Made for Linux
StarLite uses standard Linux drivers and can install supported distributions from their normal installation media.
StarLite firmware and security
A plain-English guide to the software that starts your StarLite, the protections built into it and the settings that are specific to this model.
What most people need to know
Open firmware, maintained for StarLite.
Firmware is the built-in software that prepares the hardware before Linux starts. Star Labs develops and publishes open-source coreboot firmware for StarLite, with an edk II interface for familiar startup and security features.
Open-source foundation
The coreboot and edk II source can be inspected, and Star Labs maintains the model-specific configuration.
Updates through Linux
Supported firmware releases are distributed through LVFS and can be delivered by compatible Linux update tools.
Protection before Linux
Security starts below the operating system.
StarLite exposes useful startup protections without requiring you to become a firmware expert. The defaults are prepared for normal use, while the controls remain available to the owner.
Intel ME disabled
The Intel Management Engine’s normal operation is disabled by default before the computer reaches you. It is disabled rather than removed.
Firmware write protection
BIOS and SPI locks restrict unauthorised changes to the firmware storage while the computer is running.
TPM and startup checks
TPM 2.0 and measured boot record startup measurements for compatible operating systems and security policies.
You do not need to change these settings.
Your StarLite arrives prepared for everyday use. These controls are available if your needs change or Star Labs support asks you to check a setting.
StarLite-specific controls
Only the settings relevant to this computer.
The shared coreboot reference covers several Star Labs computers. This list describes the main groups exposed by current StarLite Mk V firmware; available wording can vary with the installed firmware version.
Audio, camera and microphone
Enable or disable the built-in camera, microphone and audio processing before the operating system loads.
Touchscreen, rotation and card reader
Control the touchscreen, accelerometer used for automatic rotation and the built-in card reader. These are specific to StarLite’s tablet-style design.
Battery and power
Set a maximum charge level, choose the power profile and control how the computer behaves after power is connected or restored.
Performance and storage power management
Advanced controls cover processor power limits, temperature behaviour, memory speed and power management for the internal SSD.
Security and virtualization
Control BIOS Lock, Intel ME state, supported memory protections and Intel VT-d virtualization support. Secure Boot verifies authorised boot software, supports key management and revocation, and is disabled by default.
Embedded controller protection
Production Merlin firmware restricts debug and programming access and excludes its legacy unauthenticated flashing interface.
Wireless
Enable or disable Wi-Fi and Bluetooth at firmware level before Linux starts.
Updates and source
A maintained route forward.
Supported firmware updates are signed and checked as authorised before installation. Keep the charger connected during an update and allow it to finish without interruption. Use the instructions for your installed version if Star Labs publishes a model-specific step.