Windows Update - Automatic Bios Update?

[Anonymous]

Hi, I'm posting this primarily out of security concern for an unexpected behaviour, though I think it may be ok - I'm mostly looking for some form of reassurance/confirmation. A system I manage is a NUC10i5FNH, and the last Bios version I manually installed to it was 0050 (FN0050.cap). However I received a query about the system today when it installed an update on shutdown, showing the Intel NUC Logo and stating it was installing a system update. Since it didn't look like the typical windows update (with the blue shutdown screen for updates), I investigated a little and found that windows had installed an update - "Intel Firmware 6.2.8319.52". Upon checking the BIOS version, I noticed it was now FNCML357.0052.2021.0409.1144 which I believe corresponds to FN0052.cap - implying that at some point (I'm presuming as part of the firmware update prompted by Windows Update) it has been automatically updated. The system does not have Intel DSA installed. I also noticed the existance of a folder -> C:\Windows\Firmware, which contained the file FN0052.cap with a MD5 sum matching that of the offical version on the Intel website. Presumably this was downloaded as part of an update at some point. I'm not alarmed by the prospect of a BIOS update being pushed out via Windows Update, and the fact that the checksum of the firmware update file I found matches official is a bit reassuring. However, I would like some confirmation that this was official behaviour, since this is rather unusual for BIOS updates to be done automatically in such a fashion. It would be of interest to know exactly what the update "Intel Firmware 6.2.8319.52" does, since the only reference I can find is to a Windows Update on the Windows Catalog site dated 2018(?), with no information on what it does. In summary: Issue: Found BIOS had been automatically updated - presumed via Windows Update - "Intel Firmware 6.2.8319.52", although cannot be certain it did not happen earlier. System: Intel NUC10i5FNH Previous Bios Version: 0050 (I don't have the full string I'm afraid) Current Bios Version: FNCML357.0052.2021.0409.1144 Request - Is it expected behaviour for an automatic BIOS update (without DSA), and what does the update Intel Firmware 6.2.8319.52 do? (I'm presuming such an update was created by Intel and passed to Microsoft). Many Thanks for any help you can provide.

[Anonymous]

Hmm, apologies for the lack of paragraphs - the forum seems to have eaten all my spacing and formatting. I'll try and post a tidied version of the above post here since I don't seem to be able to edit and hopefully it won't do the same again.

Hi, I'm posting this primarily out of security concern for an unexpected behaviour, though I think it may be ok - I'm mostly looking for some form of reassurance/confirmation.

A system I manage is a NUC10i5FNH, and the last Bios version I manually installed to it was 0050 (FN0050.cap). However I received a query about the system today when it installed an update on shutdown, showing the Intel NUC Logo and stating it was installing a system update. Since it didn't look like the typical windows update (with the blue shutdown screen for updates), I investigated a little and found that windows had installed an update - "Intel Firmware 6.2.8319.52".

Upon checking the BIOS version, I noticed it was now FNCML357.0052.2021.0409.1144 which I believe corresponds to FN0052.cap - implying that at some point (I'm presuming as part of the firmware update prompted by Windows Update) it has been automatically updated. The system does not have Intel DSA installed. I also noticed the existance of a folder -> C:\Windows\Firmware, which contained the file FN0052.cap with a MD5 sum matching that of the offical version on the Intel website. Presumably this was downloaded as part of an update at some point.

I'm not alarmed by the prospect of a BIOS update being pushed out via Windows Update, and the fact that the checksum of the firmware update file I found matches official is a bit reassuring. However, I would like some confirmation that this was official behaviour, since this is rather unusual for BIOS updates to be done automatically in such a fashion. It would be of interest to know exactly what the update "Intel Firmware 6.2.8319.52" does, since the only reference I can find is to a Windows Update on the Windows Catalog site dated 2018(?), with no information on what it does.

In summary: Issue: Found BIOS had been automatically updated - presumed via Windows Update - "Intel Firmware 6.2.8319.52", although cannot be certain it did not happen earlier.

System: Intel NUC10i5FNH

Previous Bios Version: 0050 (I don't have the full string I'm afraid)

Current Bios Version: FNCML357.0052.2021.0409.1144

Request - Is it expected behaviour for an automatic BIOS update (without DSA), and what does the update Intel Firmware 6.2.8319.52 do? (I'm presuming such an update was created by Intel and passed to Microsoft). Many Thanks for any help you can provide.

[MRoss5200]

Intel BIOS updates through Windows Update are usually only done if there is a security issue or some major bug fix.

If you are using Windows Pro or Enterprise, you can delay or prevent Windows Updates from installing on your system.

[Chris_V_Intel · Accepted solution]

Hi @Anonymous,

Yes, we have started sending some critical BIOS updates over Windows update and FN0052 was one of them. You are ok!

@FluxSoftware 

Thank you for letting us know. Please go to: https://supporttickets.intel.com/servicecenter?lang=en-US and open a case so we can help you out 1-on-1.

I am also working with the team to ensure the updates are labelled properly. 

[AndrewG_Intel]

Hello LightSound

Thank you for posting on the Intel® communities.

Please allow us to look into these inquiries and as soon as we have more details available we will be posting back in the thread.

Best regards,

Andrew G.

Intel Customer Support Technician

[FluxSoftware]

This update has brought down several of our remote NUCs.  The update starts, and then the NUC freezes on restart.  Removing the update prevents this on next reboot, however it comes right back after an update refresh and takes the unit down again.

Automatic BIOS updates with automatic restarts are irresponsible.

[MRoss5200]

Are you running your remote NUCs headless? Sometimes this will cause a BIOS update to fail if no display is detected.

[pizzaboy314]

@MRoss5200 @Chris_V_Intel 

I had windows updates turned off on a intel nuc10i7fnh, and i just recently ran windows updates and it bricked my boot SSD...the C/D recovery and boot partitions now show as "raw" filetype and the machine cannot boot or repair drive.

The bios is now on fncml357.0052.2021.0409.1144, and I recall seeing a few Intel updates in the windows updates.

other than the data recovery / disk cloning i probably have to do now, how can I prevent this in the future? the NUC is a media PC connected to a TV, so when the TV is off, i'm not entirely sure if the NUC becomes headless or not, depending on whether it still sees the display

[MRoss5200]

If the first picture you posted is correct, SMART is detecting your SSD is faulty. I would do an integrity scan of your SSD to see if you have bad blocks. Also, run CrystalDiskInfo to see if your drive is in fact defective. Flashing a BIOS onto a system should not damage a disk since it is not changing anything related to it.

CrystalDiskInfo - Crystal Dew World [en] (crystalmark.info)

I have not heard of the model of SSD you are using (FTM51N325H). What Brand and model is this? Is it SATA or NVMe?

[pizzaboy314]

Oh there's something wrong with it alright, already ran some chkdsk and there's bad sectors. It's a 512gb SATAIII by some rando company called Super Talent - Taiwan made

And this is the crap that came stock in this Intel NUC. The nerve.

I'm running CrystalDiskInfo now

[pizzaboy314]