search

usbarmory / armory-drive

F-Secure Armory Drive - USB encrypted drive with mobile unlock over BLE
Other
53 stars 5 forks source link

Ejecting armory does not start installation #7

Open tyb-dev opened 3 months ago

tyb-dev commented 3 months ago

Dear armory drive maintainers

I executed armory-drive-install.exe on Windows 11 and followed the instructions:

Follow instructions at https://github.com/f-secure-foundry/usbarmory/wiki/Boot-Modes-(Mk-II)
to set the target USB armory in SDP mode.

Waiting for target USB armory to be plugged to this computer in SDP mode.
Found device 15a2:0080 Freescale SemiConductor Inc  SE Blank 6ULL
loading DCD at 0x00910000 (976 bytes)
loading imx to 0x8000f400 (5069824 bytes)
jumping to 0x8000f400

Wait for the USB armory blue LED to blink to indicate pairing mode.
An F-Secure drive should appear on your system.

Please specify the path of the mounted F-Secure drive: D:

Creating firmware update archive.
Copying firmware to USB armory in pairing mode at D:

Copied 2015766 bytes to D:/UPDATE.ZIP

1. Please eject the drive mounted at D: to flash the firmware.
2. Wait for the white LED to turn on and then off for the update to complete.
3. Once the update is complete unplug the USB armory and set eMMC boot mode as explained at:
     https://github.com/f-secure-foundry/usbarmory/wiki/Boot-Modes-(Mk-II)

After doing so you can use your new Armory Drive installation, following this tutorial:
  https://github.com/f-secure-foundry/armory-drive/wiki/Tutorial

Goodbye

I can see UPDATE.ZIP successfully written to the specified drive above:

I ejected the device:

The D: Window closes. However, the LED keeps blinking blue:

I am using Windows 11 (Version "10.0.22631.3447").

Am I missing a step?

Thank you!

abarisani commented 3 months ago

Can you trying with a different OS (e.g. Linux or macOS) and see if the behavior remains the same? Thanks.

tyb-dev commented 3 months ago

Can you trying with a different OS (e.g. Linux or macOS) and see if the behavior remains the same? Thanks.

I tried Linux (via VirtualBox) and Windows. In both cases, the USB armory is recognized and the UPDATE.zip is placed onto the device, but I cannot progress further. However, I understand that this is not a pure Linux setup. I do not currently have a pure Linux/MacOS machine.

Do I actually need to use armory-drive-install.exe? The documentation says it can be used for "initial installation". I could successfully use armory-boot-usb.exe to get a eMMC mapped as Windows drive, which I could then format and flash with balenaEtcher. I did not have to use armory-drive-install.exe after all. (I am still interested in getting armory-drive-install.exe to work because I want to enable Secure Boot).

abarisani commented 3 months ago

Installation with armory-drive-install is the only installation path we support at this time, mapping the eMMC might work but we won't be able to provide support reproducing that flow in case of issues.