diff --git a/static/install.html b/static/install.html index 790d0fd3..eb050a91 100644 --- a/static/install.html +++ b/static/install.html @@ -77,11 +77,12 @@ TMPDIR="$PWD/tmp" ./flash-all.sh

You should now proceed to locking the bootloader before using the device as locking wipes the data again.

Locking the bootloader

-

Locking the bootloader is important as it enables full verified boot. It also prevents using - fastboot to flash, format or erase partitions. Verified boot will detect modifications to any of - the OS partitions (vbmeta, boot/dtbo, system, vendor) and it will prevent reading any modified / - corrupted data. If changes are detected, error correction data is used to attempt to obtain the - original data at which point it's verified again which makes verified boot robust to non-malicious +

Locking the bootloader is important as it enables full verified boot. It also + prevents using fastboot to flash, format or erase partitions. Verified boot will + detect modifications to any of the OS partitions (vbmeta, boot/dtbo, product, system, + vendor) and it will prevent reading any modified / corrupted data. If changes are + detected, error correction data is used to attempt to obtain the original data at + which point it's verified again which makes verified boot robust to non-malicious corruption.

Reboot into the bootloader menu and set it to locked:

fastboot flashing lock