Recovery

Pending

A customer-facing recovery procedure that works without opening the enclosure (LAC-BCOP-1 MR-08) is being written and will be published here. Until then, a unit that does not start after an update is handled by MiWire support.

Protection that exists today

A firmware update is the only operation that rewrites the unit’s firmware, and it is guarded at every step:

• The image is checked before anything is written. The unit verifies that the image is for its hardware, that it is complete, and that it carries a valid MiWire signature (see Update signing). A failed check leaves the current firmware untouched.
• The unit protects itself against power loss during the write. Before the firmware is written, the unit’s power controller is told to hold power on and the cellular module is shut down cleanly, so that a brief interruption of the supply does not stop the write half-way.
• A stalled update does not leave the unit hanging. If the update process has not completed within 20 minutes, the unit restarts itself.
• Settings are kept separately from the firmware. The firmware is a read-only image; your settings live in a separate area and are preserved across updates.

If a unit does not come back after an update

1. Wait at least 20 minutes after the update started: the unit restarts on its own.
2. Check the power supply and the LAN link.
3. If the unit still does not answer on its LAN address or its Wi-Fi network, contact MiWire support with the unit’s IMEI or serial number. Do not open the enclosure: there is no user-serviceable recovery inside, and opening it voids the warranty.

MiWire support can see whether the unit has reported in since the update, can reach a unit that has booted but lost its configuration over the support channel, and arranges a replacement or an on-site visit if the unit does not boot.