diff --git a/services/hardware-health.nix b/services/hardware-health.nix
index 6d2d525..9ada84d 100644
--- a/services/hardware-health.nix
+++ b/services/hardware-health.nix
@@ -24,6 +24,13 @@
     # ras-mc-ctl on PATH for manual inspection.
     environment.systemPackages = [ pkgs.rasdaemon ];
 
+    # fwupd: lets us check whether Lenovo publishes a P700 BIOS/microcode
+    # update to LVFS that can be flashed in-place (UEFI capsule, applied on
+    # reboot). The dual-Xeon QPI fault is intermittent; a microcode bump may
+    # improve link tolerance. If LVFS has no payload for this 2014 board,
+    # this is harmless and can be removed.
+    services.fwupd.enable = true;
+
     # Hardware watchdog: auto-reboot a hung box instead of a dead LAN.
     # systemd pets /dev/watchdog0 at half the runtime interval; if it stops
     # (hang), the chipset resets after RuntimeWatchdogSec.