Difference between revisions of "Firmware update"

Revision as of 17:58, 9 November 2007

Update Files

The TeraStation is known to ship with firmware versions up to 1.12.

As of 2005-07-12 Buffalo US has v1.05 and Buffalo Japan has v1.13.

As of 2005-11-15 Buffalo US has v1.12.

(See Software for details on 2.x firmware. --Fred 14:40, 8 Dec 2005 (CET))

The TeraStation 㿧鿊㿼㿆 - ファームウェア情報 mentions some more versions, but they are not available any more.

The update file from the Japanese site is a selfextracting LHA archive, but the international versions might be ZIP files. Once extracted you'll get the following files (in this case from an 1.05 update):

-rw-r--r--  1 bg bg    77824 Apr  6 16:32 HD-HTGL FWUpdate.exe
-rw-r--r--  1 bg bg  4194304 Feb 14 11:07 allimage.bin
-rw-r--r--  1 bg bg 40164851 Apr 15 17:12 image.dat
-rw-r--r--  1 bg bg       13 Apr  1 11:13 linkstation_version.txt

HD-HTGL FWUpdate.exe

A Windows binary that updates the TeraStation. Note that you may have to enable "Windows 2000 compatibility mode" on Windows XP for this to run!

allimage.bin

The content of the flash-rom.

image.dat

an encrypted ZIP file that contains a .tgz of the on disk firmware.

linkstation_version.txt

a text file that tells the FWUpdate.exe what firmware version the two images files are for.

Updating the TeraStation

To update the TeraStation, you must run FWUpdate.exe.

• At start it checks for the image files and the linkstation_version.txt in the working directory.
• It will first inform you that you should disable your firewall.
• It will sent broadcast packets to find all TeraStations in your local LAN.
• For each TeraStation found, it will query it for the installed firmware version. The TeraStation will report the firmware version from flash.
• It will than offer you to update a TeraStation if the reported version is less than the version from linkstation_version.txt.
• Once the update process is started, it proceeds like this:
  • First the new flash image allimage.bin is sent to the ls_servd daemon on the TeraStation.
  • The flash image is copied to /dev/mtdblock4.
  • /usr/local/bin/flash.sh is run to save the configuration to /dev/mtdblock3.
  • The kernel parameters are changed to root=/dev/ram0 and the TeraStation is rebooted.
  • The new kernel and initrd are loaded and a new instance of ls_servd waits for the new hard disk image.
  • After unzipping (and decrypting) the image.dat, the included .tgz is extracted to the harddisk.
  • The kernel parameters are changed back to root=/dev/md0 and the TeraStation is rebooted.
  • The new hard disk firmware restores the configuration.
• During all this the Windows update program shows a progress bar.
• Once the TeraStation is running, FWUpdate.exe informs you of the successful update, and displays the new version information.

Your own Firmware update

Flash Firmware

The flash firmware (allimage.bin) seems to contain some kind of checksum, but there is firmimgtool from TeraStation �?��?��?��?�:

user@linuxbox ~$ gcc -o firmimgtool firmimgtool.c
user@linuxbox ~$ ./firmimgtool 
Usage: ./firmimgtool [-icmkr] <firmimg_filename>
        -i : show firmimg_file information
        -c : cut out from firmimg_file
        -m : merge into firmimg_file
        -k <filename> : kernel image filename
        -r <filename> : ramdisk image filename
        -f <filename> : copy headers from file
        -h : show this help message

You could extract the kernel and the initrd from an existing firmware update, and replace either with your own. As the initrd is only used during firmware update, only the kernel seems interesting.

Disk Firmware

The on disk firmware (image.dat) is much more interesting, but it is an encrypted ZIP file. So all you need is the proper password and you can unzip/decrypt it:

user@linuxbox: ~$ unzip -p $PASSWORD image.dat
Archive:  image.dat
  inflating: tmpimage.tgz     

tmpimage.tgz is the on disk firmware. It can be extracted on any unix sytem, but you should be root to preserve the device-nodes, ownerships and permissions.

root@linuxbox ~# mkdir fw1.05
root@linuxbox ~# cd fw1.05
root@linuxbox ~/fw1.05# tar -xz --numeric-owner -p -f ../tmpimage.tgz

I did that on the TeraStation, where the IDs match anyway, and could use only -xzf.

You can now add/change files as you like. e.g. install the [http:/files/dropbear.tgz dropbear] ssh server:

root@linuxbox ~/fw1.05# tar -xz --numeric-owner -p -f ../dropbear.tgz

or add the sudoers file:

root@linuxbox ~/fw1.05# cat <<EOF > etc/sudoers
admin ALL=(ALL) ALL
EOF
root@linuxbox ~/fw1.05# chown root:root etc/sudoers
root@linuxbox ~/fw1.05# chmod 440 etc/sudoers

You just have to tar/zip/encrypt it again:

root@linuxbox ~/fw1.05# tar -czf ../tmpimage-new.tgz .
root@linuxbox ~/fw1.05# cd ..
root@linuxbox ~# mv tmpimage.tgz tmpimage-old.tgz
root@linuxbox ~# mv tmpimage-new.tgz tmpimage.tgz
root@linuxbox ~# zip -e image.dat tmpimage.tgz
Enter password: 
Verify password: 
  adding: tmpimage.tgz

you can now use the new image.dat instead of the official one to upload your own firmware.

Firmware Passwords

Sec spent sleepless nights figuring out these passwords, so all kudos to him.

TeraStation

Firmware	Password
1.03	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
1.04a	aAhvlM1Yp7_2VSm6BhgkmTOrCN1JyE0C5Q6cB3oBB
1.05	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
1.07β	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
1.08	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
1.09	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
1.12	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
1.13	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.02	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.03	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.04b2	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.05b1	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.06	This has a new password - value not yet known
2.07	aAhvlM1Yp7_2VSm6BhgkmTOrCN1JyE0C5Q6cB3oBB
2.08	aAhvlM1Yp7_2VSm6BhgkmTOrCN1JyE0C5Q6cB3oBB
2.10	IeY8omJwGlGkIbJm2FH_MV4fLsXE8ieu0gNYwE6Ty
2.11	aAhvlM1Yp7_2VSm6BhgkmTOrCN1JyE0C5Q6cB3oBB
2.12	aAhvlM1Yp7_2VSm6BhgkmTOrCN1JyE0C5Q6cB3oBB
2.13	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.14	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
2.16	1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l

TeraStation Home Server

TeraStation Pro(TS-TGL)

TeraStation Pro II

TeraStation Live(HS-DHTGL)

Gesammelte Passworte

1NIf_2yUOlRDpYZUVNqboRpMBoZwT4PzoUvOPUp6l
YvSInIQopeipx66t_DCdfEvfP47qeVPhNhAuSYmA4
IeY8omJwGlGkIbJm2FH_MV4fLsXE8ieu0gNYwE6Ty
aAhvlM1Yp7_2VSm6BhgkmTOrCN1JyE0C5Q6cB3oBB