Description of problem: fwupdtool cannot upgrade fireware/BIOS on Lenovo X390 Version-Release number of selected component (if applicable): fwupd-1.5.12-1.fc34.x86_64 How reproducible: Steps to Reproduce: 1. fwupdtool refresh 2. fwupdtool get-updates 20NNCTO1WW │ ├─Intel Management Engine: │ │ Device ID: 347f241c15f38108f561926fb8653aaf3582d66f │ │ Current version: 192.72.1757 │ │ Minimum Version: 192.72.1757 │ │ Vendor: DMI:LENOVO │ │ GUIDs: e71fb5ce-9e63-4187-a356-4f4a00a5d67e │ │ 80db578d-5106-55be-a886-6c668009aeaa ← UEFI\RES_{E71FB5CE-9E63-4187-A356-4F4A00A5D67E} │ │ Device Flags: • Internal device │ │ • Updatable │ │ • System requires external power source │ │ • Supported on remote server │ │ • Needs a reboot after installation │ │ • Device is usable for the duration of the update │ │ │ └─ThinkPad X390 Yoga Consumer ME Update: │ New version: 192.81.1753 │ Remote ID: lvfs │ Summary: Lenovo ThinkPad X390 Yoga Consumer ME Firmware │ Licence: Proprietary │ Size: 3.0 MB │ Created: 2016-07-08 │ Urgency: High │ Details: https://pcsupport.lenovo.com/de/en/search?query=N2LRN22W │ Vendor: Lenovo Ltd. │ Flags: is-upgrade │ Description: │ This stable release fixes the following issues: │ │ • Disable auto-sleep when the device is connected to a USB port │ • Improve performance of the analog sticks │ └─System Firmware: │ Device ID: f3680a0cb873b4f2d6cf67f9fef6016eda0f0a7f │ Current version: 0.1.84 │ Minimum Version: 0.0.1 │ Vendor: LENOVO (DMI:LENOVO) │ GUIDs: f68012fa-ba5a-41b7-b1cd-900946678067 │ 230c8b18-8d9b-53ec-838b-6cfc0383493a ← main-system-firmware │ a4d6865e-fb28-5710-8396-8264426dc65d ← UEFI\RES_{F68012FA-BA5A-41B7-B1CD-900946678067} │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Cryptographic hash verification is available │ • Device is usable for the duration of the update │ └─ThinkPad X390 Yoga (W-BIOS for Machine types: 20NN, 20NQ) System Update: New version: 0.1.85 Remote ID: lvfs Summary: Lenovo ThinkPad X390 Yoga System Firmware Licence: Proprietary Size: 25.0 MB Created: 2021-04-20 Urgency: High Vend20NNCTO1WW │ ├─Intel Management Engine: │ │ Device ID: 347f241c15f38108f561926fb8653aaf3582d66f │ │ Current version: 192.72.1757 │ │ Minimum Version: 192.72.1757 │ │ Vendor: DMI:LENOVO │ │ GUIDs: e71fb5ce-9e63-4187-a356-4f4a00a5d67e │ │ 80db578d-5106-55be-a886-6c668009aeaa ← UEFI\RES_{E71FB5CE-9E63-4187-A356-4F4A00A5D67E} │ │ Device Flags: • Internal device │ │ • Updatable │ │ • System requires external power source │ │ • Supported on remote server │ │ • Needs a reboot after installation │ │ • Device is usable for the duration of the update │ │ │ └─ThinkPad X390 Yoga Consumer ME Update: │ New version: 192.81.1753 │ Remote ID: lvfs │ Summary: Lenovo ThinkPad X390 Yoga Consumer ME Firmware │ Licence: Proprietary │ Size: 3.0 MB │ Created: 2016-07-08 │ Urgency: High │ Details: https://pcsupport.lenovo.com/de/en/search?query=N2LRN22W │ Vendor: Lenovo Ltd. │ Flags: is-upgrade │ Description: │ This stable release fixes the following issues: │ │ • Disable auto-sleep when the device is connected to a USB port │ • Improve performance of the analog sticks │ └─System Firmware: │ Device ID: f3680a0cb873b4f2d6cf67f9fef6016eda0f0a7f │ Current version: 0.1.84 │ Minimum Version: 0.0.1 │ Vendor: LENOVO (DMI:LENOVO) │ GUIDs: f68012fa-ba5a-41b7-b1cd-900946678067 │ 230c8b18-8d9b-53ec-838b-6cfc0383493a ← main-system-firmware │ a4d6865e-fb28-5710-8396-8264426dc65d ← UEFI\RES_{F68012FA-BA5A-41B7-B1CD-900946678067} │ Device Flags: • Internal device │ • Updatable │ • System requires external power source │ • Supported on remote server │ • Needs a reboot after installation │ • Cryptographic hash verification is available │ • Device is usable for the duration of the update │ └─ThinkPad X390 Yoga (W-BIOS for Machine types: 20NN, 20NQ) System Update: New version: 0.1.85 Remote ID: lvfs Summary: Lenovo ThinkPad X390 Yoga System Firmware Licence: Proprietary Size: 25.0 MB Created: 2021-04-20 Urgency: High Vendor: Lenovo Ltd. Flags: is-upgrade Description: Version 1.85 New functions or enhancements - Updated the CPU microcode. (Note) Above update will show "Self-Healing BIOS backup progressing ... xx %" message on screen during BIOS update process. - Updated the Diagnostics module to version 04.17.000. Problem fixes - Fixed an issue where system might hang when external USB keyboard is connected and Kernel DMA is set to Enabled by ThinkPad Setup. or: Lenovo Ltd. Flags: is-upgrade Description: Version 1.85 New functions or enhancements - Updated the CPU microcode. (Note) Above update will show "Self-Healing BIOS backup progressing ... xx %" message on screen during BIOS update process. - Updated the Diagnostics module to version 04.17.000. Problem fixes - Fixed an issue where system might hang when external USB keyboard is connected and Kernel DMA is set to Enabled by ThinkPad Setup. 3. fwupdtool update 4. reboot 5. System reboots and it is not updated Actual results: System reboots and it is not updated Expected results: System reboots and it is updated Additional info: The system boot straight into fedora. Booting "Linux firmware updater" (?) in the OS Boot menu does not help. This used to work with previous updates.
I am having this same problem. Occasionally, upon rebooting, the GRUB menu will be displayed, but the system will boot without applying the update. Manually selecting "Linux firmware updater" yields the same result.
Additional clarification: I am not running this on an x390. I am using a ThinkPad X1 Extreme 2nd Edition.
After disabling secure boot, the system updates normally. Could this be a bug in shim? https://github.com/rhboot/shim/pull/379
I can confirm that disabling Secure Boot and trying the update afterwards worked (Thanks to cody6730 for finding that out). However, I am not quite sure what the exact sequence was, because I had two different "reboot experiences". The first one showed a rotating progress indicator (The | / - \ sequence within the red background of the Lenovo logo and the rebooted without any further upgrade. Another "fwupdtool update" then proceeded with the actual update and finished it successfully - the system is not up-to-date according to "fwupdtool get-updates". Note to future readers: Enabling Secure Boot afterwards again is definitely a good idea.
Important correction to my last comment: It should read "the system is now(!) up-to-date"the
I'll close this as I think we're good with the latest set of updates.