Firmware updates

RouDem firmware is kept up to date by MiWire as part of the service. Security fixes reach the unit without the customer having to download or install anything.

How updates work

1. The unit checks for updates itself. Once an hour the unit asks the MiWire update service whether a newer firmware version has been released for it. The check is an outbound HTTPS request authenticated with the unit’s own certificate.
2. MiWire releases updates in stages. A new version is first made available to a small number of units, then to more, and finally to all. The update service tells each unit individually whether a release has reached it yet. Security releases are not held back by the staged rollout longer than needed to confirm they install correctly.
3. The unit downloads and verifies the image. The image is downloaded over HTTPS and checked before anything is written: the unit confirms that the image is for its hardware, that it is intact, and that it carries a valid signature from MiWire’s firmware signing keys. An image that is unsigned, signed with an unknown key or altered in any way is refused and the current firmware stays in place. See Update signing.
4. The unit installs the update and restarts. Installation takes a few minutes, during which the connection is interrupted. The unit restarts on the new firmware.
5. Settings are preserved. Your Wi-Fi settings, passwords, LAN configuration and the unit’s identity survive the update.

The “Check for update” button

On the status page of the web interface, next to the firmware version, there is a Check for update button. It runs the same check the unit runs every hour, right away, and shows the result:

Message	Meaning
Up to date: no update available for this unit	The unit runs the newest release.
Version X is available but has not been released to this unit yet. MiWire rolls updates out in stages.	A newer release exists, but the staged rollout has not reached this unit. Nothing is required from you; the unit will receive it when its turn comes. If you need it sooner, contact MiWire support.
Update X found and being installed; the unit restarts in a few minutes	An update was offered and is being installed now. The hourly check would have installed it within the hour; the button only brought it forward.
Not enrolled yet	The unit has no device certificate yet and cannot talk to the update service. This is normal in the first hours after installation; contact support if it persists.
Check failed: …	The check could not be completed, usually because the unit is offline. Try again later.

Postponing or opting out of automatic updates

Coming with a later release

A setting to be notified of an available update and install it at a time of your choosing, instead of automatically, is planned for a later firmware release. Until then updates install automatically when the unit’s turn in the rollout comes.

Where to see what changed

Every release has a page on Firmware releases with its changelog, and from the first release that shipped them, the software bill of materials and the lists of installed packages and services enabled at boot.

Firmware images themselves are not published for download: units obtain them directly from MiWire, and only signed images install. If you operate units in an environment where you need the image file, contact MiWire support.