{"id":2432,"date":"2018-09-13T06:45:25","date_gmt":"2018-09-13T06:45:25","guid":{"rendered":"http:\/\/www.mtin.net\/blog\/?p=2432"},"modified":"2018-09-13T06:45:25","modified_gmt":"2018-09-13T06:45:25","slug":"newish-mikrotik-feature-protected-bootloader","status":"publish","type":"post","link":"http:\/\/www.mtin.net\/blog\/newish-mikrotik-feature-protected-bootloader\/","title":{"rendered":"Newish Mikrotik Feature: Protected Bootloader"},"content":{"rendered":"

https:\/\/wiki.mikrotik.com\/wiki\/Manual:RouterBOARD_settings#Protected_bootloader<\/a><\/p>\n

This is a new feature which allows the protection of RouterOS configuration and files from a physical attacker by disabling <\/em>etherboot. It is called “Protected RouterBOOT”. This feature can be enabled and disabled only from within RouterOS after login, i.e., there is no RouterBOOT setting to enable\/disable this feature. These extra options appear only under certain conditions. When this setting is enabled – both the reset button and the reset pin-hole is disabled.<\/strong> Console access is also disabled. The only ability to change boot mode or RouterBOOT settings is through RouterOS. If you do not know the RouterOS password – only a complete format is possible.<\/strong><\/em><\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

https:\/\/wiki.mikrotik.com\/wiki\/Manual:RouterBOARD_settings#Protected_bootloader This is a new feature which allows the protection of RouterOS configuration and files from a physical attacker by disabling etherboot. It is called “Protected RouterBOOT”. This feature can be enabled and disabled only from within RouterOS after login, i.e., there is no RouterBOOT setting to enable\/disable this feature. These extra options appear only […]<\/p>\n","protected":false},"author":1,"featured_media":161,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[24],"tags":[25,613,385],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2014\/09\/2014-08-05-19.26.03.png?fit=650%2C650","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VLMf-De","jetpack-related-posts":[{"id":204,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-router-os-6-22-released\/","url_meta":{"origin":2432,"position":0},"title":"Mikrotik Router OS 6.22 Released","author":"j2sw","date":"November 13, 2014","format":false,"excerpt":"From the ChangeLog What's new in 6.22 (2014-Nov-11 14:46): *) ovpn - added support for null crypto; *) files - allow to remove empty disk folders; *) sntp - fix problems with dns name resolving failures that were triggering system watchdog timeout; *) eoip\/eoipv6\/gre\/gre6\/ipip\/ipipv6\/6to4 tunnels have new features: tunnels go\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1438,"url":"http:\/\/www.mtin.net\/blog\/routerboot-changelog\/","url_meta":{"origin":2432,"position":1},"title":"RouterBoot Changelog","author":"j2sw","date":"November 21, 2016","format":false,"excerpt":"Periodically Mikrotik updates the routerboot part of their routerboards. \u00a0This is the firmware on the board responsible for the bootloader. http:\/\/wiki.mikrotik.com\/wiki\/RouterBOOT_changelog","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2230,"url":"http:\/\/www.mtin.net\/blog\/letsencrypt-and-mikrotik\/","url_meta":{"origin":2432,"position":2},"title":"LetsEncrypt and Mikrotik","author":"j2sw","date":"April 25, 2018","format":false,"excerpt":"Recently there has been some activity on integration with LetsEncrypt and Mikrotik.\u00a0 \u00a0WHile Mikrotik does not directly support Letsencrypt directly yet, you can make it work with this setup https:\/\/github.com\/gitpel\/letsencrypt-routeros \u00a0 \u00a0 From the GitHub Page: How it works: Dedicated Linux renew and push certificates to RouterOS \/ Mikrotik After\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2017\/09\/download.jpg?fit=236%2C213&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1236,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-routeros-6-34-6-released\/","url_meta":{"origin":2432,"position":3},"title":"Mikrotik RouterOS 6.34.6 released","author":"j2sw","date":"June 13, 2016","format":false,"excerpt":"Direct from Mikrotik To upgrade, click \"Check for updates\" at \/system package in your RouterOS configuration interface, or head to our download page: http:\/\/www.mikrotik.com\/download What's new in 6.34.6 (2016-Jun-06 08:37): *) discovery - fixed identity discovery (introduced in 6.34.5); *) log - fixed time zone adjustment (introduced in 6.34.5); *)\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":520,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-mipsle-support-ending\/","url_meta":{"origin":2432,"position":4},"title":"Mikrotik mipsle support ending","author":"j2sw","date":"January 29, 2016","format":false,"excerpt":"The last version of Mikrotik RouterOS that supports mipsle architecture is 6.32.x. \u00a0As of this writing that appears to be 6.32.2","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2544,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-brute-force-backup\/","url_meta":{"origin":2432,"position":5},"title":"Mikrotik Brute Force Backup","author":"j2sw","date":"October 16, 2018","format":false,"excerpt":"Looking to recover a password from a Mikrotik\u00a0backup? Tools to encrypt\/decrypt and pack\/unpack RouterOS v6.13+ backup files. One of the reasons a strong password is important. https:\/\/github.com\/BigNerd95\/RouterOS-Backup-Tools\/blob\/master\/README.md","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2432"}],"collection":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/comments?post=2432"}],"version-history":[{"count":1,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2432\/revisions"}],"predecessor-version":[{"id":2433,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/2432\/revisions\/2433"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media\/161"}],"wp:attachment":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media?parent=2432"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/categories?post=2432"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/tags?post=2432"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}