Librem 14 Qubes OS

Hardware Librem (Other)
, , ,
3

You can bypass PureBoot’s tamper protection to boot into your operating system.

Since you just reinstalled an operating system, I suggest a few steps to fully update your Librem 14:

  1. Prepare a PureOS 10.3 image on a USB drive.
  2. Update the EC firmware.
  3. Reflash Coreboot/PureBoot.

If you need more detailed steps then this, other alternative instructions, or something else, let me know with a further reply.

4

Thanks for the answer. I’ll go study. And another question is, can I restore the protection via a USB token? Or will he never work on this laptop again?

5

In My Opinion: This is the question by OP, should never be answered on Forum.

Because it is the one question person would ask if they had a stolen Librem 14. Let the OP ask Purism support, who can verify that the Librem in question is the property of the OP.

For that consideration, I believe, this is one of the times Purism support will be happy to help without their being paid.

6

I decided to start with the forum, I thought this is a common problem, and therefore wrote. All confirmations of the purchase that my laptop can provide.

7

You can always reset your Librem 14 and Librem Key, such that they will work again. There are instructions on this forum, try to search (I’m on a Librem 5 phone, so it’s too complicated for me).

8

Yes, after reflashing PureBoot, there will be a prompt with multiple options. Choose “OEM Factory Reset / Re-Ownership” to automatically configure everything again.

9

Apparently I’m a complete noob. How to reflash? There are three flash drives, one is a key, the other is a system, and the other is a Pureboot Bundle. I understand that I need the last one. But how do you enter the firmware mode? I don’t need a programmer for this like I do for BIOS?

10
  1. Start with booting into the PureOS image on a USB drive. From here, you have two options:
    a. Follow the official instructions on updating the EC firmware. Requires a second USB drive.
    b. Follow the advanced method by @NineX. This is how I do it.
  2. After updating the EC firmware, restart the Librem 14.
  3. Reboot into the PureOS image on the USB drive. From here, again, two options:
    a. Follow the official instructions on updating PureBoot. Requires a second USB drive.
    b. Follow the official instructions above, but flashing Coreboot instead, then restarting the Librem 14, rebooting into PureOS, then flashing PureBoot over it. This is how I do it.
  4. Restart the Librem 14, then on the first PureBoot prompt, choose “OEM Factory Reset / Re-Ownership” to reconfigure everything to OEM settings.

I assume the three flash drives you have are, in order: Librem Key; PureOS 10.3; and PureBoot update. You will only need the first two for these steps outlined above if you follow my methods. You can use the remaining USB drive for the official methods if you prefer.

11

It seems to have worked out. Now these are the windows

photo_2023-11-13_19-12-35
photo_2023-11-13_19-12-35960×1280 35 KB

12

Uploading: photo_2023-11-13_19-12-37.jpg…

13

Some of your photos did not fully upload, but I can infer a few things.

After pressing “OK”, you will be prompted to select a boot drive, so choose the one containing Qubes OS.

14

photo_2023-11-13_19-12-37
photo_2023-11-13_19-12-37960×1280 63.2 KB

15

The first option.

1 Like
16

The system booted, but after rebooting this screen appears again

17

Whenever you system has updated, Pureboot notifies you and asks for confirmation that the detected changes are intentional.

1 Like
18

Which of the steps did you do from the list I provided above?

19

Reinstalled the system with the included USB and reconnected the dongle

20

Please be more explicit and provide the exact step numbers and letters; I am expecting four values.

21

I don’t quite understand what USB is needed. I have 3 pieces in the kit, system, firmware and key. Do I need to remake an empty flash drive as in your first point?

22

I need to know three things:

  1. How many USB devices you have.
  2. What each of them contain.
  3. What steps and associated letter you have done using them.

As mentioned in step 4, PureBoot should show an option to “OEM Factory Reset / Re-Ownership”, but the photos you sent do not match up with that.

You only need two USB drives: PureOS 10.3, and the Librem Key. You only require a third USB drive if you followed or plan to follow any of the official methods.