Release Notes
Following Release Notes describe status of open-source firmware development for Protectli VP2420 family.
For details about our release process please read Dasharo Standard Release Process.
Test results for this platform can be found here.
v1.1.0 - 2023-04-20
Added
Changed
- Updating from v1.0.x requires flashing the WP_RO recovery partition
- Firmware version v1.1.x are signed with a new key
- Keys must be provisioned prior enabling Secure Boot
Fixed
- VP2420 memory issues and incorrectly reported memory capacity
- Popup with information about recovery mode is still displayed after flashing with a valid binary
Known issues
Binaries
protectli_vp2420_v1.1.0.rom sha256 sha256.sig
To verify binary integrity with hash and signature please follow the instructions in Dasharo release signature verification using this key
SBOM (Software Bill of Materials)
v1.0.1 - 2023-02-02
Added
Changed
- Downgrade edk2 Secure Boot driver to achieve consistent user experience as on the VP46XX v1.0.19 release
Fixed
- Dasharo BIOS lock menu is missing
- iPXE entry doesn't occur in setup menu
- Impossibility of pfSense/OPNsense console versions installation
Known issues
- Popup with information about recovery mode is still displayed after flashing with a valid binary
- pfSense boot time
- Double characters in pfSense initial boot phase
Binaries
protectli_vp2420_v1.0.1.rom sha256 sha256.sig
To verify binary integrity with hash and signature please follow the instructions in Dasharo release signature verification using this key
SBOM (Software Bill of Materials)
v1.0.0 - 2022-12-22
Added
- Support for VP2420 platform
- Vboot Verified Boot
- TPM Measured Boot
- Vboot recovery notification in UEFI Payload
- UEFI Shell
- UEFI Secure Boot
- BIOS flash protection for Vboot recovery region
- UEFI boot support
- Intel i225 controller network boot support
- Customized boot menu keys
- Customized setup menu keys
- Configurable boot order
- Configurable boot options
Binaries
protectli_VP2420_v1.0.0.rom sha256 sha256.sig
How to verify signatures:
wget https://3mdeb.com/open-source-firmware/Dasharo/protectli_vault_ehl/v1.0.0/protectli_vp2420_v1.0.0.rom
wget https://3mdeb.com/open-source-firmware/Dasharo/protectli_vault_ehl/v1.0.0/protectli_vp2420_v1.0.0.rom.sha256
wget https://3mdeb.com/open-source-firmware/Dasharo/protectli_vault_ehl/v1.0.0/protectli_vp2420_v1.0.0.rom.sha256.sig
gpg --fetch-keys https://raw.githubusercontent.com/3mdeb/3mdeb-secpack/master/keys/master-key/3mdeb-master-key.asc
gpg --fetch-keys https://raw.githubusercontent.com/3mdeb/3mdeb-secpack/master/dasharo/3mdeb-dasharo-master-key.asc
gpg --fetch-keys https://raw.githubusercontent.com/3mdeb/3mdeb-secpack/master/customer-keys/protectli/release-keys/protectli-dasharo-firewall-release-1.0-key.asc
gpg --list-sigs "3mdeb Master Key" "3mdeb Dasharo Master Key" "Protectli Dasharo Firewall Release 1.0 Signing Key"
sha256sum -c protectli_vp2420_v1.0.0.rom.sha256
gpg -v --verify protectli_vp2420_v1.0.0.rom.sha256.sig protectli_vp2420_v1.0.0.rom.sha256