Upgrade from Qubes 4.0 to 4.1 (x230/nitrokey)

NitroPad, NitroPC
1

I have a Nitropad x230 with Qubes 4.0. Recently Qubes has released 4.1, is there anything I should know that is specific to the Nitropad x230 and my Nitrokey when performing a clean install of Qubes 4.1 as documented here

2

Hello,

We working at the moment at a oem 4.1 installation image (this includes the Nitrokey app preinstalled and is monstly automated) but also the stock install will work. Please note that you need to update the firmware to 1.4 Firmware Update v1.4+ — Nitrokey Documentation

1 Like
3

I was asked to add this to this post. In my case it is about T430 Nitropad, I guess it is the same issue. If my guess will be confirmed, please update the title accordingly.

Error during upgrade to Heads 1.4:

T430 Nitropad (+Nitrokey Pro) upgrade from 1.3.1 to Heads 1.4 (forced to upgrade due to Qubes OS 4.1 → requires cryptsetup2 → requires coreboot 4.13).

Here, some screenshots with the system info and error message.

IMG_20220210_133307
IMG_20220210_133307994×746 148 KB

… I am limited to send only one image per post, so I have to drop picture one by one here.

5

IMG_20220210_133451
IMG_20220210_1334511079×428 116 KB

IMG_20220210_133410
IMG_20220210_1334101043×435 67.8 KB

image
image800×314 41 KB

6

@nesti-nitrokey Can you take a look at this one too?

7

There are 2 options to move forwards

  1. Option A - Nitrokey upgrade
  2. Option B - extract the firmware by double clicking the file and the rom file with the signature file will be available.

Be patient when the rom is written to the system and that should be it.

1 Like
8

Your link is pointing to the general Firmware Update
https://docs.nitrokey.com/nitropad/qubes/firmware-update.html#firmware-update

But as you can see here Upgrade from Qubes 4.0 to 4.1 (x230/nitrokey) - #3 by Julli I am running already 1.3.1. The Nitrokey documentation says I need to follow this upgrade guide when doing the upgrade from 1.3.1 to 1.4:

https://docs.nitrokey.com/nitropad/qubes/firmware-update-1.4.html#firmware-update-v1-4

Is this guide incorrect, now?
Should I ignore the 1.4 update documentation and flash with the *.rom instead of the *.npf (which is explained in the 1.4 update doc)?

If so, the nitrokey documentation should be updated to:

If you have already the previous Heads version 1.3.1 on your Nitropad (X230 or T430 plus a Nitrokey) and you want to upgrade to the latest Heads version 1.4+ (i.e. if you want install Qubes OS 4.1*) you need to:

  1. Download the latest *.npf file for your X230 or T430 Releases · Nitrokey/heads · GitHub

  2. Unpack the *.npf

  3. Verify the detached signature and the hash:
    gpg2 --verify sha256sum.sig sha256sum
    sha256sum *.rom

  4. If all checks are fine, use the *.rom file (which was insight of the rom file not the rom with is directly availabe on the release page) and follow this procedure: Firmware Update - Nitrokey Documentation

Remark: *Qubes OS 4.1 → requires cryptsetup2 → requires coreboot 4.13