Reinstalling pfSense Plus Software

  1. Please open a TAC ticket to request access to the Plus firmware by selecting Firmware Access as the General Problem and then select Netgate 8200 for the platform. Make sure to include the serial number in the ticket to expedite access.

    Once the ticket is processed, the latest stable version of the firmware will be attached to the ticket, with a name such as:



    pfSense® Plus is preinstalled on Netgate appliances, which is optimally tuned for Netgate hardware and contains features that cannot be found elsewhere, such as ZFS Boot Environments, OpenVPN DCO, and the AWS VPC Wizard.

  2. Write the image to a USB memstick.

    See also

    Locating the image and writing it to a USB memstick is covered in detail under Writing Flash Drives.

  3. Connect to the console port of the Netgate device.

  4. Insert the memstick into an open USB port and boot the system.


    If the system does not automatically boot from USB, restart the device again and press F2 when prompted to start the boot selection menu, then select the USB drive.

  5. After a minute the pfSense® Plus loader menu will be displayed with a 3 second timer. Either allow the menu to timeout or press 1 (the default) to continue.

  6. Choose one of the console type options the installer offers for serial console installation.

    The default option is vt100, which should work for most. Choose the correct console output most compatible with the serial client.

    Please choose the appropriate terminal type for your system.
    Common console types are:
       ansi     Standard ANSI terminal
       vt100    VT100 or compatible terminal
       xterm    xterm terminal emulator (or compatible)
       cons25w  cons25w terminal


    While vt100 is the most widely compatible type, the cons25w console type is likely easier to read. Similarly, the xterm option renders well on GNU screen and many popular terminals.

  7. Read the Copyright and distribution notice displayed by the installer. Press Enter to accept the terms of the agreement.

  8. The installer will automatically launch and present several options. On Netgate firewalls, choosing Enter for the default options will complete the installation process.


    Options such as the type of disk partition can be modified through this installation if required.

    See also

    For more information on the available choices during this process, see the Installation Walkthrough.


    If there is an existing installation on this device, the Recover config.xml option will attempt to mount the existing installation drive and copy the previous configuration, including SSH keys. Choose that option first, then proceed through the install as usual.

  9. Once the installer is finished, choose No and press Enter to skip going to a shell.

  10. The installer will then prompt to Reboot. Select Reboot and press Enter. The device will shutdown and reboot.

    Dec 21 22:41:37 Waiting (max 60 seconds) for system process `vnlru` to stop... done
    Waiting (max 60 seconds) for system process `syncer` to stop...
    Waiting (max 60 seconds) for system process `bufdaemon` to stop... done
    All buffers synced.
    Uptime: 5m43s
    umass0: detached
  11. Remove the USB drive from the USB port.


    If the USB drive remains attached, the system will boot into the installer again because by default the system firmware is configured so that a device plugged into the USB port will be booted with a higher priority.

See also

For information on restoring from a previously saved configuration, go to Backup and Restore.