Lenovo ThinkBook 15 G2 ARE (20VG) BIOS/UEFI Upgrade via UEFI Partition

gistfile1.txt

This is now how I flash the UEFI/BIOS on my ThinkBook instead of running h2offt from some random laptop manu's support page.

Maybe it won't void your warranty? :)
Proceed at your own risk. 



From a Linux Environment: 

1) Download latest BIOS/UEFI firmware from Lenovo: https://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkbook-series/thinkbook-15-g2-are/downloads/driver-list/component?name=BIOS%2FUEFI

Version FACN32WW is current as of this post

2) Unpack the downloaded executable using innoextract

# innoextract facn32ww.exe
...

3) Unpack the similarly named (but uppercase) executable file within the code$GetExtractPath/ dir with 7z

# cd code\$GetExtractPath
# 7z x FACN32WW.exe
...

4) Copy the extracted BIOS/UEFI binary to /EFI/Insyde/isflash.bin
( FLV3A032_16M.bin as of FACN32WW )

# cp FLV3A032_16M.bin /boot/efi/EFI/Insyde/isflash.bin

5) Remove the immutable bit from the SecureFlashInfo efivar and set its values to execute the flash program in UEFI on next boot

# chattr -i /sys/firmware/efi/efivar/SecureFlashInfo-382af2bb-ffff-abcd-aaee-cce099338877
# printf "\x07\x00\x00\x00\x28\xba\x1a\x01\x00\x90\xb6\xba\x00\x00\x00\x00\x01\x00" > /sys/firmware/efi/efivar/SecureFlashInfo-382af2bb-ffff-abcd-aaee-cce099338877

6) Reboot! Your system should begin flashing immediately.

# reboot

Successfully upgraded to FACN33W using the above directions (albeit with differing efivar for SecureFlashInfo)