Reinstalling pfSense Plus Software¶
Please open a TAC ticket to request access to the Plus firmware by selecting Firmware Access as the General Problem and then select Netgate 1100 for the platform. Include the Netgate Device ID (NDI) and serial number in the ticket to expedite access.
Once the ticket is processed, the latest stable version of the firmware will be attached to the ticket, with a name such as:
pfSense-plus-compat-recovery-23.05-RELEASE-aarch64.img.gz
Note
pfSense® Plus is preinstalled on Netgate appliances, which is optimally tuned for Netgate hardware and contains features that cannot be found elsewhere, such as ZFS Boot Environments, OpenVPN DCO, and the AWS VPC Wizard.
Write the image to a USB memstick (8GB or larger).
See also
Locating the image and writing it to a USB memstick is covered in detail under Writing Flash Drives.
Tip
Remove and reinsert the memstick and the workstation will see a FAT partition on the drive. Place a configuration backup file on this drive as
config.xml
to restore later using the External Configuration Locator.Connect to the console port of the Netgate device.
Insert the memstick into the USB port and boot the system.
Tip
The best practice is to connect to the console, turn off the device gracefully by using the Halt system option from the console and removing power once the shutdown procedure completes, then insert the USB memstick and boot the device.
Starting the recovery process requires interrupting the boot process very soon after the boot process begins, so having an active console connection before booting is important.
When prompted, press any key to stop the autoboot process.
Type
run usbrecovery
at theMarvell>>
prompt and pressEnter
.Note
If the device does not boot after issuing this command, enter
usb reset
and then tryrun usbrecovery
again. Some USB drives require an extra reset to fully initialize.Enter the destination device or press the
Enter
key to accept the default value.Note
The onboard eMMC flash memory is always
mmcsd0
.Current versions of the installer automatically assume
mmcsd0
for the 1100 storage device as it does not support any other storage type.Type
y
then press theEnter
key if prompted to confirm the device choice.Enter the filesystem to use for this installation, either
UFS
orZFS
, or pressEnter
for the default (ZFS
).Note
ZFS is more reliable and has more features than UFS (e.g. ZFS Boot Environments), however ZFS can be memory hungry. Either filesystem will work, but if RAM usage is critical to other tasks that will run on this firewall, UFS can be a more conservative choice. ZFS memory usage can be tuned, however, so that shouldn’t be the only deciding factor.
Type
y
then press theEnter
key if prompted to confirm the filesystem choice.Wait for the installation to the eMMC to complete.
Note
On some older installations, this process may also include an automated update to a more recent version of U-boot for ZFS support.
Once the install has completed, remove the memstick, and cycle the power (unplug the Netgate 1100 and plug it back in) to reboot the Netgate 1100.
Tip
If the FAT parition on the memstick contains a configuration file to restore using the ECL method, leave the memstick plugged in while cycling the power.
See also
For information on restoring from a previously saved configuration, go to Backup and Restore.