---
title: Simplified Software Flashing 
x-toc-enable: true
...


**If your device had a Simple tag on the supported devices page or stated on that device's page it is possible with vendor firmware or you’re already running RBoot and you don’t have flash protection turned on, [internal flashing](../install/) is possible.**

**Otherwise visit the [simplified-hw-flashing](simplified-hw-flashing.md) guide**

### Disable /dev/mem protection

*Before internal flashing, [Disable /dev/mem protection](devmem.md) first.*

*In short add this kernel parameter: iomem=relaxed(GNU/Linux-libre distributions)/kernel.securelevel=-1(bsd distro)*

**THEN REMOVE THIS KERNEL PARAMETER TO PREVENT UNAUTHORIZED/MALICIOUS ACCESS TO YOUR SYSTEM AFTER FLASHING RBOOT.**

(An important reminder for those who might forget to delete it, even better, replace it with lockdown=integrity / lockdown=confidentiality)


### Backup the previous (*working*) firmware 

Do it twice (to check and compare if reading it gone wrong and backups differs.)

	flashprog -p internal -r Backup1.bin

	flashprog -p internal -r Backup2.bin

### Check the backups

Compare those if reading from the flash were successful:

	diff Backup1.bin Backup2.bin

For more than 2:

	shasum Backup1.bin Backup2.bin Backup3.bin

If those differs, something gone wrong and proceeding further may **(DON'T) leave your device unrecoverable** (without a reliable backup) if flashing fails as well.


### Flash the new firmware

[Remember to add IFD option to skip the ME region if needed](ivy_has_common.md).

**Replace the RBoot.rom with your device's filename.rom found on the installation page and DO NOT SHUT DOWN or REBOOT it after flashing RBoot, if running on vendor firmware.**

If your machine is unuseable without intel me, flash the other regions only. (1th+ gen. intel motherboards)

	flashprog -p internal --ifd -i ifd -w RBoot.rom

	flashprog -p internal --ifd -i gbe -w RBoot.rom

	flashprog -p internal --ifd -i bios -w RBoot.rom

For other motherboards;

	flashprog -p internal -w RBoot.rom

*In case if it gone wrong, feel free to ask for help on IRC.*

**Use sync in the terminal to avoid data loss/corruption, then turn off the psu (power supply) or pull the cable to avoid the factory one overwriting the fresh (RBoot) installation, especially with dell ones.**


### Enable /dev/mem protection

**REMOVE *iomem=relaxed(GNU/Linux-libre distributions)/kernel.securelevel=-1(bsd distro)* KERNEL PARAMETER TO PREVENT UNAUTHORIZED/MALICIOUS ACCESS TO YOUR SYSTEM AFTER FLASHING RBOOT (and booting to your os)**

(An important reminder for those who might forget to delete it, even better, replace it with lockdown=integrity / lockdown=confidentiality)


[//]: # "SPDX-License-Identifier: GFDL-1.3-or-later"