General • Re: Upgrading Rooterboot factory software

Here's what the manual says:

The feature allows the protection of RouterOS configuration and files from a physical attacker by disabling etherboot. It is called "Protected RouterBOOT". This feature can be enabled and disabled only from within RouterOS after login, i.e., there is no RouterBOOT setting to enable/disable this feature. These extra options appear only under certain conditions. When this setting is enabled - both the reset button and the reset pin-hole are disabled. RouterBOOT menu is also disabled. The only ability to change boot mode or enable the RouterBOOT settings menu is through RouterOS. If you do not know the RouterOS password - only a complete format is possible.

So it should prevent access to configuration data even if you have physical access.

There also seems to be another reason to upgrade RouterBOOT firmware -- namely on my CCR1009 I got a log message telling me that for optimal NAND management I should upgrade the RouterBOOT firmware. Device was on RouterOS 7.15 and it hang 2 or 3 times in the past couple of days, that's when I noticed 0.1% bad sectors and this log message and I have managed to upgrade firmware to 7.6 by doing downgrade to 6.49.7, upgrading 3.39 factory firmware to 6.49.7 and then upgrading all to 7.6 and finally to 7.12.1 and 7.15.1.

I wanted to do the same on Audience but it refuses to upgrade the firmware with the special package no matter what RouterOS is installed (6.49.7 or 7.6).

Statistics: Posted by levicki — Thu Jun 13, 2024 3:17 pm

---