diff --git a/static/install.html b/static/install.html index 790d0fd3..eb050a91 100644 --- a/static/install.html +++ b/static/install.html @@ -77,11 +77,12 @@ TMPDIR="$PWD/tmp" ./flash-all.sh
You should now proceed to locking the bootloader before using the device as locking wipes the data again.
Locking the bootloader is important as it enables full verified boot. It also prevents using - fastboot to flash, format or erase partitions. Verified boot will detect modifications to any of - the OS partitions (vbmeta, boot/dtbo, system, vendor) and it will prevent reading any modified / - corrupted data. If changes are detected, error correction data is used to attempt to obtain the - original data at which point it's verified again which makes verified boot robust to non-malicious +
Locking the bootloader is important as it enables full verified boot. It also + prevents using fastboot to flash, format or erase partitions. Verified boot will + detect modifications to any of the OS partitions (vbmeta, boot/dtbo, product, system, + vendor) and it will prevent reading any modified / corrupted data. If changes are + detected, error correction data is used to attempt to obtain the original data at + which point it's verified again which makes verified boot robust to non-malicious corruption.
Reboot into the bootloader menu and set it to locked:
fastboot flashing lock