# Firmware Update Nitrokey Pro 2

**URL:** https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142
**Category:** Nitrokeys
**Created:** [January 28, 2020, 2:54pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142 "2020-01-28T14:54:52Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Alex](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/a/db5fbb/32.png) [@Alex](https://support.nitrokey.com/u/Alex)
#### Post date: [January 28, 2020, 2:54pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/1 "2020-01-28T14:54:52Z")

</div>

I choose between Nitrokey Storage 2 and Nitrokey Pro 2. For me, flash memory is not important. Nitrokey Pro 2 would suit me, but there is no firmware update there. Why? What is the reason for this? Isn’t it necessary to fix vulnerabilities on Nitrokey Pro 2?

---

<div class="post-metadata">

### Author: ![ireas](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/i/e480ec/32.png) [@ireas](https://support.nitrokey.com/u/ireas)
#### Post date: [January 29, 2020, 12:09pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/2 "2020-01-29T12:09:42Z")

</div>

As far as I know, the Nitrokey team is working on a new version of the Nitrokey Pro that will support firmware updates, see nitrokey-pro-firmware issues #66 and #69:

> [@jans23 on 2019-10-07](#):
>
> We plan to release a revision next year which will allow signed firmware updates and potentially support fwupd too.

---

<div class="post-metadata">

### Author: ![szszszsz](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/s/d07c76/32.png) [@szszszsz](https://support.nitrokey.com/u/szszszsz)
#### Post date: [January 30, 2020, 12:36pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/3 "2020-01-30T12:36:47Z")

</div>

> [@ireas](#):
>
> As far as I know, the Nitrokey team is working on a new version of the Nitrokey Pro that will support firmware updates, see nitrokey-pro-firmware issues #66 and #69:

I confirm that. Work is still in progress though, without schedule specified. We do have working implementation available in the repository already, but might decide to add a few features more.  
If you would like to have a Nitrokey with firmware update possibility now, please choose Nitrokey Storage 2.

Any new information will be posted on the mentioned ticket pages:

- [nitrokey-pro-firmware#66](https://github.com/Nitrokey/nitrokey-pro-firmware/issues/66)
- [nitrokey-pro-firmware#69](https://github.com/Nitrokey/nitrokey-pro-firmware/issues/69)

---

<div class="post-metadata">

### Author: ![some\_nitrokey\_user](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/s/ea5d25/32.png) [@some\_nitrokey\_user](https://support.nitrokey.com/u/some_nitrokey_user)
#### Post date: [February 12, 2020, 3:13pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/4 "2020-02-12T15:13:32Z")

</div>

Just out of curiosity… what would you say is the risk/reward analysis of being able to upgrade the firmware? Specifically (and I know that the storage key already allows this, as just mentioned, so this isn’t a “new” concept or anything), doesn’t adding the ability to change the firmware add security circumvention implications? This discussion makes me think of the same issues that HEADS + NK are now solving with EFI and the dreaded Evil Maid exploit. Now, clearly, one should have his/her NK on their person or in a safe place; but are the concerns at least similar?

…just wanting to understand more and more about my beloved NK!

---

<div class="post-metadata">

### Author: ![jan](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/j/ce7236/32.png) [@jan](https://support.nitrokey.com/u/jan)
#### Post date: [February 12, 2020, 4:43pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/5 "2020-02-12T16:43:59Z")

</div>

Yes. Therefore firmware update with Nitrokey Storage (and soon Nitrokey Pro) will be password protected. So you/users can protect the firmware and decide which firmware to install.

For Nitrokey FIDO2 only firmware updates signed by us are possible.

---

<div class="post-metadata">

### Author: ![TheRabbitss](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/t/45deac/32.png) [@TheRabbitss](https://support.nitrokey.com/u/TheRabbitss)
#### Post date: [November 26, 2021, 10:36pm UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/6 "2021-11-26T22:36:00Z")

</div>

@jan Are only signed updates possible for other models as well?

---

<div class="post-metadata">

### Author: ![jan](https://support.nitrokey.com/letter_avatar_proxy/v4/letter/j/ce7236/32.png) [@jan](https://support.nitrokey.com/u/jan)
#### Post date: [November 27, 2021, 11:56am UTC](https://support.nitrokey.com/t/firmware-update-nitrokey-pro-2/2142/7 "2021-11-27T11:56:22Z")

</div>

Yes for Nitrokey 3. We may provide a Nitrokey 3 hacker-edition in the future which can freely be flashed.
