Release of aarch64 images for espressobin v7 board



  • Hello Netgate team,

    Do you plan to allow public access to aarch64 images for Espressobin v7 boards? Or enable a path to upgrade FreeBSD 12 to pfSense for ARM.

    Reading the documentation for SG-1100 Reinstalling pfSense opening a ticket to access the recovery image one must have an active subscription with yourself?

    There is also a hint on specs page - Enhaced secutity that reads:

    First product equipped with Microchip® CryptoAuthentication Device which provides assurance your system is running authentic, unaltered pfSense software

    Does it mean that Netgate SG-1100 hardware based on Espressobin v7 has additional build in hardware signature chip?
    Quick skim of the V7 schematics does not reveal any Microchip authentication processor. Would that prevent installing ARM recovery image to a vanilla board?

    Best regards,
    Martin



  • @mveplus said in Release of aarch64 images for espressobin v7 board:

    First product equipped with Microchip® CryptoAuthentication Device which provides assurance your system is running authentic, unaltered pfSense software

    Does it mean that Netgate SG-1100 hardware based on Espressobin v7 has additional build in hardware signature chip?
    Quick skim of the V7 schematics does not reveal any Microchip authentication processor. Would that prevent installing ARM recovery image to a vanilla board?

    Best regards,
    Martin

    My testing says yes, that chip prevents all kinds of things from working. The recovery USB fails with "no valid serial" and "no Thoth module found". Upon getting pfSense to boot on my Espressobin via microSD going a different route, I have also found that it cannot check for updates which I also believe is based on having a working CryptoAuthentication device.

    Would be great to see a community edition but they sure put in a lot of effort to prevent vanilla Espressobin devices from working. I don't mind buying the devices from Netgate, I just hope they don't EOL as quickly as some of their previous ARM offerings. I would imagine the espressobin will still be for sale long after Netgate stops selling a product based on it. Maybe that's when we'll see a community version.

    EDIT: Yes, there really is an extra chip inside. My SG-1100 has a cool little board soldered to GPIO.


Log in to reply