Update BIOS with BGT (BIOS Guard Firmware Update Tool)
This guide explains how to update a SECO x86 BIOS using BGT (AMI BIOS Guard Firmware Update Tool).
Which products should use this guide?
Use BGT only for the following x86 products:
- Coffee Lake board SOM-COMe-BT6-CFL-H (C08)
- Whisky Lake board SOM-COMe-CT6-WHL-U (C55)
All other x86 products should use the AFU guide instead.
Before you start
Updating BIOS is a critical operation.
- DO NOT power off, reset the system, or remove AC power while the update is running.
- The first reboot after flashing may take longer than usual due to internal re-initialization steps.
- Use only BIOS images provided by SECO for your specific product. Flashing a BIOS image that is not provided by SECO or meant to be used on another product may result in a non-functioning board.
- BIOS downgrade is not supported and is strongly discouraged.
- Custom “dumped” BIOS images are not supported.
What you need as requirements
- The BIOS binary file to flash (example name:
BIOSbinary.XXX). - The BGT package for your platform/OS (see below).
- If using UEFI Shell: a FAT32 USB drive and an UEFI-bootable USB setup. Check the How to create a UEFI-bootable USB Drive guide.
- Administrator/root privileges for Windows/Linux flashing.
BGT tools included in the package
Depending on your target environment, BGT is distributed as:
BgtEfi.efi,BgtEfix64.efi(UEFI Shell, 32/64-bit)BgtWin.exe,BgtWinx64.exe(Windows 32/64-bit)
Method 1 — UEFI Shell (also called EFI Shell)
- Copy the BGT EFI tool and the BIOS binary file into the USB drive.
- Boot the system and enter BIOS setup by pressing ESC.
- Enable ME firmware re-flash:
In BIOS setup, enable Me FW Image Re-Flash:
- Advanced → PCH FW Configuration → Firmware Update Configuration
- Enable Me FW Image Re-Flash
- Save (e.g., F4) and exit
-
Set the system to boot from the USB key:
- Under the Boot menu set Boot Option #1 to the USB key containing BGT
- This is typically a one-shot setting; afterwards you can restore your usual boot order
-
In UEFI Shell:
- Identify the USB filesystem (
fs0:,fs1:, …) from the device mapping table (removable disk). - Enter it (example:
fs1:). - Navigate to the folder containing the BGT utility and BIOS binary.
- Identify the USB filesystem (
-
Run:
update.nsh BIOSbinary.XXX
Method 2 — Windows
- Copy the updater tool and the BIOS binary into a folder on the Windows disk.
- Open Command Prompt as Administrator.
cdinto the folder where the tools and BIOS file are stored.- Run:
update.bat BIOSbinary.XXX
Ensure all required files provided by SECO are present in the folder together with the script.
Troubleshooting
General
-
The system does not boot after the update
- Wait a few minutes: the first boot can be slower than usual.
- Perform a full power cycle (power off, remove power for ~10 seconds, power on).
- If the system still does not boot, contact SECO support with board PN/SN and the BIOS package used.
-
Wrong BIOS image
- If the BIOS binary does not match your exact board/SKU, stop and contact SECO support.
-
BIOS file name contains spaces
- Rename it to a simple name (e.g.
BIOS.ROM) and rerun the script.
- Rename it to a simple name (e.g.
UEFI Shell
-
USB not visible / no
fs0:listed- Ensure the USB drive is FAT32.
- Try a different USB port and reboot.
- In UEFI Shell, use the mapping table to locate the removable disk.
-
BGT tool does not run
- Make sure you are using the right EFI binary:
- 64-bit UEFI Shell →
BgtEfix64.efi - 32-bit UEFI Shell →
BgtEfi.efi
- 64-bit UEFI Shell →
- Confirm the script (
update.nsh) and the BGT binary are in the same directory.
- Make sure you are using the right EFI binary:
-
Update stops or fails immediately
- Re-check that Me FW Image Re-Flash is enabled in BIOS:
- Advanced → PCH FW Configuration → Firmware Update Configuration → Me FW Image Re-Flash
- Re-check that Me FW Image Re-Flash is enabled in BIOS:
Windows
-
Script works only with admin privileges
- Open Command Prompt as Administrator before running
update.bat.
- Open Command Prompt as Administrator before running
-
Security software blocks the tool
- Temporarily whitelist the folder containing BGT and the BIOS package (company policy permitting).
-
Wrong BGT executable
- Use
BgtWinx64.exeon 64-bit Windows andBgtWin.exeon 32-bit Windows.
- Use