Auto Intel NUC firmware update (Intel NUC8i3BEH)

[Sjoe2]

Just booted up an Intel NUC8i3BEH and it updated the firmware to latest BIOS number (see attachment) automatically.  It wasn't triggered by myself or setup to flash so this is a security related concern but may be as simple as INTEL now auto updates it's firmware and I didn't know.

However as far as I am aware, Intel DSA does not auto update firmware nor was any action or .bat file created (at least by me) to trigger an update of the BIOS firmware.  the website for updating firmware https://www.intel.com/content/www/us/en/support/articles/000005636/intel-nuc.html lists no auto update method and I can find no references to auto update of BIOS firmware on this board. 

The NUC is running a simple setup with a single install of windows 10 which is up to date and has Kaspersky total security installed.  Hopefully this auto update of the BIOS is normal and I just have never seen it before.   

Thanks in advance for your help.

[Maria_R_Intel · Accepted solution]

Hello Sjoe2,

Thank you for posting on the Intel* Community and for reporting this.

The BIOS should not be updated automatically, in case you use the Intel* Driver and Support Assistant it will ask you before completing the update and do the reboot. Please, check if you are using the "Download and install" updates on the DSA.

Please let us know if you are having issues with your unit after the BIOS update.

At the moment we will not consider this as a security risk, because this is the first report we have regarding this, but we will be monitoring the threads and tickets in case we have to look into this.

Thank you again for your report.

Best regards,

Maria R.

Intel Customer Support Technician

[Sjoe2]

Thanks Maria,

You have answered my question that there is no auto update. Very much appreciated. 

I don't have Intel DSA installed. The only Intel SW installed is the graphics command center.  In addition I searched for the downloaded firmware matching the version installed and could not find it ( I wanted to compare the checksum value to the published Intel value).

The machine seems to be functioning fine, however I booted up with no networking and have kept it off the LAN/WAN. Only used it to confirm DSA not running.

I will put the NUC aside for awhile (luckily have access to a number of machines) and monitor your forums as you mentioned, in case this is an early example of a real issue.  Understand fully that based on one report, it's best to let it be and see if it occurs again.  If nothing shows up I'll download from intel the latest version of the firmware and reflash.   I may sound paranoid but given it's not come from an Intel auto update and I didn't trigger it,  I'm truly baffled.

Thanks again for your quick response.

S Joe

[Maria_R_Intel]

Hello Sjoe2,

Thank you for reporting this, we will be monitoring threads for possible similar reports.

If you need any additional information, please submit a new question as this thread will be closed.

Best regards,

Maria R.

Intel Customer Support Technician