About enable AMT in firmware for Dell xps 15 9560

Dell model: xps 15 9560
Dell Stock bios exe file: https://www.dell.com/support/home/en-us/…-15-9560-laptop

ME bin file extracted from stock exe image(7MB size total) and Attached with this post as "exeME_extract.zip"
ME bin file dumped using intel ME FW Update tool(4MB size total) it also Attached with this post as "ME.zip"

I just want to activate(my goal) intel AMT firmware feature which is disabled by default, See the picture’s blue pen mark(The pc is AMT capable, just it disabled in firmware)



For this, I need to enable AMT inside ME bin file and than flash it back to the ME region, am I right? Question is How do I enable AMT inside ME bin file? I already read this guide Intel Management Engine
I think I need fit.exe to modify ME bin file by activating AMT using this fit.exe tool but how safely I can do that, I am noob about this.

This pc’s ME version is 11.8, is there any step by step proper guide about using fit.exe for version 11.8?

FULL DETAILS

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
 
Intel(R) MEInfo Version: 11.8.79.3722
Copyright(C) 2005 - 2019, Intel Corporation. All rights reserved.
 

 
Intel(R) ME code versions:
 
BIOS Version 1.19.2
MEBx Version 11.0.0.0010
GbE Version 0.8
Vendor ID 8086
PCH Version 31
FW Version 11.8.77.3664 H
Security Version (SVN) 3
LMS Version 2026.14.0.1682
MEI Driver Version 2013.14.0.1529
Wireless Hardware Version Not Available
Wireless Driver Version Not Available
 
FW Capabilities 0x31111140
 
Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/DISABLED
 
Re-key needed False
Platform is re-key capable True
TLS Disabled
Last ME reset reason Global system reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Disabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 EF4019
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 68853622-eed3-4e83-8a86-6cde315f6b78
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00001028
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Enabled
C-link Status Enabled
Independent Firmware Recovery Disabled
EPID Group ID 0x1FE2
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 963847BF4FA55A02B326C561C56BCE68820041CAC285B43AE1F1B1FEB3FED4A4
OEM Public Key Hash ME 963847BF4FA55A02B326C561C56BCE68820041CAC285B43AE1F1B1FEB3FED4A4
ACM SVN FPF 0x2
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000
 
FPF ME
--- --
Force Boot Guard ACM Enabled Enabled
Protect BIOS Environment Enabled Enabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Enabled Enabled
Verified Boot Enabled Enabled
Key Manifest ID 0xF 0xF
Enforcement Policy 0x3 0x3
PTT Enabled Enabled
PTT Lockout Override Counter 0x0
EK Revoke State Not Revoked
PTT RTC Clear Detection FPF 0x0
 
 

exeME_extract.zip (4.06 MB)

ME.zip (3.39 MB)

@superb123 All your MEs are unconfigured, that can easily be checked with ME analyzer. One would need a complete bios dump of the system where AMT should be enabled.

You might want to read [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization, main process is quite similar.

I doubt otherwise that it’s just to enable AMT in ME for this machine. You’d need vpro capable chipset, processor, network card, too. What are the specs of this ‘xps 15 9560’?

@lfb6 - He needs to dump onboard ME FW with FPT or programmer, edit with FITc to enable, then program that back.
This model may have service jumper that will allow this, otherwise Pinmod or programmer may be required. Or it may be possible to flash back in the edited ME FW with ME FW Update tool too, once directly dumped

@Lost_N_BIOS Thanks, I thought that was what I wrote? But anyway, lets check conditions first: Looked at 2 configurations for an xps 15 9650 and they were both chipset and processor 'Intel vPro® Platform Eligibility No". MEInfo does also look very much “no”, by the way.

@Lost_N_BIOS
@lfb6

Thanks for the reply



Yes thats what I need to do but for this I need to make sure how I use fit.exe(In correct way and use stock bios extracted Me firmware is right choice or not)




Well after read your comment I checked that, yes the processor of this laptop not supporting intel v-pro :frowning: . this laptop is second hand and for that I don’t have any manual and any specification details about it. When I saw in hwinfo’s Intel ME features, the AMT version appearing I thought maybe possible to activate AMT via flash method But when processor not supporting it, thats mean there is no way to activate AMT via modify ME right?

@lfb6 - Ahh yes, I did not notice about CPU/Chipset, assumed superb123 already checked all that before asking, because often some resold Dell’s and others have AMT disabled directly via ME.

So yes, @superb123 - if CPU and or chipset does not support AMT nothing can be done here
If CPU and chipset supported it, you would dump your own BIOS ME FW to edit then flash back, not use stock since it’s unconfigured

@superb123 You can get chipset in HwInfo, too. But I found HWInfo not to be very clear only few places where there’s more than chipset family. Otherwise a ‘fpt???.exe -I’ will give you correct information:

me4.jpg



HwInfo isn’t too clear with what it’s presenting, and the information that you displayed is just about the capabilities of the firmware itself, not of the system. So the info displayed there can be misleading- compare the vpro section:

Clipboard.jpg



(Only reference to chipset info in HwInfo I could find in the lowest part of picture)

@lfb6 - Chipset is shown in HWINFO at little CPU-z-like window, under Motherboard model name, and it shown same in Large window on Motherboard (Root) section

@Lost_N_BIOS
@lfb6
yes I am now 100% clear about cpu not supporting AMT. here is it’s official specification under Advance Technologies
https://ark.intel.com/content/www/us/en/…o-3-80-ghz.html



Yes I am clear now, this laptop is not AMT capable, I have to search another dell laptop where it possible to activate amt just by firmware update




lfb6 thank you for pointed out the actual scenario of this laptop related to AMT.As hwinfo can’t show correctly about AMT related things, do you know which tool or tools can display all scenario related to AMT? example: 1: cpu support 2:chipset support and firmware support?
I cant see any much more information related to AMT by typing this command fpt.exe -i

@superb123 Afaik there’s no bullet proof tool to check for AMT compatibility. Having a not AMT capable (socketed) CPU will also change MEInfo output in a way that would give you a hint what to change.

Earlier it were i5 and noch overclockable i7 processors and Q/ QM chipsets that were AMT compatible. Most systems where one simply could avtivate KVM did have standard manageability already. You’ll have to check every item (chipset, processor, network and existing ME version). Machines where it easily can be changed in the configuration are mostly business machines, already configured for ‘standard manageaibility’.

Why is it important for you to have AMT/ what would you need it for (on a notebook)?

(If you’re addressing directly- as you already do- it’s normally clear what content you’re referring to and might not be necessary to quote the complete content. At least for me it’s more difficult to read and the threads get ‘blown up’ since content is repeated twice, thrice… But that’s just my 5 cent)

@lfb6



Thats what I want to know, how do I check chipset and network’s V-Pro capability. I already know the processor and existing ME version’s V-pro checking.
If chipset, processor and network don’t have amt configured, can I configure them by applying some modification methods?



Most of time I put this notebook in the office, some times it gets stuck( as it 2nd hand laptop) so it difficult for me to control it from home, that is why I looking for AMT .

@superb123 AMT capability in processor, chipset, network card is hardware. ME can be configured, if AMT is configured ‘out’ (and hardware is OK), but it’s not possible to go from a ‘consumer’ ME that wouldn’t be capable of AMT to a ‘corporate’ ME for example- but no one would build such a combination anyway. (Practically: Who would build a machine that one could sell as a business machine with that feature disabled. Only example I know is some HP/ Dell machines where they sell a downgrade to standard manageability for som $30 (?) difference)

For the hardware: ark.intel.com is your friend, check for “Intel vPro® Platform Eligibility”.

@lfb6
@Lost_N_BIOS
I think this laptop ME is corporate lavel? as it shown in ME analyzer tool



Ok lets move to Fit.exe use(I know this laptop has no AMT hardware capability) but want to try by modify amt to enabled and let see what happen. In fit.exe there are several options, what option needs to enable or disable I am not clear about that(example: do I need to keep GBE and EC region enabled before modifying ME by fit.exe) need little bit guide.



in ME analyzer stock bios, dumped bios ME showing unconfigured and downloaded ME dump "Intel CSME 11.8 Corporate PCH-H D,A Firmware v11.8.79.3722" from plutomaniac’s guide thread also showing unconfigured. what that unconfigured support to mean by ME analyzer?

okI following this guide now [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization let see If I can learn something about “unconfigured” things.