Community discussions

MUM Europe 2020
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24334
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Protected RouterBOOT

Mon Sep 14, 2015 2:33 pm

Did you connec the PC to the Ether1 port of the router ?
-RB941-2nD is powered on with pushed RESET button for approx 15s
keep holding the button longer, until you see the device in Netinstall

also make sure PC has no firewall or antivirus that could be blocking Netinstall. Also you can try to right-click it and "Run as administrator"
No answer to your question? How to write posts
 
User avatar
bajodel
Long time Member
Long time Member
Posts: 545
Joined: Sun Nov 24, 2013 8:30 am
Location: Italy

Re: Protected RouterBOOT

Mon Sep 14, 2015 3:25 pm

..[CUT]..
So a procedure of NetInstall after holding RESET button for "reformat-hold-button" time is what?

I have tried to do steps as mentioned in NetInstall manual:
-I have IP on computer's NIC
-I have IP from the same subnet set in NetInstall
-RB941-2nD is connected directly to NIC
-RB941-2nD is powered on with pushed RESET button for approx 15s

..[CUT]..
Device is still bricked. Any help?
The routerboard should be connected on ether1 (normally ..read manual for specific device).
 
longerCZ
just joined
Posts: 13
Joined: Thu Aug 22, 2013 2:12 pm

Re: Protected RouterBOOT

Mon Sep 14, 2015 7:21 pm

Did you connec the PC to the Ether1 port of the router ?
-RB941-2nD is powered on with pushed RESET button for approx 15s
keep holding the button longer, until you see the device in Netinstall

also make sure PC has no firewall or antivirus that could be blocking Netinstall. Also you can try to right-click it and "Run as administrator"
I have tried holding RESET button for over 8 minutes and it didn't appear. The device is connected to ether1, I have also tried ether2. NetInstall is running on WinXP machine specially dedicated to these jobs. It's not connected to the Internet, doesn't have firewall enabled and no AV installed. There is only account - Administrator. All files are up to date as they are recently published on mikrotik.com.

Now I think the device is bricked if the RESET button doesn't need to be held for 1 hour or so...
 
freemannnn
Long time Member
Long time Member
Posts: 669
Joined: Sun Oct 13, 2013 7:29 pm

Re: Protected RouterBOOT

Sun Dec 06, 2015 7:30 pm

so what happened at last? was the device bricked?
 
longerCZ
just joined
Posts: 13
Joined: Thu Aug 22, 2013 2:12 pm

Re: Protected RouterBOOT

Sun Dec 06, 2015 9:40 pm

so what happened at last? was the device bricked?
yes, bricked, changed on warranty...
 
freemannnn
Long time Member
Long time Member
Posts: 669
Joined: Sun Oct 13, 2013 7:29 pm

Protected RouterBOOT

Sun Dec 06, 2015 9:58 pm

This was random i imagine. It shouldnt happen right?
 
longerCZ
just joined
Posts: 13
Joined: Thu Aug 22, 2013 2:12 pm

Re: Protected RouterBOOT

Mon Dec 07, 2015 12:21 pm

This was random i imagine. It shouldnt happen right?
It shouldn't but I am pretty sure that this will happen with every board. We just need to hope that noone will have the great idea of holding the reset button for 5 minutes. :-)
 
kgninfos
Member
Member
Posts: 387
Joined: Thu Jun 21, 2012 7:34 pm
Location: Earth
Contact:

Re: Protected RouterBOOT

Sun Dec 27, 2015 1:55 pm

what do you think about this idea
for Level 3 Device (mostly used for CPE) make an option that till device is activated by connecting to internet features like bridge and NAT will not work
this will force users to activate it after reset and for activation it should query Mikrotik Account id and there you can setup some ownership think like if i purchase a device then the Sl number will be mapped under my mikrotik id and i can only unlock it
when i sell it someone there should be option to transfer ownership from the online Mikrotik panel

by doing this user will be forced to ask us to unlock the device before they switch provider (after all we are providing CPE to users at a very much discounted rate or even free some times)
 
jarda
Forum Guru
Forum Guru
Posts: 7604
Joined: Mon Oct 22, 2012 4:46 pm

Sun Dec 27, 2015 3:02 pm

Is there anyone having problems with stealing your equipment? Do you think that not informed thief will not steal your devices if it will be blocked somehow? Do you believe that informed thief will return back your blocked device? My opinion is that this feature is just another artificial source of future potential problems and generally for nothing.
 
kgninfos
Member
Member
Posts: 387
Joined: Thu Jun 21, 2012 7:34 pm
Location: Earth
Contact:

Re: Protected RouterBOOT

Sun Dec 27, 2015 3:14 pm

see i am not trying to preveny cpe from being stolen
but think from a customer view he and other providers will also know that cpe can not be used with other network unless we allow it
so they will have to get a new cpe
why i am telling this is we are giving free sxt with connection and customer take connection from us and after 1 Month instead of paying us they approch other provider to give connection on cpe and not to charge any installation cost

so we are the ultimate looser
 
jarda
Forum Guru
Forum Guru
Posts: 7604
Joined: Mon Oct 22, 2012 4:46 pm

Sun Dec 27, 2015 5:13 pm

But you can take a deposit for some initial period from customer or make an agreement that you will invoice the costs under such conditions...
 
kgninfos
Member
Member
Posts: 387
Joined: Thu Jun 21, 2012 7:34 pm
Location: Earth
Contact:

Re: Protected RouterBOOT

Sun Dec 27, 2015 5:26 pm

Make agreement then go to court for such small amount
even lawer will charge more than the cost of cpe
 
jarda
Forum Guru
Forum Guru
Posts: 7604
Joined: Mon Oct 22, 2012 4:46 pm

Sun Dec 27, 2015 5:32 pm

... Deposit...
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1065
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: Protected RouterBOOT

Mon Dec 28, 2015 12:35 pm

I have wrote it before, but I will repeat it. The situation is as @kgninfos describes it. You give CPE for free to new customer (or whatever deal you are offering), than competition arrives and offers him a better deal using the CPE. Customer is unaware of what is behind, he is just looking for the better deal. It is not possible to go to court or use of whatever other legal instrument in countries like mine.
If the access to the board is blocked, the competition will not be able to give the service, even if he will try. So without the CPE he will need to change the offer or just step back. Sooner or later the situation described will not be possible anymore. Everyone will have to offer the deals with their own equipment. A lot of my customers who are small WISP themselves have asked for such a feature for long time.
-Toni-
Don't crash the ambulance, whatever you do
 
Zorro
Long time Member
Long time Member
Posts: 676
Joined: Wed Apr 16, 2014 2:43 pm

Re: Protected RouterBOOT

Mon Dec 28, 2015 9:06 pm

so far biggest problem with it is "unable to turn it off".
for example checkbox is simply IGNORED in "Routerboard" part of System menu in both RB2011 and HEX, HAP.
you can set it, press "apply" but it remain unchecked and nothing actually change :)
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24334
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Protected RouterBOOT

Tue Dec 29, 2015 10:38 am

so far biggest problem with it is "unable to turn it off".
for example checkbox is simply IGNORED in "Routerboard" part of System menu in both RB2011 and HEX, HAP.
you can set it, press "apply" but it remain unchecked and nothing actually change :)
please report a bug to mikrotik
No answer to your question? How to write posts
 
Zorro
Long time Member
Long time Member
Posts: 676
Joined: Wed Apr 16, 2014 2:43 pm

Re: Protected RouterBOOT

Tue Dec 29, 2015 10:14 pm

so far biggest problem with it is "unable to turn it off".
for example checkbox is simply IGNORED in "Routerboard" part of System menu in both RB2011 and HEX, HAP.
you can set it, press "apply" but it remain unchecked and nothing actually change :)
please report a bug to mikrotik
how i can report bugs to mikrotik?
 
troffasky
Member
Member
Posts: 399
Joined: Wed Mar 26, 2014 4:37 pm

Re: Protected RouterBOOT

Wed Dec 30, 2015 12:43 am

Email support.

But really, economic problem won't be fixed with technical workarounds. If you aren't charging enough to cover your costs, Mikrotik cannot fix this for you.
 
kgninfos
Member
Member
Posts: 387
Joined: Thu Jun 21, 2012 7:34 pm
Location: Earth
Contact:

Re: Protected RouterBOOT

Wed Dec 30, 2015 7:08 am

i guess you have not got a competitor or very rich people are there who are paying

think why apple is giving device lock when we all know apple phones are costly and their owner can afford a new phone
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24334
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Protected RouterBOOT

Wed Dec 30, 2015 8:36 am

so far biggest problem with it is "unable to turn it off".
for example checkbox is simply IGNORED in "Routerboard" part of System menu in both RB2011 and HEX, HAP.
you can set it, press "apply" but it remain unchecked and nothing actually change :)
please report a bug to mikrotik
how i can report bugs to mikrotik?
email support@mikrotik.com
No answer to your question? How to write posts
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24334
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Protected RouterBOOT

Wed Dec 30, 2015 8:39 am

This feature is not to prevent something from being stolen. It is to protect your data. The feature allows to block device from using network boot to access your data without password. By using protected routerboot, a forgotten password will mean to nullify your NAND, then Netinstall. This way, if somebody steals your device, your config and passwords are safe.
No answer to your question? How to write posts
 
Zorro
Long time Member
Long time Member
Posts: 676
Joined: Wed Apr 16, 2014 2:43 pm

Re: Protected RouterBOOT

Thu Dec 31, 2015 1:18 am

hardwired anti-thieft tech - also can be implemented in firmware, just like in notebooks, but i hope it was never happen, because its exploitable(and usually by random 3rd-parties)as hell and cause more damage than save money.
 
skyhawk
just joined
Posts: 20
Joined: Thu Jan 14, 2016 10:27 am

Re: Protected RouterBOOT

Mon Jan 18, 2016 2:48 pm

My test-bench RB941-2nD cannot enter protected-bootloader mode. Upon factory reset the bootloader reverts to 3.19, which I'm guessing is the backup bootloader?

Can I ask for a protected-bootloader-install package for smips? the -mipsbe one refuses to install.

RouterOS 6.33.5, /system routerboard shows current firmware is 3.29
protected-bootloader doesn't appear anywhere under /system routerboard or /system routerboard settings.
 
User avatar
PaulsMT
MikroTik Support
MikroTik Support
Posts: 283
Joined: Tue Feb 10, 2015 3:21 pm

Re: Protected RouterBOOT

Mon Jan 18, 2016 4:05 pm

To enable protected RouterBOOT, you have to update board backup BIOS to v3.24.

This backup BIOS package can be downloaded here:
http://www.mikrotik.com/download/share/ ... mipsbe.dpk

More info here:
http://wiki.mikrotik.com/wiki/Manual:Ro ... bootloader

Enable protected RouterBOOT under:
/system routerboard settings set
 
skyhawk
just joined
Posts: 20
Joined: Thu Jan 14, 2016 10:27 am

Re: Protected RouterBOOT

Tue Jan 19, 2016 3:44 am

Thanks PaulsMT, but I need an install package for smips...
jan/01 00:00:04 system,info verified protected_routerboot_v3_24_enable_6_29_1_mipsbe.dpk 
13:36:09 system,error can not install protected-router-6.29: it is not made for smips, but for mips 
13:36:09 system,info router rebooted 

[admin@RB941-2nD-560C045163E9] > /system routerboard settings set protected-routerboot=enabled 
echo: system,info,critical Current RouterBOOT does not support this feature
 
User avatar
PaulsMT
MikroTik Support
MikroTik Support
Posts: 283
Joined: Tue Feb 10, 2015 3:21 pm

Re: Protected RouterBOOT

Thu Jan 21, 2016 11:39 am

Thanks PaulsMT, but I need an install package for smips...
jan/01 00:00:04 system,info verified protected_routerboot_v3_24_enable_6_29_1_mipsbe.dpk 
13:36:09 system,error can not install protected-router-6.29: it is not made for smips, but for mips 
13:36:09 system,info router rebooted 

[admin@RB941-2nD-560C045163E9] > /system routerboard settings set protected-routerboot=enabled 
echo: system,info,critical Current RouterBOOT does not support this feature

Thank you for reporting us, we have just added missing package for smips. You can download it here:
http://wiki.mikrotik.com/wiki/Manual:Ro ... bootloader

Press link for smips platform to download file.
 
soueidan
just joined
Posts: 7
Joined: Sun Nov 25, 2012 9:49 pm

Re: Protected RouterBOOT

Mon Feb 29, 2016 5:26 pm

Hello All,

As it is mentioned in the wiki " The backup RouterBOOT version can not be older than v3.22 version. A special package is provided to upgrade the backup RouterBOOT (DANGEROUS). Newer devices will have this new backup loader already installed at the factory."

However, what is the way to upgrade the backup RouterBOOT ?

Simply draging the file into files section and rebooting is not working!

Is there a special way to do so?

Looking forward for replies.

Thanks in advance.
 
User avatar
PaulsMT
MikroTik Support
MikroTik Support
Posts: 283
Joined: Tue Feb 10, 2015 3:21 pm

Re: Protected RouterBOOT

Tue Mar 22, 2016 2:32 pm

Hello All,

As it is mentioned in the wiki " The backup RouterBOOT version can not be older than v3.22 version. A special package is provided to upgrade the backup RouterBOOT (DANGEROUS). Newer devices will have this new backup loader already installed at the factory."

However, what is the way to upgrade the backup RouterBOOT ?

Simply draging the file into files section and rebooting is not working!

Is there a special way to do so?

Looking forward for replies.

Thanks in advance.
1. Make sure your RouterOS is not very old - for Tile and Smips at least 6.33, for mipsbe 6.29.1
2. drag & drop DPK update file for your architecture:
http://wiki.mikrotik.com/wiki/Manual:Ro ... bootloader
3. Reboot.

You should see update information in the log output (/log print)
 
skyhawk
just joined
Posts: 20
Joined: Thu Jan 14, 2016 10:27 am

Re: Protected RouterBOOT

Sat Jun 11, 2016 8:28 am

05:16:31 system,info verified protected_routerboot_v3_29_enable_6_33_smips.dpk 
05:16:32 system,info installed protected-router-6.33 
05:16:32 system,info FAILED to enable protected RouterBOOT: wrong running booter version 

             model: RouterBOARD 941-2nD
     serial-number: <...>
     firmware-type: qca9531L
  factory-firmware: 3.19
  current-firmware: 3.33
  upgrade-firmware: 3.33

                   uptime: 8m43s
                  version: 6.35.2 (stable)
               build-time: May/02/2016 10:09:26
<....>
        architecture-name: smips
               board-name: hAP lite
                 platform: MikroTik

Any chance for an updated protected-router package for smips?
 
ofca
Member Candidate
Member Candidate
Posts: 190
Joined: Fri Aug 20, 2004 7:18 pm

Re: Protected RouterBOOT

Sat Oct 01, 2016 3:22 am

I'm having the same problem as above.
 
Nord
just joined
Posts: 1
Joined: Fri Oct 21, 2016 11:06 am

Re: Protected RouterBOOT

Fri Oct 21, 2016 11:10 am

I'm having the same problem as above.

[admin@Aseev_SV] /system routerboard settings> set protected-routerboot=enabled
echo: system,info,critical Current RouterBOOT does not support this feature
[admin@Aseev_SV] /system routerboard settings> pri
;;; Current RouterBOOT does not support this feature
boot-device: nand-if-fail-then-ethernet
cpu-frequency: 600MHz
boot-protocol: bootp
force-backup-booter: no
silent-boot: no
[admin@Aseev_SV] /system routerboard settings> ..
[admin@Aseev_SV] /system routerboard> print
;;; Current RouterBOOT does not support this feature
routerboard: yes
model: SXT 5nD r2
serial-number: 522304A494DE
firmware-type: ar9344
factory-firmware: 3.22
current-firmware: 3.33
upgrade-firmware: 3.33
[admin@Aseev_SV] /system routerboard> print
;;; Current RouterBOOT does not support this feature
routerboard: yes
model: SXT 5nD r2
serial-number: 522304A494DE
firmware-type: ar9344
factory-firmware: 3.22
current-firmware: 3.33
upgrade-firmware: 3.33
 
agnostic
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Fri Mar 21, 2014 8:23 pm

Re: Protected RouterBOOT

Fri Oct 21, 2016 6:09 pm

why want a device that is impossible to reset to some standard and known settings? in case something goes bad you will have a dead router. it is prefered the router to work even in another provider. if you want to be ok to the idea that a client maybe use the device with other provider then charge them for it and then just protect your setting and passwords with this feature.
 
kadhim09
newbie
Posts: 38
Joined: Sat Oct 29, 2016 10:11 am
Location: iraq/samawa

Re: Protected RouterBOOT

Sat Nov 05, 2016 7:21 pm

older devices have no ability to upgrade backup bootloader. only RB9xx and newer are supported

so can i use bootloader in sxt ligth
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Sat Jan 28, 2017 3:01 pm

WARNING: DOING IT IS AT ALL YOUR RISK!!!

I can't test all model, but if I find one problem, I report that here.

IF YOUR HARDWARE HAVE MAJOR VERSION OF RESPECTIVE FACTORY BOOT, DO NOTHING!!!
You can see Factory Firmware version from RouterOS 6.34rc45 with "/system routerboard print" command

Actually the 5 files on
http://wiki.mikrotik.com/wiki/Manual:Ro ... D_settings
are:
https://www.mikrotik.com/download/share ... mipsbe.dpk
https://www.mikrotik.com/download/share ... _smips.dpk
https://www.mikrotik.com/download/share ... _mmips.dpk
https://www.mikrotik.com/download/share ... 0_tile.dpk
https://box.mikrotik.com/f/313edb5d0e2f479b8aba/?dl=1 ( Universal 6.43.7 enable for 6.43.x RouterOS )

Those Factory RouterBOOT are ALSO a replacement for previous bugged Factory RouterBOOT!!!

DO NOT UPGRADE DISTANT HARDWARE, SOMETIME (in case of error) MANUAL REBOOT IS NEEDED!!!
I HAVE WARNED YOU...


Before the use:
Check RouterOS version, only 6.40.9 and 6.43.7 "support all hardware supported" (previous versions sometime do not rightly recognize RB also if supported) for upgrade factory bios (for now with the mikrotik's files provided)
You must chose the right file for the RouterBOARD architecture.

UNSUPPORTED:
arm all [AL2(L), DX3230(L), IPQ8060, IPQ4000(L), ...]
mipsle all [adm5120, ar2316, rc32434, ...]
powerpc all [amcc460, mpc8323, mpc8343, mpc8544, mpc8548, p1023, p2020, ...]
EDIT: 6.43.7 contains powerpc [only mpc8544, p1023, p2020] BIOS, but I not have actually tested if work
x86 all [RB230 wlb, ...]
and obviously any SwOS / SwitchOS only board.

The ONLY architecture supported are mipsbe, smips, mmips and tile!!!
EDIT: 6.43.7 contains powerpc [only mpc8544, p1023, p2020], but I not have actually tested if work

EDIT: MikroTik actually do not publish single 6.43.7 BIOS files, use RouterOS 6.43.7 for update the current bios to the right version for upgrade.

the file for tile supports:
tilegx (3.41 http://i.mt.lv/routerboard/files/tilegx_3.41.fwf )

the file for mmips supports:
mt7621L (3.41 http://i.mt.lv/routerboard/files/mt7621L_3.41.fwf )
the mmips mt7621 (without "L") if exist, is UNSUPPORTED

the file for smips supports:
qca9531L (3.41 http://i.mt.lv/routerboard/files/qca9531L_3.41.fwf )
the smimps qca9531 (without "L") if exist, is UNSUPPORTED

the file for mipsbe supports:
ar7100 (3.41 http://i.mt.lv/routerboard/files/ar7100_3.41.fwf ) some old models still unsupported, i do not have one precise list
ar9330 (3.41 http://i.mt.lv/routerboard/files/ar9330_3.41.fwf )
ar9330L (3.41 http://i.mt.lv/routerboard/files/ar9330L_3.41.fwf )
ar9340 (3.41 http://i.mt.lv/routerboard/files/ar9340_3.41.fwf )
ar9340L (3.41 http://i.mt.lv/routerboard/files/ar9340L_3.41.fwf )
ar9344 (3.41 http://i.mt.lv/routerboard/files/ar9344_3.41.fwf )
ar9344L (3.41 http://i.mt.lv/routerboard/files/ar9344L_3.41.fwf )
qca8513 (3.41 http://i.mt.lv/routerboard/files/qca8513_3.41.fwf )
qca8513L (3.41 http://i.mt.lv/routerboard/files/qca8513L_3.41.fwf )

qca8719 (without "L") if exist, is UNSUPPORTED
qca8719L (3.41 http://i.mt.lv/routerboard/files/qca8719L_3.41.fwf )
qca9531 (without "L") if exist, is UNSUPPORTED
qca9531L (3.41 http://i.mt.lv/routerboard/files/qca9531L_3.41.fwf )
qca9550 (3.41 http://i.mt.lv/routerboard/files/qca9550_3.41.fwf )
qca9550L (3.41 http://i.mt.lv/routerboard/files/qca9550L_3.41.fwf )

the mipsbe ar7240 are UNSUPPORTED!!! (but protected routerboot work if factory firmware and current boot firmware >= 3.24).

The single file update the Factory RouterBOOT with same version on is name and require before upgrade the same bios on filename as current firmware (active and booted):

https://www.mikrotik.com/download/share ... 0_tile.dpk
Before the update the tile must have RouterOS 6.40.7 and EXACTLY 3.41 as current booted firmware
If you have 3.42+ as CURRENT firmware you must downgrade the CURRENT firmware and reboot before upgrade Factory firmware

https://www.mikrotik.com/download/share ... _smips.dpk
Before the update the smips must have RouterOS 6.40.7 and EXACTLY 3.41 as current booted firmware
If you have 3.42+ as CURRENT firmware you must downgrade the CURRENT firmware and reboot before upgrade Factory firmware

https://www.mikrotik.com/download/share ... _mmips.dpk
Before the update the mmips must have RouterOS 6.40.7 and EXACTLY 3.41 as current booted firmware
If you have 3.42+ as CURRENT firmware you must downgrade the CURRENT firmware and reboot before upgrade Factory firmware

https://www.mikrotik.com/download/share ... mipsbe.dpk
Before the update the mipsbe must have RouterOS 6.40.7 and EXACTLY 3.41 as current booted firmware
If you have 3.42+ as CURRENT firmware you must downgrade the CURRENT firmware and reboot before upgrade Factory firmware

*** START EDIT ***
https://box.mikrotik.com/f/313edb5d0e2f479b8aba/?dl=1 ( Universal 6.43.7 enable for 6.43.x RouterOS )
For use "Universal" factory boot update, RouterOS must be 6.43.7, current bios must be 6.43.7 from boot (not just updated).
*** END EDIT ***

After the update of Factory RouterBOOT with support for protected-routerboot, you can upgrade again the current bios to the latest version present on future version of RouterOS.

I hope all is clear now for all.
Last edited by rextended on Mon Jan 07, 2019 6:33 pm, edited 59 times in total.
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Sat Jan 28, 2017 3:08 pm

I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Sat Jan 28, 2017 3:09 pm

I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Sat Jan 28, 2017 3:17 pm

why want a device that is impossible to reset to some standard and known settings? in case something goes bad you will have a dead router. it is prefered the router to work even in another provider. if you want to be ok to the idea that a client maybe use the device with other provider then charge them for it and then just protect your setting and passwords with this feature.
My CPE are not sold to end user. If someone steals my CPE I not want than the thief also steals the "intellectual property", the passwords, etc.
At the end of the contracts the end user must give back the CPE.

The protected routerboot do not "protect" hardware but just the "intellectual property", the passwords, etc. inside the configuration.

If for some reason end user buy the CPE or other hardware, at the end of contract the routerboard is still fully usable, but the end user must clean all "intellectual property", the passwords, etc., after use it, because the user do not pay me for it's rent.
I'm Italian, not English. Sorry for my imperfect grammar.
 
Mazutti
newbie
Posts: 27
Joined: Sat Jun 21, 2014 4:12 am

Re: Protected RouterBOOT

Sun Apr 16, 2017 7:42 pm

So, tried the step-by-step on two mipsbe RBs (mAP-2n and RB951G), and on both I get the error "FAILED to enable protected RouterBOOT: code 14". Tried to search for this error, but couldn´t get any results.

Can anyone confirm if this error means these RBs are not supported (too old) or if that´s something I´m doing wrong?

Any additional information, I would be glad to share.


Thanks in advance.

Mazutti
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Tue Apr 18, 2017 3:24 pm

So, tried the step-by-step on two mipsbe RBs (mAP-2n and RB951G), and on both I get the error "FAILED to enable protected RouterBOOT: code 14". Tried to search for this error, but couldn´t get any results.

Can anyone confirm if this error means these RBs are not supported (too old) or if that´s something I´m doing wrong?

Any additional information, I would be glad to share.


Thanks in advance.

Mazutti
fixed, use 6.40.7
viewtopic.php?f=2&t=94303&p=580430#p580430
Last edited by rextended on Tue Apr 10, 2018 3:43 am, edited 1 time in total.
I'm Italian, not English. Sorry for my imperfect grammar.
 
Mazutti
newbie
Posts: 27
Joined: Sat Jun 21, 2014 4:12 am

Re: Protected RouterBOOT

Wed Apr 19, 2017 10:04 pm

So, tried the step-by-step on two mipsbe RBs (mAP-2n and RB951G), and on both I get the error "FAILED to enable protected RouterBOOT: code 14". Tried to search for this error, but couldn´t get any results.

Can anyone confirm if this error means these RBs are not supported (too old) or if that´s something I´m doing wrong?

Any additional information, I would be glad to share.


Thanks in advance.

Mazutti
I try the same with one 922UAGS-5HPacD with same error code 14 with 6.38.5

Downgraded to 6.37.5 for update and is working as expected

Is like the protected routerboot upgrade is stopping work on 6.38(.5)???
Makes sense, since both of my devices are on 6.38.5. Tested downgrading the mAP-2n to 6.37.5 and doing the procedure again and now protected routerboot is enabled. Will do the same on RB951G and report back.

Thanks again.


Mazutti
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24334
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Protected RouterBOOT

Fri Apr 21, 2017 12:59 pm

It seems to me that you are following the procedure that only applies to very old devices, that need a special package. This package is no longer compatible with new RouterOS. We will soon make new packages.

But you don't need this package. You can just enable this feature from the console:
/system routerboard settings set protected-routerboot=enabled
No answer to your question? How to write posts
 
Mazutti
newbie
Posts: 27
Joined: Sat Jun 21, 2014 4:12 am

Re: Protected RouterBOOT

Fri Apr 21, 2017 2:55 pm

It seems to me that you are following the procedure that only applies to very old devices, that need a special package. This package is no longer compatible with new RouterOS. We will soon make new packages.

But you don't need this package. You can just enable this feature from the console:
/system routerboard settings set protected-routerboot=enabled
Normis,

Yes, I followed the procedure rextended described above. RB951G also has been upgraded successfully after going back to 6.37.5, downgrading the firmware to 3.24, and then applying the mipsbe .dpk file. Message from a RB2011, if I try to apply the code you mentioned, on 6.38.5 is that "Current RouterBOOT does not support this feature.", and that is one of the last RB I have that yet doesn´t support protected routerboot. If that error is not intended and you want access to or more information from the RB2011, just let me know, would be glad to help.

Thanks in advance.


Mazutti
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Thu Apr 27, 2017 6:03 pm

It seems to me that you are following the procedure that only applies to very old devices, that need a special package. This package is no longer compatible with new RouterOS. We will soon make new packages.

But you don't need this package. You can just enable this feature from the console:
/system routerboard settings set protected-routerboot=enabled
Normis,

Yes, I followed the procedure rextended described above. RB951G also has been upgraded successfully after going back to 6.37.5, downgrading the firmware to 3.24, and then applying the mipsbe .dpk file. Message from a RB2011, if I try to apply the code you mentioned, on 6.38.5 is that "Current RouterBOOT does not support this feature.", and that is one of the last RB I have that yet doesn´t support protected routerboot. If that error is not intended and you want access to or more information from the RB2011, just let me know, would be glad to help.

Thanks in advance.


Mazutti

I have updated the guide.

viewtopic.php?f=2&t=94303&p=580430#p580430

Thanks for feedback.
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Thu Aug 10, 2017 2:32 pm

viewtopic.php?f=2&t=94303&p=580430#p580430

Updated for new 3.41 factory RouterBOOT
I'm Italian, not English. Sorry for my imperfect grammar.
 
irghost
Member Candidate
Member Candidate
Posts: 282
Joined: Sun Feb 21, 2016 1:49 pm

Re: Protected RouterBOOT

Thu Aug 10, 2017 7:19 pm


the mipsbe ar7240 are UNSUPPORTED!!! (but protected routerboot work if factory firmware and current boot firmware >= 3.24).
https://i.mt.lv/routerboard/files/ar7240_3.41.fwf
 /system routerboard> print 
       routerboard: yes
             model: RouterBOARD SXT LTE 3-7
     serial-number: ******************
     firmware-type: ar7240
  factory-firmware: 3.33
  current-firmware: 3.41
  upgrade-firmware: 3.41
Image
MTCNA MTCRE MTCTCE MTCUME MTCWE MTCIPv6E MTCINE
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Fri Aug 11, 2017 2:24 am


the mipsbe ar7240 are UNSUPPORTED!!! (but protected routerboot work if factory firmware and current boot firmware >= 3.24).
https://i.mt.lv/routerboard/files/ar7240_3.41.fwf
 /system routerboard> print 
       routerboard: yes
             model: RouterBOARD SXT LTE 3-7
     serial-number: ******************
     firmware-type: ar7240
  factory-firmware: 3.33
  current-firmware: 3.41
  upgrade-firmware: 3.41
Image
And what you expect? You understand? (من نمی دانم منظور شما چیست)
This thread is for upgrade FACTORY firmware with one with Protected RouterBOOT support, not the "current"...
as already writed: the mipsbe ar7240 are UNSUPPORTED!!!
you can only upgrade "current" BIOS whit the file in your link, but is unuseful for upgrade factory routerboot.
I'm Italian, not English. Sorry for my imperfect grammar.
 
irghost
Member Candidate
Member Candidate
Posts: 282
Joined: Sun Feb 21, 2016 1:49 pm

Re: Protected RouterBOOT

Fri Aug 11, 2017 7:25 am


And what you expect? You understand? (من نمی دانم منظور شما چیست)
This thread is for upgrade FACTORY firmware with one with Protected RouterBOOT support, not the "current"...
as already writed: the mipsbe ar7240 are UNSUPPORTED!!!
you can only upgrade "current" BIOS whit the file in your link, but is unuseful for upgrade factory routerboot.
you Just Said Unsupported
Which one ? Current or Factory?
When u Didn't add AR7240 Firmware file and said " Unsupported "
maybe someone thinks there is no 3.41 firmware for AR7240
I just added AR7240 Firmware For correction
MTCNA MTCRE MTCTCE MTCUME MTCWE MTCIPv6E MTCINE
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Fri Aug 11, 2017 12:41 pm


And what you expect? You understand? (من نمی دانم منظور شما چیست)
This thread is for upgrade FACTORY firmware with one with Protected RouterBOOT support, not the "current"...
as already writed: the mipsbe ar7240 are UNSUPPORTED!!!
you can only upgrade "current" BIOS whit the file in your link, but is unuseful for upgrade factory routerboot.
you Just Said Unsupported
Which one ? Current or Factory?
When u Didn't add AR7240 Firmware file and said " Unsupported "
maybe someone thinks there is no 3.41 firmware for AR7240
I just added AR7240 Firmware For correction
The file for upgrade the FACTORY firmware
https://www.mikrotik.com/download/share ... mipsbe.dpk
do NOT support ar7240.
I do not add the link for "CURRENT" firmware because this is not the point for this thread.
For Protected RouterBOOT the factory firmware MUST have the support for Protected RouterBOOT,
the CURRENT also must support Protected RouterBOOT, but is easily upgradable with standard .fwf files or with one embedded on routeros system package.
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Fri Aug 11, 2017 12:51 pm

Those files are only for upgrade CURRENT firmware.
Those file do not have the ability to modify the FACTORY firmware.

mipsbe (NEW, not present on actual RouterOS 6.40.x)
http://i.mt.lv/routerboard/files/ar7240_3.41.fwf

arm (all NEW, not presents on actual RouterOS 6.40.x)
http://i.mt.lv/routerboard/files/al2_3.42.fwf
http://i.mt.lv/routerboard/files/dx3230L_3.41.fwf
http://i.mt.lv/routerboard/files/ipq8060_3.41.fwf
http://i.mt.lv/routerboard/files/ipq4000L_3.41.fwf

smips (undocumented, not released on RouterOS)
http://i.mt.lv/routerboard/files/qca9531_3.36.3.fwf
warning: qca9531 and qca9531L do not are the same model!!!

powerpc (all this files are latest firmware already present on RouterOS 6.x)
http://i.mt.lv/routerboard/files/mpc8323_2.18.fwf
http://i.mt.lv/routerboard/files/mpc8343_2.27.fwf
http://i.mt.lv/routerboard/files/mpc8548_2.30.fwf
http://i.mt.lv/routerboard/files/amcc460_3.10.fwf
http://i.mt.lv/routerboard/files/mpc8544_3.24.fwf
http://i.mt.lv/routerboard/files/p1023_3.24.fwf
http://i.mt.lv/routerboard/files/p2020_3.24.fwf

x86 RB230 (this file is latest firmware already present on RouterOS)
wlb-bios_1.3.8.fwf (i do not have valid direct link, but is embedded on all 5.x and 6.x RouterOS x86)
Last edited by rextended on Tue Apr 10, 2018 3:47 am, edited 4 times in total.
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Fri Aug 11, 2017 3:08 pm

post deleted:
fixed on 6.40.7
Last edited by rextended on Tue Apr 10, 2018 3:48 am, edited 1 time in total.
I'm Italian, not English. Sorry for my imperfect grammar.
 
feris
just joined
Posts: 12
Joined: Tue May 16, 2017 3:58 pm

Re: Protected RouterBOOT

Fri Mar 09, 2018 10:05 am

Hello
I think there is a problem with upgrade on ROS 6.41.
I can upgrade current RouterBOOT firmware to 3.41 using .fwf file with no problem.
Upgrade of factory RouterBOOT using .dpk file also works fine according to log output ( verified&installed) but /system routerboard still show old version of factory.
I've seen it on RB951G-2HnD and wAP ac.
Best Regards
 
CoMMyz
just joined
Posts: 24
Joined: Fri Dec 04, 2015 10:56 pm

Re: Protected RouterBOOT

Tue Apr 03, 2018 2:58 pm

Any update for files on 6.41?

Thanks
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Tue Apr 10, 2018 3:35 am

Any update for files on 6.41?

Thanks
Downgrade RouterOS to 6.40.7 "bugfix" and follow my guide:
viewtopic.php?f=2&t=94303&p=580430#p580430
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Tue Apr 10, 2018 3:36 am

Hello
I think there is a problem with upgrade on ROS 6.41.
I can upgrade current RouterBOOT firmware to 3.41 using .fwf file with no problem.
Upgrade of factory RouterBOOT using .dpk file also works fine according to log output ( verified&installed) but /system routerboard still show old version of factory.
I've seen it on RB951G-2HnD and wAP ac.
Best Regards

RoterOS 6.41+ actually is unsupported for upgrade factory firmware

Downgrade RouterOS to 6.40.7 "bugfix" and follow my guide:
viewtopic.php?f=2&t=94303&p=580430#p580430
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
DmitryAVET
Frequent Visitor
Frequent Visitor
Posts: 92
Joined: Thu Mar 26, 2015 12:27 am
Location: Ukraine, Mukachevo
Contact:

Re: Protected RouterBOOT

Mon Jul 30, 2018 10:33 am

rextended, thaks a lot for files!

I maked manual for russian clients, based on your info
https://weblance.com.ua/388-funkciya-pr ... rotik.html
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Sun Aug 05, 2018 1:58 pm

rextended, thaks a lot for files!

I maked manual for russian clients, based on your info
https://weblance.com.ua/388-funkciya-pr ... rotik.html
:o
I'm Italian, not English. Sorry for my imperfect grammar.
 
User avatar
shahbazian
Trainer
Trainer
Posts: 166
Joined: Fri Sep 09, 2011 6:22 pm
Location: Iran
Contact:

Re: Protected RouterBOOT

Thu Dec 13, 2018 1:34 am

How to upgrade factory firmware (RouterBOOT)?

I have some old RouterBOARDs with older version of RouterBOOT. I need enable Protected RouterBOOT on that, but it is impossible because the factory firmware is older than 3.24.
How to upgrade that?
Learn MikroTik to improve your network.
( MTCNA, MTCRE, MTCWE, MTCTCE, MTCUME, MTCIPv6E, MTCINE )
MikroTik Certified Trainer & Consultant
RIPE NCC Trainer
 
Guntis
MikroTik Support
MikroTik Support
Posts: 39
Joined: Fri Jul 20, 2018 1:40 pm

Re: Protected RouterBOOT

Thu Dec 13, 2018 7:54 am

How to upgrade factory firmware (RouterBOOT)?
To upgrade factory firmware you need to use special package that can be found here:
https://wiki.mikrotik.com/wiki/Manual:R ... bootloader

We will soon add newer version packages on that page.
 
onnoossendrijver
Member
Member
Posts: 418
Joined: Mon Jul 14, 2008 11:10 am
Location: The Netherlands

Re: Protected RouterBOOT

Thu Dec 20, 2018 12:38 pm

The link to the universal package is not working: File does not exist.
Can you fix the link?
Linux/network engineer: ITIL, LPI1, CCNA R+S, CCNP R+S, JNCIA, JNCIS-SEC
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24334
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Protected RouterBOOT

Thu Dec 20, 2018 1:20 pm

The link to the universal package is not working: File does not exist.
Can you fix the link?
Link fixed
No answer to your question? How to write posts
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 2950
Joined: Tue Feb 25, 2014 12:49 pm
Location: Capalbio, Tuscany, Italy

Re: Protected RouterBOOT

Mon Jan 07, 2019 6:29 pm

How to upgrade factory firmware (RouterBOOT)?

I have some old RouterBOARDs with older version of RouterBOOT. I need enable Protected RouterBOOT on that, but it is impossible because the factory firmware is older than 3.24.
How to upgrade that?
Please read the instructions here:
viewtopic.php?f=2&t=94303&p=580430#p580430
updated for "Universal" use.
I'm Italian, not English. Sorry for my imperfect grammar.
 
alex3712
just joined
Posts: 1
Joined: Sat Jan 12, 2019 4:08 am

Re: Protected RouterBOOT

Sat Jan 12, 2019 4:16 am

Hello, there are some solutions for the mipsbe ar7240 factory-firmware upgrade to at least 3.33
 
CoMMyz
just joined
Posts: 24
Joined: Fri Dec 04, 2015 10:56 pm

Re: Protected RouterBOOT

Sat Jan 26, 2019 1:12 pm

Can someone please from MikroTik update the wiki link for 6.43.8 Universal?
It is currently for 6.43.7 - i hate downgrading just for this.

Thank you

@normis
 
Keyko
newbie
Posts: 26
Joined: Sat Dec 23, 2017 6:27 pm

Re: Protected RouterBOOT

Tue Feb 05, 2019 7:15 pm

Any updates? Maby make auto update routerboot firmware with ROS??
 
Keyko
newbie
Posts: 26
Joined: Sat Dec 23, 2017 6:27 pm

Re: Protected RouterBOOT

Thu Feb 28, 2019 4:26 pm

Any updates? Maby make auto update routerboot firmware with ROS??
 
Keyko
newbie
Posts: 26
Joined: Sat Dec 23, 2017 6:27 pm

Re: Protected RouterBOOT

Sat Apr 13, 2019 11:34 am

Can anyone answer - will there be a Universal 6.43.7 enable for 6.43.x RouterOS update for all platforms? Should I install it and is there a changelog ???
 
rw3aui
just joined
Posts: 2
Joined: Fri Sep 27, 2019 6:26 pm

Re: Protected RouterBOOT

Fri Sep 27, 2019 6:34 pm

Good day, where i can find bin file for programmer, I brake flash.

Who is online

Users browsing this forum: Google [Bot], MSN [Bot] and 92 guests