Auto NUC firmware update

[Bhutchison]

Hello, I saw a an earlier post with the exact same issue as me.  I have an NUC8i5BEH and had a prompt from Windows 10 to “shut down and apply updates” in the power menu.  I figured it was Windows updates.  When the machine restarted it began applying firmware/bios updates automatically.  I did not have DSA installed at the time and never manually downloaded a bios update.  I installed DSA after this and there were a few updates available, including bios, which i installed.  It sounds like there is no auto firmware update so I don’t know what happened.  Is this a security concern?

[n_scott_pearson]

Had you downgraded the BIOS at all? A downgrade after a Windows-based upgrade can cause it to appear to be spontaneously updating the BIOS.
...S

[Bhutchison]

I did not downgrade the bios.

[n_scott_pearson]

AFAIK, BIOS Updates are not released through Windows Update, so I do not know what is going on here. Intel Customer Support will need to step in and investigate this. Are you sure that IDSA hadn't been installed previously?

...S

[Bhutchison]

The only Intel software in my app list was the Graphics Command Center.

[AndrewG_Intel]

Hello @Bhutchison

Thank you for posting on the Intel® communities.

In order to check this further, could you please provide the following information?

1- Besides the inquiry/concern with those "firmware updates pushed through Windows* Update Service", are you experiencing any issue with the unit?

2- Could you please provide more details and/or screenshots showing the "firmware updates"?

3- Run the Intel® System Support Utility (Intel® SSU) to gather more details about the system.

• Download the Intel® SSU and save the application on your computer
• Open the application, check the "Everything" checkbox, and click "Scan" to see the system and device information. The Intel® SSU defaults to the "Summary View" on the output screen following the scan. Click the menu where it says "Summary" to change to "Detailed View".
• To save your scan, click Next and click Save.
• Once you have saved the file (.txt file), please attach it to your reply.
• To upload and attach a file, use the "Drag and drop here or browse files to attach" option below the response textbox.

Best regards,

Andrew G.

Intel Customer Support Technician

[Bhutchison]

1 - After both the Windows "pushed" firmware update and the subsequent DSA update, I get an error "BIOS has detected unsuccessful post attempts..." during boot.  After doing some research I found if I unplugged a thunderbolt external hard drive the machine would boot.  This problem seems to be intermittent.  After the Windows "pushed" update I installed DSA and was prompted that a newer BIOS version was available.  So whatever was pushed by Windows didn't seem to be the most up-to-date.

2 - I was not able to get a screenshot of either firmware update but they were identical from a  visual standpoint.  Black screen, white letters and a series of updates applied.  They basically looked like this: intel nuc bios updates - Bing images

3- The test file from the SSU diagnostic run is attached.

Thank you for your assistance.

Brad

[Bhutchison]

Following-up

[AndrewG_Intel]

Hello Bhutchison

Thank you for your response.

Please allow us more time to investigate the initial concern about the BIOS update. As soon as we have more details available, we will be providing more information here in the thread.

Regarding the other issue that you mentioned "Error: BIOS has Detected Unsuccessful POST Attempt(s)", this is known behavior and it can happen when an external USB drive is connected to the Intel NUC during startup and as you already found out, the basic recommendation is to disconnect any external USB drives when starting or restarting the Intel NUC.

For this, you may also try:

• Try a BIOS recovery using BIOS Update [BECFL357] Version: 0087 (Latest). If the issue still occurs after this alert appears on the screen, press N, go back to BIOS, and press F10 to save the current settings. Restart and try booting again.
• If that doesn't help, please try to enable the Deep S4/S4 option in BIOS (Go to Advanced > Power > Secondary Power Settings), and set After Power Failure - Power On. Save settings and reboot.
• Also, if the unit doesn't boot from a USB device or RAID, enabling Fast Boot can be helpful (The USB devices won't be available until the OS boots): Go to Advanced > Boot > Boot Configuration > UEFI Boot
• As last resource you may enable "Suppress Alert Message at Boot" but if you are not comfortable with enabling Suppress Alert Message at Boot, please get the event log after the issue was reproduced and provide it to us so we can check this further. Please also provide the full/exact model of the Thunderbolt* external hard drive.

Best regards,

Andrew G.

Intel Customer Support Technician

[AndrewG_Intel · Accepted solution]

Hello Bhutchison

Regarding the initial concern about the BIOS update, after checking this and as far as we can see, the Intel® NUC contains the latest BIOS 0087.

We have heard that Windows* updates sometimes pushes for a BIOS update and Intel® Driver & Support Assistant (Intel® DSA) also provides an option to get the BIOS updated.

There are no security features involved in this matter since we believe that is the way the operating system (OS) detects any missing driver but also we have seen that Windows updates does not load proprietary drivers for the Intel® NUC.

Best regards,

Andrew G.

Intel Customer Support Technician

[Bhutchison]

Great.  Thank you so much.  If I understand your reply correctly, it sounds like there are some instances where Windows could initiate a BIOS update.  It also sounds like using DSA to update to the most recent Intel proprietary Bios after the Windows-pushed update was the correct thing to do and that there are no performance or security concerns.  

[n_scott_pearson]

Actually, no. What Andrew was trying to say is that Intel does not install BIOS updates via Windows Update. This is why the report of this  possibly occurring is concerning. 

...S

[Bhutchison]

I understand that Intel does install BIOS updates via Windows this way but it sounded to me like Andrew suggested that sometimes Windows takes matters into its own hands.  My original intent in posting this question was to determine if this Windows-pushed update was a security concern for me -as in a virus or malware.  Other than the fact the Windows uses non-propietary drivers, my interpretation of Andrew’s response was that it did not seem like a security threat for me.  I can understand why it would be concerning for Intel.  If I’m wrong hopefully Andrew can clarify.

[Bhutchison]

Sorry, first sentence of previous post should have said “I understand that Intel does NOT install BIOS updates via Windows....”

[AndrewG_Intel]

Hello Bhutchison

Thank you for your response.

The comment from n_scott_pearson is correct in regards that Intel does not control Windows* Updates drivers or BIOS with Windows* tools and we see that this is also your understanding.

We push BIOS updates through Intel® DSA. There is always a chance to not to install them and this is no matter if there are security features added to the bios, as per Intel® DSA code, the tool pushes for new updates all the time.

Your interpretation of our answer is correct in the way that Windows-pushed updates should not be of concern, let's say, as if they would have been considered "a security threat" such as the examples you mentioned. As a general recommendation, we encourage users to get drivers and updates from our official channels: Download Center for Intel® NUC Kit NUC8i5BEH or using Intel® DSA.

We hope that this clarifies your inquiries. For any other questions, please don't hesitate to contact us back or kindly let us know if we can consider this thread solved.

Best regards,

Andrew G.

Intel Customer Support Technician

[AndrewG_Intel]

Hello Bhutchison

We have not heard back from you and since the thread has been marked as "Solved" we will proceed to close this inquiry now. If you need any additional information, please submit a new question as this thread will no longer be monitored. It has been a pleasure to assist you.

Best regards,

Andrew G.

Intel Customer Support Technician