|
|
发表于 2020-7-19 21:09:50| 字数 18,105| - 中国–安徽–宣城 移动
|
显示全部楼层
|阅读模式
本帖最后由 xc2z888 于 2020-7-19 21:10 编辑
看不懂 谁能解说一下 谢谢
T480 BIOS 1.34
CHANGES IN THIS RELEASE
Version 1.34
[Important updates]
- Address CVE-2020-0548.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548)
- Address CVE-2020-0549.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549)
- Address CVE-2020-0543.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543)
[New functions or enhancements]
- Nothing.
[Problem fixes]
- Nothing.
--------------------------------------------------------------------------------
DETERMINING WHICH VERSION IS INSTALLED
There are two ways to check the UEFI BIOS version and BIOS ID.
[Checking on Windows]
1. Hold down the Windows logo key and press X to open a menu at the lower-left
area of the screen.
2. Select Control Panel from the menu.
3. Make sure "View by Category" is selected, and select System and Security,
select Administrative Tools, and then select System Information.
- or -
2. Select Run from the menu.
3. Type msinfo32, and press Enter.
4. On the System Information window, make sure System Summary is selected in
the left side of the window.
5. Locate the BIOS version/date line in the right side of the window.
"LENOVO BIOS ID (BIOS version), date" will be shown.
If you are prompted for an administrator password or confirmation, type your
password, or click Continue.
[Checking on ThinkPad Setup]
1. Turn on the computer to start Windows.
2. Hold down the Windows logo key.
3. Select Power from the menu.
4. Select Reboot to restart the computer.
5. While the "To interrupt normal startup, press Enter" message is displayed
at the lower-left area or lower-center of the screen, press the F1 key.
The ThinkPad Setup menu will be displayed. If a password prompt appears,
type the correct password.
6. Locate the UEFI BIOS Version line and Embedded Controller Version line.
"UEFI BIOS version (BIOS ID)" will be shown on the UEFI BIOS Version line.
7. Turn off the computer.
--------------------------------------------------------------------------------
NOTES
- Do not downgrade BIOS to the version before 1.12 with the Fibocom L850-GL WWAN device
because system may not work properly.
- Be aware that ThinkPad Dock have the latest Dock firmware by applying
the Dock firmware update tool available at the Lenovo site.
- Be aware that the OS Optimized Defaults option in the Restart menu of ThinkPad
Setup should not be normally changed. Lenovo recommends to use the factory
default setting for it, as follows.
- OS Optimized Defaults [Enabled]
If the OS Optimized Defaults setting is changed, Setup Default by the F9 key
will not load the same default configuration, as follows. Furthermore, by the
condition of Operating System installation, the computer may not be booted due
to the setting change.
If your computer runs satisfactorily now, you have no need to change the OS
Optimized Defaults option. If you need to change the setting, consider well
the effect of the setting change.
Affected Setup menu items :
"OS Optimized Defaults" setting [Disabled] case [Enabled] case
- Security
- UEFI BIOS Update Option
- Secure RollBack Prevention [Disabled] [Enabled]
- Secure Boot
- Secure Boot [Disabled] [Enabled]
- Startup
- UEFI/Legacy Boot [Both] [UEFI Only]
- UEFI/Legacy Boot Priority [UEFI First] (Not shown)
- CSM Support [Yes] [No]
(Caution)
If both the Secure Boot option is Enabled and UEFI Secure Boot in the Main
menu of ThinkPad Setup is shown as Off, restoring Factory Keys is needed. Do
the following to restore Factory Keys.
1. Enter the ThinkPad Setup menu by following steps in [Checking On ThinkPad
Setup] in the DETERMINING WHICH VERSION IS INSTALLED section.
2. Select Security, then select Secure Boot.
3. Select Restore Factory Keys, and press Enter.
4. Select Yes to restore Factory keys.
5. Press the F10 key to save configuration and exit.
6. Select Yes.
The computer will be restarted automatically.
--------------------------------------------------------------------------------
UPDATING THE UEFI BIOS
Notes:
- Do not downgrade BIOS to the version before 1.12 with the Fibocom L850-GL WWAN device
because system may not work properly.
- If your computer runs satisfactorily now, it may not be necessary to update
the UEFI BIOS. To determine if you should update the UEFI BIOS, refer to the
Version Information section.
- You need an AC adapter and a charged battery pack.
- Remove the Power-on password prior to updating the UEFI BIOS in the remote
deployment environments.
Attention:
Do not turn off or suspend the computer until the update has been completed.
IF YOU DO THAT WHILE THE UPDATE IS STILL IN PROGRESS, THE SYSTEM BOARD MAY
HAVE TO BE REPLACED.
Manual Update
This section assumes to use Microsoft Edge and Windows Explorer.
Downloading file
1. Click once on the underlined file name. Once this is done, some pop-up
windows will appear.
2. Follow the instructions on the screen.
3. In the window to choose "Save" or "Save as", click "Save".
Once the download has completed, there may or may not be a message stating
that the download completed successfully.
Extracting file
4. Make sure to be logged on with an administrator account on the target
computer.
5. Make sure the AC adapter is firmly connected to the target computer.
6. Open a Windows Explorer and select "Downloads" from "Quick access".
7. Locate the file that was downloaded and double-click it.
8. Follow the instructions on the screen.
9. In Extract or Install? window, select "Install", click Next, and move to
step 13 to continue installation.
Or, select "Extract only" and click Next to extract and keep the files
on the specified folder.
10. In the Select Destination Location window, click Extract.
If you would like to select a different folder, click Browse.
11. All the necessary files will be extracted to the folder selected in the step 10.
12. Click Finish.
Updating the UEFI BIOS
13. In the Ready to Install window, click Install. All the necessary files will
be extracted to the temporary folder and BIOS will be ready to update.
Extracted files will be deleted after installation.
14. Click Finish.
15. Follow the instructions on the screen.
16. Select 'Update ThinkPad BIOS' and follow the instructions on the screen.
17. The program shows a message 'System program update is continued by BIOS at
the next reboot'.
18. Click OK.
The computer will be restarted automatically and the EFI BIOS will be
updated.
Unattended Update
This is for system administrators' use only.
1. Refer to the Manual Update section, and download and extract the file.
2. At the command line, execute WINUPTP.EXE with the -s option.
Example: [Path where the files were extracted]\WINUPTP -s
3. Restart or fully shut down the computer.
Note:
Make sure to restart or fully shut down the computer to complete the BIOS
update. If hybrid shutdown is made after the BIOS update on Windows 10,
the update will not be done correctly.
Full shutdown can be done with the following command at the command line on
Windows 10.
Shutdown /s /t 0
To view the update result, refer to the WINUPTP.log file created at the same
directory of the package.
--------------------------------------------------------------------------------
INITIALIZING UEFI BIOS
UEFI BIOS Initialization is suggested for some problems. To initialize the
UEFI BIOS settings:
1. Turn on the computer to start Windows.
2. Hold down the Windows logo key.
3. Select Power from the menu.
4. Select Reboot to restart the computer.
5. While the "To interrupt normal startup, press Enter" message is displayed
at the lower-left area or lower-center area of the screen, press the F1 key.
The ThinkPad Setup menu will be displayed. If a password prompt appears,
type the correct password.
6. Press the F9 key to load default configuration.
7. Select Yes.
8. Press the F10 key to save default configuration and exit.
9. Select Yes.
10. Restart the computer.
Note:
After initialization you may need to reapply some settings that you had
changed previously.
--------------------------------------------------------------------------------
VERSION INFORMATION
The following versions of UEFI BIOS and ECP (Embedded Controller Program) have
been released to date.
Absolute Persistence Module version
-----------------------------------
Package (ID) UEFI BIOS (BIOS ID) ECP (ECP ID) Rev. Issue Date
---------------- -------------------- ---------------- ---- ----------
1.34 (N24UJ22W) 1.34 (N24ET59W) 1.20 (N24HT35W) 01 2020/06/15
1.33 (N24UJ21W) 1.33 (N24ET58W) 1.20 (N24HT35W) 01 2020/05/27
1.31 (N24UJ19W) 1.31 (N24ET56W) 1.20 (N24HT35W) 01 2020/03/03
1.30 (N24UJ18W) 1.30 (N24ET55W) 1.20 (N24HT35W) 01 2020/01/23
1.29 (N24UJ17W) 1.29 (N24ET54W) 1.19 (N24HT34W) 01 2019/12/19
1.28 (N24UJ15W) 1.28 (N24ET53W) 1.18 (N24HT33W) 01 2019/11/08
1.26 (N24UJ14W) 1.26 (N24ET51W) 1.17 (N24HT32W) 01 2019/09/17
1.25 (N24UJ13W) 1.25 (N24ET50W) 1.16 (N24HT31W) 01 2019/07/12
1.24 (N24UJ12W) 1.24 (N24ET49W) 1.14 (N24HT29W) 01 2019/05/08
1.23 (N24UJ11W) 1.23 (N24ET48W) 1.13 (N24HT28W) 01 2019/03/06
1.21 (N24UJ10W) 1.21 (N24ET46W) 1.12 (N24HT27W) 01 2019/01/31
1.19 (N24UJ09W) 1.19 (N24ET44W) 1.11 (N24HT26W) 02 2018/12/20
1.19 (N24UJ09W) 1.19 (N24ET44W) 1.11 (N24HT26W) 01 2018/11/14
1.18 (N24UJ08W) 1.18 (N24ET43W) 1.11 (N24HT26W) 01 2018/10/24
1.17 (N24UJ07W) 1.17 (N24ET42W) 1.10 (N24HT25W) 01 2018/09/28
1.16 (N24UJ06W) 1.16 (N24ET41W) 1.09 (N24HT24W) 01 2018/07/25
1.14 (N24UJ05W) 1.14 (N24ET39W) 1.09 (N24HT24W) 01 2018/06/13
1.12 (N24UJ04W) 1.12 (N24ET37W) 1.08 (N24HT23W) 01 2018/03/22
1.11 (N24UJ03W) 1.11 (N24ET36W) 1.08 (N24HT23W) 01 2018/03/06
1.10 (N24ET35W) 1.06 (N24HT21W) Factory Use Only
1.07 (N24UJ01W) 1.07 (N24ET32W) 1.06 (N24HT21W) 01 2018/01/31
Non-Absolute Persistence Module version
-----------------------------------
Package (ID) UEFI BIOS (BIOS ID) ECP (ECP ID) Rev. Issue Date
---------------- -------------------- ---------------- ---- ----------
1.34 (N24UJ22W) 1.34 (N24ET59P) 1.20 (N24HT35W) 01 2020/06/15
1.33 (N24UJ21W) 1.33 (N24ET58P) 1.20 (N24HT35W) 01 2020/05/27
1.31 (N24UJ19W) 1.31 (N24ET56P) 1.20 (N24HT35W) 01 2020/03/03
1.30 (N24UJ18W) 1.30 (N24ET55P) 1.20 (N24HT35W) 01 2020/01/23
1.29 (N24UJ17W) 1.29 (N24ET54P) 1.19 (N24HT34W) 01 2019/12/19
1.28 (N24UJ15W) 1.28 (N24ET53P) 1.18 (N24HT33W) 01 2019/11/08
Note: Revision number (Rev.) is for administrative purpose of this README
document and is not related to software version. There is no need to
upgrade this software when the revision number changes.
To check the version of UEFI BIOS and Embedded Controller Program, refer to
the Determining which version is installed section.
Summary of Changes
Where: < > Package version
UEFI: UEFI BIOS version
ECP: Embedded Controller Program version
[Important] Important update
(New) New function or enhancement
(Fix) Correction to existing function
<1.34>
UEFI: 1.34 / ECP: 1.20
- [Important] Address CVE-2020-0548.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0548)
- [Important] Address CVE-2020-0549.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0549)
- [Important] Address CVE-2020-0543.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2020-0543)
<1.33>
UEFI: 1.33 / ECP: 1.20
- [Important] Update includes a security fix.
- (New) Updated the Diagnostics module to version 04.12.001.
<1.31>
UEFI: 1.31 / ECP: 1.20
- [Important] Update includes security fixes.
<1.30>
UEFI: 1.30 / ECP: 1.20
- [Important] Addresses CVE-2019-6173 and CVE-2019-6196.
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6173)
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6196)
Refer to Lenovo's Security Advisory page for additional information
about LEN-27431 "DLL Search Path and Symbolic Link Vulnerabilities".
(https://support.lenovo.com/us/en/product_security/LEN-27431)
(Note)
Vulnerabilities exploitable only during installation.
Previously installed version is not vulnerable to these CVEs.
- (Fix) Fixed an issue where a system hardware controller device might disappear
from Device Manager at 2nd boot.
<1.29>
UEFI: 1.29 / ECP: 1.19
- [Important] Addresses CVE-2019-0185.
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0185)
Refer to Lenovo's Security Advisory page for additional information
about LEN-27714 "Multi-vendor BIOS Security Vulnerabilities".
(https://support.lenovo.com/us/en/product_security/LEN-27714)
- [Important] Addresses CVE-2019-14607.
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14607)
- [Important] Security fix addresses LEN-29406 "ST Microelectronics TPM Firmware
ECDSA Signature Generation Vulnerability".
Refer to Lenovo's Security Advisory page for additional information.
(https://support.lenovo.com/us/en/solutions/LEN-29406)
- (New) Supported BIOS password authentication before entering into MEBx.
- (New) Updated the Diagnostics module to version 04.11.000.
<1.28>
UEFI: 1.28 / ECP: 1.18
- [Important] Addresses CVE-2019-0151 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0151)
- [Important] Addresses CVE-2019-0152 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0152)
- [Important] Addresses CVE-2019-0123 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0123)
- [Important] Addresses CVE-2019-0124 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0124)
- [Important] Addresses CVE-2019-0117 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0117)
- [Important] Addresses CVE-2019-0184 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0184)
Refer to Lenovo's Security Advisory page for additional information about
LEN-27714 "Multi-vendor BIOS Security Vulnerabilities".
(https://support.lenovo.com/us/en/product_security/LEN-27714)
- [Important] Update includes a security fix.
- (New) Updated the CPU microcode.
- (New) Support for non-Absolute Persistence Module version of UEFI BIOS.
- (Fix) Fixed an issue where monitors attached to ThinkPad Docking stations are
disconnected when battery charging is reached to 100%.
<1.26>
UEFI: 1.26 / ECP: 1.17
- [Important] Update includes a security fix.
- (Fix) Fixed an issue where the screen might not be displayed on Thinkpad LCD
when opened lid just before startup Windows.
- (Fix) Fixed an issue where the Always On USB port might not work when Powered
on with AC Attach.
<1.25>
UEFI: 1.25 / ECP: 1.16
- [Important] Update includes a security fix.
- (Fix) Fixed an issue where system might hang up at POST when some KVM device was connected.
- (Fix) Fixed an issue where system may enter shutdown after press power button of
Thunderbolt 3 Dock Gen2/Thunderbolt 3 Workstation Dock to resume S3.
<1.24>
UEFI: 1.24 / ECP: 1.14
- [Important] Enhancement to address security vulnerability CVE-2018-12126.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2018-12126)
- [Important] Enhancement to address security vulnerability CVE-2018-12127.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2018-12127)
- [Important] Enhancement to address security vulnerability CVE-2018-12130.
(https://cve.mitre.org//cgi-bin//cvename.cgi?name=CVE-2018-12130)
Refer to Lenovo's Security Advisory page for additional information about LEN-26696
"Microarchitectural Data Sampling (MDS) Side Channel Vulnerabilities"
(https://support.lenovo.com/us/en/product_security/LEN-26696).
- (New) Updated the CPU microcode.
- (New) Updated the Diagnostics module to version 04.08.000.
- (Fix) Fixed an issue where system might automatically wake up right after shutdown.
- (Fix) Fixed an issue where Thunderbolt 3 Dock Gen2/Thunderbolt 3 Workstation Dock
LAN device might not be recognized as boot device when system in legacy boot mode.
- (Fix) Fixed an issue where PCI LAN option is missing in the BIOS boot order after
Microsoft SCCM installation.
<1.23>
UEFI: 1.23 / ECP: 1.13
- [Important] Update includes a security fix.
- (Fix) Fixed an issue where incorrect wattage is displayed when attach an AC adaptor.
<1.21>
UEFI: 1.21 / ECP: 1.12
- [Important] Update includes a security fix.
- (New) Updated the Diagnostics module to version 04.06.000.
- (Fix) Fixed an issue where audio pop noise come out when operate mouse during playback movies.
<1.19>
UEFI: 1.19 / ECP: 1.11
- (Fix) Fixed an issue where the system might hang up when Thunderbolt BIOS Assist Mode
was changed on Diagnostics Boot Mode.
<1.19>
UEFI: 1.19 / ECP: 1.11
- (Fix) Fix an issue where BSOD might occur during Restart/Hibernation under Windows 10
version 1809 on the NVIDIA graphics device.
<1.18>
UEFI: 1.18 / ECP: 1.11
- (New) Updated the CPU microcode.
- (New) Updated the Diagnostics module to version 04.04.001.
- (New) BootOrderLock was shown as Enable in WMI command if Device Guard was enabled.
<1.17>
UEFI: 1.17 / ECP: 1.10
- [Important] Update includes a security fix.
- [Important] Added Hyper Threading enable/disable option to ThinkPad Setup for virtualized
system users in order to address LEN-24163 L1 Terminal Fault Side Channel
Vulnerabilities (CVE-2018-3646). Refer to Lenovo's Security Advisory page for
additional information.(https://support.lenovo.com/us/en/solutions/LEN-24163)
- (New) Updated the Diagnostics module to version 04.00.001.
- (New) Support WWAN Enable/Disable in ThinkPad Setup - Security - I/O Port Access.
(Note) If your system has L850-GL Wireless WAN (Mobile Broadband) device
integrated, please install the latest device driver which version is
newer than equal 0.9.4.89.
- (New) Supported Battery Firmware Update via Windows Update.
(Note) New device node will appear on Device Manager.
- (Fix) Fixed an issue where BIOS silent update might fail with system account.
- (Fix) Fixed an issue where the system may not unlock by TPM pin code.
- (Fix) Fixed an issue where the system might display the error message "The connected
AC adapter has a lower wattage than the recommended AC adapter".
<1.16>
UEFI: 1.16 / ECP: 1.09
- [Important] Update includes a security fix.
- (New) Support TPM firmware update by utility.
- (Fix) Fixed an issue where BIOS POST might display the error message "Boot Manager recover
from an error."
- (Fix) Fixed an issue where BIOS POST might display the error message "1802: Unauthorized
network card is plugged in - Power off and remove the network card (8086/7360/0000/0000)."
<1.14>
UEFI: 1.14 / ECP: 1.09
- [Important] Security fix addresses LEN-22133 Speculative Execution Side Channel
Variants 4 and 3a (CVE-2018-3639, CVE-2018-3640).
Refer to Lenovo's Security Advisory page for additional information.
(https://support.lenovo.com/product_security/home)
- (Fix) Fix an issue where Ethernet is unstable when network boot was tried before
Windows boot in Legacy boot mode.
- (Fix) Fix an issue where the system may hang when entering to BIOS setup menu
with USB keyboard at Legacy boot.
- (Fix) Fix an issue where the system may not wake by Thunderbolt device after
BIOS load default.
- (Fix) Fix an issue where Wireless LAN device is disabled at boot when "Disable
new DMA devices when this computer is locked" is enabled at Group Policy
on Windows 10 Version 1703.
- (Fix) Fix an issue where ThinkPad LCD might be detected when LID closed even
user set power policy as "Lid Close Do nothing".
<1.12>
UEFI: 1.12 / ECP: 1.08
- [Important] Security fix addresses LEN-19568 Intel Active Management Technology MEBx Access Control Bypass.
- (New) Support of Fibocom L850-GL WWAN device.
(Note) Do not downgrade BIOS to the version before 1.12 with the Fibocom L850-GL WWAN device
because system may not work properly.
- (New) Updated the Diagnostics module to version 03.12.003.
- (Fix) Fix an issue where system may become hot by system interrupts when Thundrebolt is
disabled in ThinkPad Setup - Security - I/O Port Access.
<1.11>
UEFI: 1.11 / ECP: 1.08
- [Important] Enhancement to address CVE-2017-5715.
- (New) Supported Pre-Boot ACL option for Thunderbolt device on pre-boot environment
in ThinkPad Setup - Config - Thunderbolt 3.
- (Fix) Fix an issue where "PC isn't charging." message might be displayed when system
stops charging the battery.
<1.10>
UEFI: 1.10 / ECP: 1.06
- (New) Support of the Intel Optane memory model.
<1.07>
UEFI: 1.07 / ECP: 1.06
- (New) Initial release for ThinkPad T480.
--------------------------------------------------------------------------------
LIMITATIONS
Nothing.
--------------------------------------------------------------------------------
TRADEMARKS
* Lenovo, ThinkPad and ThinkVantage are registered trademarks of Lenovo.
* Intel and Thunderbolt are registered trademarks of Intel Corporation.
* Microsoft and Windows are registered trademarks of Microsoft Corporation.
* Microsoft Edge is a trademark of Microsoft Corporation.
Other company, product, and service names may be registered trademarks,
trademarks or service marks of others.
|
|
狗仔卡
离线
提升卡
置顶卡
变色卡
