Why is the Insyde Software Firmware 5.5.1.18 - Nitro AN515-42

Spacegurk · July 2020

rolling out today all of sudden in 2020 via windows update function? What does it do except upgrade the Firmware to 1.8 - there is NO useful info online - Nitro AN515-42 - What is Firmware 1.8 adding or fixing? Never seen a UEFI Bios upgrade via Windows update before...

//Edited the content to add model name.

Ivan_Horchakov · July 2020

Spacegurk said:

rolling out today all of sudden in 2020 via windows update function? What does it do except upgrade the Firmware to 1.8 - there is NO useful info online - Nitro AN515-42 - What is Firmware 1.8 adding or fixing? Never seen a UEFI Bios upgrade via Windows update before...

Last time after such Insyde update my AN515-42's touch pad lost advanced abilities (gestures) and I was forced to roll back to official previous version of BIOS. Are you already updated? Is it Ok?

brummyfan2 · July 2020

Spacegurk said:

rolling out today all of sudden in 2020 via windows update function? What does it do except upgrade the Firmware to 1.8 - there is NO useful info online - Nitro AN515-42 - What is Firmware 1.8 adding or fixing? Never seen a UEFI Bios upgrade via Windows update before...

Hi,
Microsoft going to update BIOS in future through WU because many users bricking their laptops due to BIOS update, which version of Windows are you using?
I have received Firmware updates through WU in my Insider preview version, the latest BIOS version I could see is 1.17 in Acer's support page which adds Ctrl+S to show Touchpad and SATA mode in BIOS etc.
https://www.acer.com/ac/en/GB/content/support-product/7605?b=1

Spacegurk · July 2020

Seems to work fine and feels snappier - maybe just a feeling but everything works

Ivan_Horchakov · July 2020

Yeah, I've updated it too via WU - everything is fine this time

Kojay · July 2020

I wish microsoft updates don't deliver any more bios update. It's scary to update bios! It's more accurate to say it terrifies me! It's why I don't update my bios due to potential permanent damage. And now microsoft update is going to force it on me.....

Commodore_1995# · July 2020

@kojayThe risk is even greater, because windows update the bios along with other windows updates. The correct thing is to disable the firmware driver in the manager, so we don't have a surprise that the bios is being updated, when we see the Acer logo and a green progress bar after restarting windows.

batmalin · July 2020

The correct thing is Acer to add option in the BIOS as long with some other usefull features

Ktumaba · July 2020

Now I just have a few questions for Acer:

1) Now that the updates are only served through Microsoft, as an Acer Nitro 5 owner and user (and Linux / open source developer), how do I get information about Bios updates for my computer? Or am I now forced by Acer to switch back to the insecure, buggy and quite useless Windows operating system?

2) Why is Microsoft allowed to change my Bios now? It's like letting Hitler take over my family planning. It's not only one of the most stupid things to do but also Acer violates my trust in its products.

Commodore_1995# · July 2020

I suggest you read this microsoft article: https://docs.microsoft.com/en-us/windows-hardware/drivers/bringup/windows-uefi-firmware-update-platform

Ktumaba · July 2020

egydiocoelho said:

I suggest you read this microsoft article: https://docs.microsoft.com/en-us/windows-hardware/drivers/bringup/windows-uefi-firmware-update-platform

The thing is I don't want to be forced by Acer to use any Microsoft product cause Acer is ONLY serving Bios updates via Windows Update. If I can download the Bios update via the Nitro 5 support page I'm fine with that.

Commodore_1995# · July 2020

Who provides the updates is the microsoft and not the acer. In this case, the ideal is to completely disable the firmware driver in the device manager.

Ktumaba · July 2020

egydiocoelho said:

Who provides the updates is the microsoft and not the acer. In this case, the ideal is to completely disable the firmware driver in the device manager.

You are wrong in this case (see: http://www.catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=2edbd025-cc5b-4997-9654-d711b9d9c1f9 ). The provider and developer of the update is Insyde Software for Acer. Microsoft is just the only (which is the problem) distributor of the update. And for me, who doesn't use Microsoft Windows but the free OS Linux on the Nitro 5 it becomes a problem this way, cause there maybe will be bug fixes or improvements delivered with the Bios updates. Until now I was able to download the update via the Nitro 5 support page. But now it appears that Acer dropped the support for (that kind of) freedom.

Commodore_1995# · July 2020

I am not wrong. Yes, who designs the bios is Insyde and who makes the necessary changes is acer, according to the design of the notebook. However, who releases the updates through the windows update is microsoft.

On the other question, acer continues to make bios updates available through the website. However, there is a possibility that microsoft servers contain the latest version and that it is not yet available on the acer website.

Ktumaba · August 2020

egydiocoelho said:

I am not wrong. Yes, who designs the bios is Insyde and who makes the necessary changes is acer, according to the design of the notebook. However, who releases the updates through the windows update is microsoft.
On the other question, acer continues to make bios updates available through the website. However, there is a possibility that microsoft servers contain the latest version and that it is not yet available on the acer website.

Well, lets hope it is as you say. Would be nice to see Acer continue providing firmware / driver updates for its product on its own support page or maybe even decide to publish more firmware through for example the Linux Vendor Firmware Service ( https://fwupd.org ).

Commodore_1995# · August 2020

Yes. Perhaps acer can make some bios updates available through the linux operating system. Unfortunately, manufacturers ignore the Linux operating system.

Ktumaba · August 2020

No, not all ignore Linux. Dell and HP are regularly releasing updates via the Linux Vendor Firmware Service ( https://fwupd.org ). And also a lot of hardware vendors like for example AMD are working together with the Linux kernel team. All critical services in this world are running on Linux. Microsoft only survives cause it is buying (bribing) way into the world.

Kojay · August 2020

Is there way to stop receiving any future insyde or bios update from microsoft update? Is disabling system firmware in device manager help? Does it have any risk though if I disable system software? I really don't want to forcibly update the bios of my laptop. Also, I get a sense of anxiety if I disable the system firmware.

Dandriel · August 2020

I think it happend because: https://www.insyde.com/press_news/press-releases/insyde®-software-hardens-windows®-10-devices-secured-core-pc-enabled

Commodore_1995# · August 2020

Kojay said: Is there way to stop receiving any future insyde or bios update from microsoft update? Is disabling system firmware in device manager help? Does it have any risk though if I disable system software? I really don't want to forcibly update the bios of my laptop. Also, I get a sense of anxiety if I disable the system firmware. Yes, disabling the firmware driver in the device manager or the uefi capsule firmware in the bios. There is no risk in disabling the firmware driver.

Ktumaba · August 2020

Dandriel said:

I think it happend because: https://www.insyde.com/press_news/press-releases/insyde®-software-hardens-windows®-10-devices-secured-core-pc-enabled

Thanks @Dandriel for the hint. I wrote an email to Insyde ( security.report@insyde.com ):

Hello from Chile

At the end of July Microsoft started deploying updates which are flashing a new BIOS version on some Acer Nitro 5 laptops via Windows Update. And that without asking any permissions. I think it is part of this: https://www.insyde.com/press_news/press-releases/insyde%C2%AE-software-hardens-windows%C2%AE-10-devices-secured-core-pc-enabled .

As a Linux / Open Source Software Developer I'm really concerned about this behavior. Is there a way to protect my InsydeH2O® UEFI BIOS against Microsoft? And are there a plan to deliver BIOS updates also via other distribution services like the Linux Vendor Firmware Service ( https://fwupd.org ) or at least the website of Acer (the manufacturer of laptop)? Anyway I think there should be the owner (which is not Microsoft!!!) involved in the decision / process to update a such important computer component like the BIOS and not a dangerous organisation like Microsoft.

Best regards,

Andreas H