diff --git a/README.md b/README.md
index 89e9863..a9a49d3 100644
--- a/README.md
+++ b/README.md
@@ -36,10 +36,11 @@ This procedure was tested on one of the conference's streaming laptops; you may
    4. Set Full Name to "SeaGL Provisioning".
    5. Accept the default username of `seaglprovisioning`.
    6. Set the password to `password`.
-7. WARNING SEMI-UNTESTED FROM THIS POINT FORWARD: In a terminal, run `sudo rpm-ostree rebase ostree-unverified-registry:ghcr.io/seagl/av-linux:latest`. You can monitor progress of this step with `rpm-ostree status` and `sudo journalctl -fu rpm-ostreed.service`.
-8. When `rpm-ostree status` reports `Status: idle`, reboot.
-9. In a terminal, rebase to the signed image with `sudo rpm-ostree rebase ostree-image-signed:docker://ghcr.io/seagl/av-linux:latest`.
-10. When `rpm-ostree status` reports `Status: idle`, reboot.
+9. Apply firmware updates in GNOME Software, if applicable. **This is very important** as once you've switched to A/V Linux, you can't apply these anymore due to EFI partition naming shenanigans.
+8. In a terminal, run `sudo rpm-ostree rebase ostree-unverified-registry:ghcr.io/seagl/av-linux:latest`. You can monitor progress of this step with `rpm-ostree status` and `sudo journalctl -fu rpm-ostreed.service`.
+9. When `rpm-ostree status` reports `Status: idle`, reboot.
+10. In a terminal, rebase to the signed image with `sudo rpm-ostree rebase ostree-image-signed:docker://ghcr.io/seagl/av-linux:latest`.
+11. When `rpm-ostree status` reports `Status: idle`, reboot.
 
 # How to Use