Approach for BIOS updates these days?

[DrBeaker]

All,

 

What's the general consensus on BIOS updates these days?

 

I was always taught NEVER to update the BIOS unless it actually fixes something. But over the past few years, I'm reading more and more however that it's becoming part of regular maintenance and security updates etc despite the risks of bricking the system?

 

What does everyone else do these days? Leave it alone, regular updates etc? With Windows 10 and UEFI now updates occasionally come through as a Windows Update too.

 

Just wanted to gauge opinions.

 

Thanks

[mavhc]

Update all the things. But not all at once. Last week random hp bios update on new laptop stopped it bsoding, of course the change log said nothing about that

[mullet_man]

I try to do as part of Windows 10 servicing or if the laptop needs a reimage.

 

Need to get teacher laptops upgraded to 1909 so will be adding in a step upgrade the BIOS as part of that upgrade.

[Squelch]

I upgrade the BIOS during maintenace periods (i.e. summer hols) *

 

* Well I start with the best intentions but never upgrade all of them

[Primus]

In warranty update when convenient regardless of not having issues.

 

Out of warranty - only update if having issues or require a security fix.

[caffrey]

I only upgrade when needed, the old HPs we had needed a bios update to fix pxe boot issues - I think that was the last time

[Norphy]

It’s always a risk that you’ll brick the machine but in my experience, the risk is pretty small. In 20 years odd of doing jobs like this, in think I can count on the fingers of one hand the amount of machines that I’ve killed by flashing its bios.

 

I think that yes, it is important to keep the BIOS/EFI/ Firmware on a machine up to date these days. Everything is interconnected and people are finding security flaws in the oddest of places. Look at Intel’s record with their management engine just recently and the only way you can patch that thing is by flashing the machine’s BIOS.

 

It’s another reason why I prefer to stick with Tier 1 manufactures for computers, their central management tools for BIOS and drivers tend to be better. Dell’s SupportAssist, for example, is very useful.

[Primus]

It’s always a risk that you’ll brick the machine but in my experience, the risk is pretty small. In 20 years odd of doing jobs like this, in think I can count on the fingers of one hand the amount of machines that I’ve killed by flashing its bios.

 

I think that yes, it is important to keep the BIOS/EFI/ Firmware on a machine up to date these days. Everything is interconnected and people are finding security flaws in the oddest of places. Look at Intel’s record with their management engine just recently and the only way you can patch that thing is by flashing the machine’s BIOS.

 

It’s another reason why I prefer to stick with Tier 1 manufactures for computers, their central management tools for BIOS and drivers tend to be better. Dell’s SupportAssist, for example, is very useful.

 

True but I'm wary as every time I updated our R720s the iDRAC card had a fit and the whole motherboard had to be replaced! Now they're out of warranty and consigned to non-critical tasks I'm going nowhere near their bios!

[MatthewL]

On desktops and laptops it should be standard when ever a machine is reimaged at our place, as I don't work desktop side not sure about general site visits if its done then. We have been looking at pushing them out via Desktop Central our patch management system, we run Dell and Lenovo kit so easy enough to do and my laptop was used as test and was no issues. Over the years I've upgraded hundreds of Dell machines and never had an issue, last week was the first time I was look at a laptop out of work, laptop was a refurb, was on version 06 and latest was 22, had issues with BIOS password and booting following a OS reinstall but got there in the end.

[chazzy2501]

BIOS updates only if something isn't working well. Like my brand new HP 440 G7 laptops that randomly decide that USB-C doesn't work anymore. The BIOS update for the laptop actually updates the firmware for several devices (inc usbc controller)

 

The only must BIOS update really is a new server. (before installation)

[mavhc]

UEFI is 10x more complex than BIOS, added to that USB-C, and various other stuff now running, there's a lot more bugs to fix. Plus it's easy, comes via WU or update via internet from UEFI settings screen now.

[hardtailstar]

Bios updates done on all laptops when reimaged.

 

Classroom/office computers as and when we can.

[CAWJames]

in 2 minds, love a good update. On my personal machine, Asus Prime x470 Pro and 2700x proc, it was so buggy when I first got it, random BSOD, complete shutdowns the works, now about 4 BIOS updates later(and probably the last I will get) it is rock solid and runs for ever, sleeping every night. On my works P52s Lenovo, one update bricked the USB-C sub system, and I had to have an engineer out to replace the motherboard, as there was no going back!! Very wary updating that wee beasty now!

[gmonks]

I try and get all the teacher laptops in once a year for maintenance the BIOS gets done then.

 

I try and update all the Desktop PCs BIOS once a year too, usually in the holidays.