HP Chromebox G2 (Fizz)

Table of contents

1. HP Chromebox G2 (Fizz)
   1. ✅ Active: CPU generation still receiving microcode updates (7th Gen Kaby Lake)
   2. ✅ PROTECTED: TPM GPIO Reset
   3. ⚡ Safety First
   4. Backup
   5. Flashing

✅ Active: CPU generation still receiving microcode updates (7th Gen Kaby Lake)

Still receiving microcode updates. See BOARDS_AND_TESTERS.md, Heads threat model.

✅ PROTECTED: TPM GPIO Reset

GPIO PLTRST# assertion does not apply to the TPM on this platform. Not vulnerable. See Per-Board Protection Status, TPM GPIO Reset Vulnerability.

⚡ Safety First

Before starting, please read our SPI Programmer Best Practices guide for essential safety information and programmer recommendations.

Backup

Before you flash Heads you should take a backup of the bootloader.

# 1. Read the full chip backup
flashrom --programmer raiden_debug_spi:target=AP \
  --read backup1.rom

# 2. Inspect the dump (sanity check)
hexdump -C backup1.bin | head -20

# 3. Verify the backup reads back correctly
flashrom --programmer raiden_debug_spi:target=AP \
  --verify backup1.rom

# 4. Read a second backup to a different file (paranoia is good)
flashrom --programmer raiden_debug_spi:target=AP \
  --read backup2.rom

flashrom --programmer raiden_debug_spi:target=AP \
  --verify backup2.rom

More info in the SPI Programmer Best Practices

Flashing

flashrom --programmer raiden_debug_spi:target=AP \
  --write heads-fizz-202607081551-v0.2.1-3112-gb9dfd39.rom