Update BIOS on Dell OptiPlex 7010

I have 3 7010's, 1 appears to already be updated to the latest and the other 2, not so much. I just updated my laptop's BIOS because I was seeing ACPI errors and was hoping patching the BIOS might fix it. I still see errors, but am not sure yet if those are related.

All of my equipment is Dell, and the laptop was easy, hit F12, then select Update BIOS. I think the 7010's are quite ancient and I went through the BIOS and don't see anything pertaining to update BIOS, hardware, firmware, etc. I don't run Windows.

I suppose:
1. I came across: https://forums.freebsd.org/threads/bios-update-using-usb-stick.12292/, it is a bit dated, but I also found posts in Linux forums suggesting I create a FreeDOS bootable USB stick.
2. If the machine is running fine, should I still update it? The BIOS version I'm running is 2013 and the latest is 2018 :).
3. CPU microcode is different from the BIOS as the BIOS is responsible for all of the hardware on the mainboard and the CPU microcode is just the CPU.

To follow up on question #2, how would the BIOS make my system insecure once the system is up and running? How would the CPU microcode make the system insecure as well?
 
If the machine is running fine, should I still update it

I have been updating the BIOS of my dell optiplexes and I have not noticed any differences functionality-wise so far. One of the recent updates has made my optiplex 7080 report errors with my fans (I replaced stock fans with better ones, but they run at a lower rpm) more often than the previous BIOS version. Unfortunately, the BIOS downgrade options does not seem to work for me and I am stuck at the latest version.
 
I have been updating the BIOS of my dell optiplexes and I have not noticed any differences functionality-wise so far. One of the recent updates has made my optiplex 7080 report errors with my fans (I replaced stock fans with better ones, but they run at a lower rpm) more often than the previous BIOS version. Unfortunately, the BIOS downgrade options does not seem to work for me and I am stuck at the latest version.
How did you go about updating your OptiPlexes?
 
A botched BIOS update could brick the machine. Now, most modern systems have some kind of recovery option in case this happens, but you might have a system that doesn't have such a recovery option. In that case I wouldn't risk updating the BIOS if you're not having issues with the current one.
 
How did you go about updating your OptiPlexes?

I download the '.rcv' BIOS images from their support website, put it in a FAT32 formatted usb drive, boot into BIOS and use the update menu there. I do the same on a 7080, 7070 and a 7050.

Once while trying a live linux usb (it was probably Fedora), its firmware updater found an update for my BIOS and restarted the machine and installed it; I am not sure how it did it!
 
The instructions for the latest BIOS update on the Dell 7010 are pretty clear on how to update:
Run the BIOS update utility from DOS environment if Legacy Boot Mode(Non-Windows users)
1. Copy the downloaded file to a bootable DOS USB key.
2. Power on the system, then Press F12 key and Select "USB Storage Device" and Boot to DOS prompt.
3. Run the file by typing copied file name where the executable is located.
4. DOS System will auto restart and update BIOS while system startup screen.
5. After BIOS update finished, system will auto reboot to take effect.

Run the BIOS update utility from DOS environment if UEFI Boot Mode (Non-Windows users)
1. Copy the downloaded file to a bootable DOS USB key.
2. Power on the system, then go to BIOS Setup by pressing F2 and go to "General-Boot Sequence - Boot List Option"
3. Change "UEFI" to "Legacy" of Boot List Option
4. Click "Apply", "Exit" to save changes and reboot system.
5. Press F12, then Select "USB Storage Device" and Boot to DOS prompt.
6. Run the file by typing copied file name where the executable is located.
7. After BIOS update finished, system will auto reboot .
8. Go to BIOS Setup by pressing F2 and go to "General > Boot Sequence > Boot List Option"
9. Change "Legacy" to "UEFI" Boot Option.
10. Click "Apply", "Exit" to save changes and reboot system

--------------------------------------------------------------------------------
Note 1: You will need to provide a bootable DOS USB key. This executable file does not create the DOS system files.
Note 2: Please make sure you suspend BitLocker encryption before updating BIOS on a BitLocker enabled system.
If you don't enable BitLocker on your system you can ignore it.
Note 3: If you are currently running Windows 8.1 with BIOS older than A15 please flash BIOS in DOS mode

At my workplace, we keep the BIOS up to date on all our computers. We have thousands of systems we support, and not one time have we ever encountered a problem with updating the BIOS on any of the computers. Dell BIOS updates are particularly stable, and tend to resolve random undocumented issues. Even though these systems are old, I recommend going ahead and updating to the latest BIOS available from Dell.

A fun fact to consider is that there exist BIOS hacks for this computer that would allow you to boot from a PCIe connected NVME drive. This requires you to be updated to the latest BIOS. I have done this to my Optiplex 7020, and it works well. I tested FreeBSD booting from the NVME connected to a PCIe adapter. To do the modification, you do unfortunately have to have at least a temporary Windows installation, but it is a fun exercise.
 
I download the '.rcv' BIOS images from their support website, put it in a FAT32 formatted usb drive, boot into BIOS and use the update menu there. I do the same on a 7080, 7070 and a 7050.

Once while trying a live linux usb (it was probably Fedora), its firmware updater found an update for my BIOS and restarted the machine and installed it; I am not sure how it did it!
Hmm, perhaps my 7010 is quite ancient and the BIOS does not support that. My laptop is a precision 7540 and has that option in the BIOS. I updated that to resolve ACPI errors, but I'm not sure it made any difference :(.
 
2. If the machine is running fine, should I still update it? The BIOS version I'm running is 2013 and the latest is 2018 :).
3. CPU microcode is different from the BIOS as the BIOS is responsible for all of the hardware on the mainboard and the CPU microcode is just the CPU.

To follow up on question #2, how would the BIOS make my system insecure once the system is up and running? How would the CPU microcode make the system insecure as well?

The microcode updates for security are so-so. Most vulnerabilities do not yet apply in a major way to machines with one user. This will change when exploits can be done via Javascript and webassembly on machines where websurfing happens. Chances are that a 2018 BIOS doesn't fix your CPU anyway.

As for other functionality that might be fixed:
- study the changelog for the BIOSes and see whether anything applies to you
- in the changelog is of insufficient quality to do that change the hardware vendor

In general I update everything always but I did brick a couple of Supermicro boards due to IMHO not my own fault. So it is a mixed bag.
 
A botched BIOS update could brick the machine. Now, most modern systems have some kind of recovery option in case this happens, but you might have a system that doesn't have such a recovery option. In that case I wouldn't risk updating the BIOS if you're not having issues with the current one.
Yeah, I would agree, I'm not having any issues and unless there is a gaping security hole, I think I'd rather let this machine die a natural death ...
 
  • Like
Reactions: drr
Back
Top