> For the complete documentation index, see [llms.txt](https://support.powerio.com/hub/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.powerio.com/hub/security/security-en/software-supply-chain/firmware-und-updates.md).

# Signed Firmware and Updates

Firmware is provided as a PIOP package via the official [download area](/hub/downloads/en/powerio-downloads/t1.b100-firmware.md) and installed via the web interface or the [Device Manager](/hub/en/applications/available-apps/device-manager.md) installed.

{% hint style="warning" %}
Obtain update files only from the official support section. The file extension is `.PIOP`.
{% endhint %}

## Signed packages from version <code class="expression">space.vars.signed\_firmware</code>

With the upcoming firmware version <code class="expression">space.vars.signed\_firmware</code> PIOP packages will be signed and checked on the device before installation.

{% stepper %}
{% step %}

### Generate hashes

Metadata and payload are hashed separately with SHA-512.
{% endstep %}

{% step %}

### Sign package

Both hashes are signed with ECDSA and SHA-256. The embedded verification keys use the curve `prime256v1`.
{% endstep %}

{% step %}

### Verify signatures on the device

The installer checks the signatures of metadata and payload against the stored public keys. Packages without a valid signature are rejected.
{% endstep %}

{% step %}

### Publish checksum

For published PIOP and image files, SHA-256 checksums are additionally provided.
{% endstep %}
{% endstepper %}

{% hint style="info" %}
The signature protects the origin and integrity of the package. It does not encrypt the package content: the handling of data within the PIOP format is obfuscation and not protection of confidential components.
{% endhint %}

{% hint style="warning" %}
The published firmware versions < <code class="expression">space.vars.assessed\_firmware</code> was still created with the previous PIOP process. For this version, SHA-256 checksums are provided; mandatory signature verification cannot be guaranteed for it retroactively.
{% endhint %}

## Further update security

A package is tied to its hardware model and cannot be installed on a different model. Downgrade is not possible for the bootloader; a firmware downgrade should only be done in [consultation with support](https://www.powerio.com/de/kontakt) be carried out. The packages are provided over secure connections. Their integrity is ensured by the published checksums, and from version <code class="expression">space.vars.signed\_firmware</code> signature verification additionally.

Details on update types, reading the version, and procedure are available under [Updates and versions](https://app.gitbook.com/s/TXmRnUpH3eRGvNZHbUed/powerio-system-faq/updates-und-versionen).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://support.powerio.com/hub/security/security-en/software-supply-chain/firmware-und-updates.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.