ends automatic updates once you leave Windows. I have no idea of where to look on the ASUS website for my Zenbook 14, or if that’s even the right place. Could anyone give any guidance on this matter? Is this a thing that we should indeed be doing semiannually or something?
And what else should I be doing on a schedule (even if annually), while I’m at it? Haha.
Edit: thanks, everyone!
So, folks who responded are conflating BIOS with UEFI. It’s a common mistake - but they are very different things that serve the same purpose.
BIOS is older technology. It usually wasn’t risky unless the board was somehow faulty, but there was always some risk because you were directly reflashing the CMOS.
UEFI is the current technology. If your board is less than 10 years old, you almost definitely have UEFI and not BIOS. It’s stored in NOR flash memory on the motherboard.
UEFI’s nature and design make it much simpler and safer to update. UEFI can be updated automatically within Linux; BIOS requires the board manufacturer’s utility to reprogram the CMOS.
I’m simplifying some of this. But this should help explain the conflicting responses of what gets updated under Linux.
Asus seems to be supported by fwupd, at least they are listed on the vendors list, so I suppose (?) it can manage the update for you. Depending on your distro this might event be automatic by default, otherwise depending on your DE this might be available from the graphical software store or just from the cli.
They are supported, but they only push updates to a few models (typically server models).
For desktop motherboards, its better to go to ASUS’s support website, look up your board, download the latest BIOS, and install it per their instructions.
Also, if you have ANY custom settings in your BIOS, such as overclocked CPU, mem timings, IOMMU enabled, SecureBoot keys, etc, BE SURE TO BACK THEM UP before upgrading your BIOS. I have a notes.txt file of all my BIOS settings because I have to reapply everything after an update since it sets everything to default.
You just go to the support site and download and install them? Same as on Windows.
And no, you can get automatic firmware updates under Linux too, through fwupdmgr and similar tools.
fwupdmgr get-devices --show-allIf you see your bios/uefi firmware, piece of cake.
fwupdmgr update [device]However, fwupd generally runs at boot and as a daemon and will check automatically so you don’t have to do this.
But, if you don’t have it running for whatever reason, use those commands.
If that doesn’t work, you might have to use a usb formatted to fat32 and have freedos installed on it along with your bios.exe file and boot to the usb to flash your bios.
Hmm, yeah, it found nothing. I have no idea of how to check whether it runs at boot, though. I suppose I’ll just assume so… thanks!
Turn your laptop around and look for a sticker with a model number. Go to your vendor’s support website, search for the model number and check their BIOS/UEFI downloads. Usually it’s a file you put on a USB stick, then you boot into BIOS/UEFI (press F12 or DEL ob boot, check manual if in doubt), select BIOS/UEFI update and select the file on the USB stick.
It’s the same for desktop components. There are very few vendors/models that get BIOS/UEFI updates via Windows Update (or fwupd under Linux).
I was genuinely surprised to see my Dell laptop get firmware updates thru fwupd
I don’t think my old Windows PC ever did an automatic update…
Google something like “BIOS update Asus” plus your computer model, then download the file from the official Asus site if out of date.
You don’t need anything but a USB with the update files downloaded to them. Boot to BIOS, choose update, point to USB, done.
Definitely don’t reset or power off while it’s updating itself, though.
ASUS will have the steps and files for your mobo model on their site. It’s very simple.