HP EliteBook 820 G2

Return to index

PLEASE READ THESE INSTRUCTIONS BEFORE INSTALLING, OR YOU MIGHT BRICK YOUR MACHINE: SAFETY PRECAUTIONS

*Specifications*
Manufacturer	HP
Name	EliteBook 820 G2
Variants	EliteBook 820 G2
Released	2014
Chipset	5th gen (Broadwell, SoC)
CPU	Intel i5-5200U, i5-5300U, i7-5500U, i7-5600U
Graphics	Intel HD 5500 graphics (libre initialisation)
Display	14" 1366x768 or 1920x1080 TFT
Memory	Two slots, max 16GB/slot (32GB), DDR3/SODIMM
Architecture	x86_64
EC	SMSC MEC1324 in main boot flash
Original boot firmware	HP UEFI firmware
Intel ME/AMD PSP	Present. Can be disabled with me_cleaner.
Flash chip	SOIC-8 16MiB 128Mbit, 12MiB usable by coreboot

W+: Works without blobs;
N: Doesn't work;
W*: Works with blobs;
U: Untested;
P+: Partially works;
P*: Partially works with blobs

*Features*
Internal flashing with original boot firmware	N
Display (if Intel GPU)	W+
Audio	W+
RAM Init	W+
External output	W+
Display brightness	W+

*Payloads supported*
GRUB	Works
SeaBIOS	Works
SeaBIOS with GRUB	Works

Brief board info:

Full hardware specifications can be found on HP’s own website:

https://support.hp.com/gb-en/document/c04543492

Introduction

Please build this from source with lbmk:

./mk -b coreboot hp820g2_12mb

More information is available in the build guide, including how to install build dependencies. Building from source is required, because there aren’t any ROM images for this board, in regular Libreboot releases. The reason is that the vendor inject scripts don’t currently work, because coreboot compresses the refcode when inserting it at build time, and the process of compression is not yet reproducible; it’s not feasible to do so, and making it not be compressed in flash would not be ideal either, so this is simply a source-only port in Libreboot.

HP Sure Start

There is a 16MB flash and a 2MB flash. Read this page for info: https://doc.coreboot.org/mainboard/hp/hp_sure_start.html

The page makes it seem more complicated than necessary, from a user’s point of view. What you really need to do is just erase the 2MB flash IC, and flash only the first 12MB of the 16MB flash IC. A photo is shown below. Consult the SPI flashing guide and act as if you were flashing, but leave out -w libreboot.rom (don’t write an image), and instead use the --erase option, with your clip connected to the private flash (2MB flash IC).

You might want to dump the private flash first, just in case (use -r priv.rom or whatever filename you want to dump to, and take two dumps, ensuring that the hashes match); one dump for the first erase, and another for the next erase. If they match, then the erase was likely a success. The private (2MB) flash is inaccessible from your OS. The system stores hashes of the IFD, GbE and a copy of IFD/GbE in private flash, restoring them if they were modified, but erasing the private flash disables this security mechanism.

Coreboot has its own page about this machine:

https://doc.coreboot.org/mainboard/hp/elitebook_820_g2.html

Make sure to read and understand all of this first, before attempting the Libreboot installation, because it’s also important when updating Libreboot later on.

Installation of Libreboot

Make sure to set the MAC address in the flash: Modify MAC addresses with nvmutil.

Refer to the Libreboot flashing guides

Here are the flash ICs:

When you flash the 12MB image, please do the following with it:

dd if=/dev/zero of=4mb.bin bs=4M count=1
cat libreboot.rom 4mb.bin > libreboot16.rom

Be careful: do not fully flash libreboot16.rom

Flash it like this, instead:

flashprog -p PROGRAMMER --ifd -i gbe -w libreboot16.rom --noverify-all
flashprog -p PROGRAMMER --ifd -i bios -w libreboot16.rom --noverify-all
flashprog -p PROGRAMMER --ifd -i me -w libreboot16.rom --noverify-all
flashprog -p PROGRAMMER --ifd -i ifd -w libreboot16.rom --noverify-all

Replace PROGRAMMER according to whichever flasher you’re using. You could also replace it with internal, if later flashing internally to update an existing Libreboot installation.

If you’re flashing internally, add --noverify-all to the flashprog command.

To erase the 2MB flash, do this:

flashprog -p PROGRAMMER --erase

Refer generally to the main flashing guide and to the external flashing guide so that you can learn how to actually flash it.

TPM 2.0 potentially supported

The onboard TPM is an SLB 9660, which supports TPM 1.2 but it is known to be compatible with TPM 2.0 via firmware upgrade. Although not yet tested, we have some notes about that here:

../../tasks/#hp-820-g2-tpm

Not yet used meaningfully by Libreboot itself, but the TPM can be used to implement things like measured boot.

References

See: https://doc.coreboot.org/soc/intel/broadwell/blobs.html

Libreboot’s build system automatically pulls down the MRC/refcode files, and modifies the refcode to enable the onboard Intel Gigabit Ethernet (GbE). You don’t need to mess with this at all, when you build Libreboot yourself.

You can see how this works, by looking at the patch which added 820 G2 support: https://browse.libreboot.org/lbmk.git/commit/?id=401c0882aaec059eab62b5ce467d3efbc1472d1f

Yay. If you see this boot screen, you should be proud. This is a really hard machine to flash.

Markdown file for this page: https://libreboot.org/docs/install/hp820g2.md

Subscribe to RSS for this site

Site map

This HTML page was generated by the Untitled Static Site Generator.