[Fixed] HP Prodesk 600 G4 mini upgrade to full Intel vPro ME/AMT/KVM

[Update] upgrade completed, see here for full instructions.

Hi experts,

I’m trying to upgrade HP Prodesk 600 G4 mini to fully support Intel AMT vPro (KVM redirection).
System currently has Intel Standard Manageability, but since (from what I can see) both the processor (Intel Core i5 8500T) and chipset (Intel Q370) should support vPro, I assume that the only thing stopping full AMT support is the configuration of Intel ME.

I have read and researched multiple posts online including posts and guides in this forum but feel that perhaps I am missing some information.

The main problem seems to be how to enable system to boot without protection of changing ME settings.
There is an FDO (assuming Flash Descriptor Override) marked pin (2 pins) on the motherboard but shortening it does not allow system to boot, it simply kills Intel Management Engine and spins the fan indefinitely and the system does not POST.

Does anyone have any more information about how to boot HP Probook 600 G4 mini into FDO mode?

Or, in case I would need to go the SPI programmer route, can someone please recommend reliable USB programmer set that could reprogram this particular SPI EEPROM without de-soldering?
From the motherboard picture FW chip seems to be Winbond 25Q256JVFQ
image

Here is info from HWiNFO64 regarding current Intel ME status:

 [Current Computer]
  Computer Name:                          DESKTOP-BE3IBVK
  Computer Brand Name:                    HP HP ProDesk 600 G4 DM
Intel Core i5-8500T -------------------------------------------------------

 [General Information]
  Processor Name:                         Intel Core i5-8500T
  Original Processor Frequency:           2100.0 MHz
  Original Processor Frequency [MHz]:     2100
  CPU ID:                                 000906EA
  CPU Brand Name:                         Intel(R) Core(TM) i5-8500T CPU @ 2.10GHz
  CPU Vendor:                             GenuineIntel
  CPU Stepping:                           U0
  CPU Code Name:                          Coffee Lake-S
  CPU Technology:                         14 nm
  CPU S-Spec:                             SR3XD
  CPU Thermal Design Power (TDP):         35.0 W
  CPU VR Thermal Design Current (TDC):    74.0 A
  CPU Power Limits (Max):                 Power = Unlimited, Time = Unlimited
  CPU Power Limit 1 (Long Duration)/Processor Base Power (PBP):  (35.00 W) (28.00 sec) [Unlocked]
  CPU Power Limit 2 (Short Duration)/Maximum Turbo Power (MTP):  (60.00 W) (2.44 ms) [Unlocked]
  CPU Power Limit 4 (PL4):                60.0 W
  Configurable TDP Level 1 (Down):        25.00 W (Unlimited range), 1600 MHz
  Current Configurable TDP Level:         Nominal (Legacy) [Unlocked]
  CPU Max. Junction Temperature (Tj,max): 100 °C
  CPU Type:                               Production Unit
  CPU Platform:                           Socket H4 (LGA1151)
  Microcode Update Revision:              EA
  Number of CPU Cores:                    6
  Number of Logical CPUs:                 6

Motherboard ---------------------------------------------------------------

 [Computer]
  Computer Brand Name:                    HP HP ProDesk 600 G4 DM
 [Motherboard]
  Motherboard Model:                      HP 83EF
  Motherboard Chipset:                    Intel Q370 (Cannon Lake-H)
  Motherboard Slots:                      1xPCI Express x1, 2xPCI Express x4
  PCI Express Version Supported:          v3.0
  USB Version Supported:                  v3.1
 [BIOS]
  BIOS Manufacturer:                      Hewlett-Packard
  BIOS Date:                              04/16/2021
  BIOS Version:                           Q22 Ver. 02.16.00
  UEFI BIOS:                              Capable
  Super-IO/LPC Chip:                      Unknown
  Trusted Platform Module (TPM) Chip:     Present, version 2.0

Intel ME ------------------------------------------------------------------

 [ME Host Status]
  ME Current Working State:               Normal
  Manufacturing Mode:                     Not Active
  ME Current Operation Mode:              Normal
  Boot Guard Status:                      Enabled
  Boot Guard Verified Boot Policy:        Disabled
  Boot Guard Measured Boot Policy:        Disabled
 [Intel Manageability Engine Features]
  Intel ME Version:                       12.0, Build 1753, Hot Fix 81
  Intel ME Recovery Image Version:        12.0, Build 1753, Hot Fix 81
  Intel ME FITC Version:                  12.0, Build 1122, Hot Fix 7
  Intel AMT Version:                      12.0.81, Build 1753
  Intel AMT Applications Version:         12.0.81
  Flash Version:                          12.0.81
  Netstack Version:                       12.0.81
  Recovery Version:                       12.0.81, Build 1753
  BIOS Version:                           Q22 Ver. 02.16.00
 [ME Firmware Capabilities]
  Full Network Manageability:             Not Capable
  Standard Network Manageability:         Capable
  Manageability (AMT):                    Capable
  Small Business Advantage:               Not Capable
  Intel Integrated Touch:                 Not Capable
  Intel Anti-Theft:                       Not Capable
  Capability Licensing Service:           Capable
  Virtualization Engine:                  Not Capable
  Intel Sensor Hub (ISH):                 Not Capable
  ICC Over Clocking:                      Not Capable
  Protected Audio Video Path (PAVP):      Capable
  Network Frame Forwarder (NFF):          Not Capable
  Remote PC Assist (RPAT):                Capable
  IPV6:                                   Capable
  KVM Remote Control:                     Not Capable
  Outbreak Containment Heuristic (OCH):   Not Capable
  Dynamic Application Loader (DAL):       Capable
  Cipher Transport Layer (TLS):           Capable
  Wireless LAN (WLAN):                    Not Capable
  Platform Trust Technology (PTT):        Not Capable
  Near Field Communication (NFC):         Not Capable
 [ME Firmware Feature State]
  Full Network Manageability:             Disabled
  Standard Network Manageability:         Enabled
  Manageability (AMT):                    Enabled
  Small Business Advantage:               Not Capable
  MEI3:                                   Not Capable
  Intel Anti-Theft:                       Disabled
  Capability Licensing Service:           Enabled
  Virtualization Engine:                  Disabled
  Intel Sensor Hub (ISH):                 Disabled
  ICC Over Clocking:                      Disabled
  Protected Audio Video Path (PAVP):      Enabled
  Network Frame Forwarder (NFF):          Not Capable
  Remote PC Assist (RPAT):                Enabled
  IPV6:                                   Enabled
  KVM Remote Control:                     Disabled
  Outbreak Containment Heuristic (OCH):   Disabled
  Dynamic Application Loader (DAL):       Capable
  Cipher Transport Layer (TLS):           Enabled
  Wireless LAN (WLAN):                    Disabled
  Platform Trust Technology (PTT):        Disabled
  Near Field Communication (NFC):         Disabled
 [ME Firmware Platform Type]
  Platform Target Usage Type:             Desktop
  SKU:                                    Regular SKU
  ME Firmware Image Type:                 Corporate SKU Firmware
  Platform Brand:                         Intel Standard Manageability
  Host ME Region Flash Protection Override (HMRFPO) Status: Locked
System --------------------------------------------------------------------

  System Manufacturer:                    HP
  Product Name:                           HP ProDesk 600 G4 DM
  Product Version:                        
  Product Serial Number:                  xxxxxxxxxxx
  UUID:                                   {xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx}
  SKU Number:                             2YE28AV
  Family:                                 103C_53307F HP ProDesk

Mainboard -----------------------------------------------------------------

  Mainboard Manufacturer:                 HP
  Mainboard Name:                         83EF
  Mainboard Version:                      KBC Version 07.D1.00
  Mainboard Serial Number:                xxxxxxxxxxx
  Asset Tag:                               
  Location in chassis:                     

System Enclosure ----------------------------------------------------------

  Manufacturer:                           HP
  Case Type:                              Mini Tower
  Version:                                 
  Serial Number:                          xxxxxxxxxxx
  Asset Tag Number:                        
------------

and here is output of MEInfo:

Intel (R) MEInfo Version: 12.0.90.2077
Copyright (C) 2005 - 2022, Intel Corporation. All rights reserved.

General FW Information
                                               
    Platform Type                              Desktop
    FW Type                                    Production
    Last ME Reset Reason                       Global system reset
    BIOS boot State                            Post Boot
    Slot 1 Board Manufacturer                  0x0000103C
    Slot 2 System Assembler                    0x00000000
    Slot 3 Reserved                            0x00000000
    Capability Licensing Service               Enabled
    Local FWUpdate                             Enabled
    OEM ID                                     00000000-0000-0000-0000-000000000000
    Integrated Sensor Hub Initial Power State  Disabled
    Intel(R) PTT Supported                     No
    Intel(R) PTT initial power-up state        Disabled
    OEM Tag                                    0x00
    TLS                                        Enabled
                                               
Intel(R) ME code versions:                     
    BIOS Version                               Q22 Ver. 02.16.00
    MEBx Version                               12.0.0.0010
    GbE Version                                0.5
    Vendor ID                                  8086
    FW Version                                 12.0.81.1753 H Corporate
    LMS Version                                2130.1.16.1
    MEI Driver Version                         2306.4.3.0
    Wireless Hardware Version                  Not Available
    Wireless Driver Version                    Not Available
                                               
IUPs Information                               
    PMC FW Version                             300.2.11.1025
    LOCL FW Version                            12.0.81.1753
    WCOD FW Version                            12.0.81.1753
                                               
PCH Information                                
    PCH Version                                10
    PCH Device ID                              A306
    PCH Step Data                              B0
    PCH SKU Type                               Production PRQ Revenue
    PCH Replacement State                      Disabled
    PCH Replacement Counter                    0
    PCH Unlocked State                         Disabled
                                               
Flash Information                              
    SPI Flash ID 1                             EF4019
    SPI Flash ID 2                             Not Available
    Host Read Access to ME                     Enabled
    Host Write Access to ME                    Disabled
    Host Read Access to EC                     Disabled
    Host Write Access to EC                    Disabled
                                               
FW Capabilities                                0x59329146
    Intel(R) Standard Manageability - PRESENT/ENABLED
    Protect Audio Video Path - PRESENT/ENABLED
    Intel(R) Dynamic Application Loader - PRESENT/ENABLED
    Service Advertisement & Discovery - PRESENT/ENABLED
    Persistent RTC and Memory - PRESENT/ENABLED
                                               
End Of Manufacturing                           
    Post Manufacturing NVAR Config Enabled     Yes
    HW Binding                                 Enabled
    End of Manufacturing Enable                Yes
                                               
Intel(R) Active Management Technology -        
    Intel(R) AMT State                         Disabled
    IPv6 Enablement                            Disabled
    Configuration State                        Completed
    Provisioning Mode                          PKI
    M3 Autotest                                Disabled
    Link Status                                Link Up
    Localized Language                         English
    C-link Status                              Enabled
    System UUID                                ef7be2d2-1f48-8fe3-05a7-2fae3c2d00ec
    Wireless Micro-code Mismatch               No
    AMT Global State                           Enabled
    Intel(R) Standard Manageability State      Enabled
    Privacy/Security Level                     Default
                                               
Intel(R) Protected Audio Video Path            
    Keybox                                     Not Provisioned
    Attestation KeyBox                         Not Available
    EPID Group ID                              0x28C7
    Re-key needed                              False
    PAVP Supported                             Yes
                                               
Security Version Numbers                       
    Minimum Allowed Anti Rollback SVN          1
    Image Anti Rollback SVN                    12
    Trusted Computing Base SVN                 1
                                               
FW Supported FPFs                              
                                               FPF         UEP         ME FW
                                               *In Use
                                               ---         ---         -----
Enforcement Policy                             0x00        0x00        0x00        
EK Revoke State                                Not Revoked Not Revoked Not Revoked 
PTT                                            Disabled    Disabled    Disabled    
OEM ID                                         0x00        0x00        0x00        
OEM Key Manifest Present                       Not Present Not Present Not Present 
OEM Platform ID                                0x00        0x00        0x00        
OEM Secure Boot Policy                         0x404       0x404       0x404       
CPU Debugging                                  Enabled     Enabled     Enabled     
BSP Initialization                             Disabled    Disabled    Disabled    
Protect BIOS Environment                       Disabled    Disabled    Disabled    
Measured Boot                                  Disabled    Disabled    Disabled    
Verified Boot                                  Disabled    Disabled    Disabled    
Key Manifest ID                                0x00        0x00        0x00        
Persistent PRTC Backup Power                   Enabled     Enabled     Enabled     
RPMB Migration Done                            Disabled    Disabled    Disabled    
SOC Config Lock                                Done        Not Done    Done        
SPI Boot Source                                Enabled     Enabled     Enabled     
TXT Supported                                  Disabled    Disabled    Disabled    

ACM SVN FPF                                    0x00
BSMM SVN FPF                                   0x00
KM SVN FPF                                     0x00
OEM Public Key Hash FPF                      0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash UEP                      0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME FW                    0000000000000000000000000000000000000000000000000000000000000000
PTT Lockout Override Counter FPF               0x00

NIC should be i219LM, not i219V, seems no WLAN card.

8- pin SOIC clip getting it to fit properly is often a pain in the beginning, never used 16 pin, but it’s described more difficult to get good contact.

There might be other jumpers / pads, sometimes these might have other functions as indicated on the board.
Not read any reports for this specific machine type, though.

Reddit - https://i.redd.it/y1gbu75fsir81.jpg

1 Like

Yes, NIC is i219LM so should be fine there.

Good info in that Reddit thread - I’ll look into this - thanks.

I finally managed to upgrade to full AMT support.

First a few notes from what I observed:
For HP Prodesk 600 G4 it does not seem to be possible to change Flash/SPI Descriptor region Master permissions, since they are restored to original values after each boot.
Also I have not found a way to boot with FDO (Flash Descriptor Override) so the only remaining option was to use flash programmer.

I have used:

CH341A programmer software I tried had issues with failing verification after reading 25% of flash’s content and also was not able to consistently read full flash dump. I assume it was not able to support W25Q256JV correctly, but NeoProgrammer had no problems.

To be on the safe side, I used powered USB hub and connected CH341A programmer to USB hub directly, since most of the motherboard will get power directly from CH341A programmer.
Also when you connect CH341A to the flash chip - power LED which is usually white will start flashing red, so do not be alarmed by it - I didn’t see any ill effect from this.

Once flashing is completed and Intel AMT is active, remote video will only be shown when there is a monitor connected to display port, otherwise the image from remote computer will be blank.
To fully support remote management without connected monitor you need to use dummy Display Port plug which emulates connected monitor.

And final warning - do not share or reuse full SPI/flash .bin files created with these instructions, since they are specific to the system in question and contain system IDs and MAC addresses.

Now for the steps:

  1. download CSME System Tools v12 r38 and read instructions from thread
    [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization
    [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization - #2 by plutomaniac

  2. Download CSME 12.0 Repository r33 (linked from the thread)
    Intel (CS)ME, (CS)TXE, (CS)SPS, GSC, PMC, PCHC, PHY & OROM Firmware Repositories - Intel Management Engine - Win-Raid Forum

  3. Identifiy needed “Unconfigured” Management Engine .bin file.
    In my case I used:
    12.0.81.1753_COR_H_BA_PRD_EXTR-Y.bin

  4. Open ME .bin file with ME Analyzer and check that “File System State” is Unconfigured.

  5. From Prodesk computer, use FPT Flash Programming Tool to dump full SPI/flash image and save it somewhere safe in case you need to restore it.
    CSME System Tools v12 r38\Flash Programming Tool\WIN64>FPTW64.exe -d fulldump.bin

  6. Start Flash Image Tool (fit.exe) and open dumped fulldump.bin file
    Change these settings for AMT support:
    Intel(R) AMT → Intel(R) AMT Parameter Configuration → Intel(R) AMT Supported = YES
    Intel(R) AMT → KVM Configuration → Firmware KVM Screen Blanking = YES
    Intel(R) AMT → KVM Configuration → KVM Redirection supported = YES

  7. Save this new configuration as .xml file and close Intel Flash Tool

  8. In the directory where fit.exe is locate there should now be a sub-directory “Decomp” containing “ME Sub Partition.bin” file.
    CSME System Tools v12 r38\Flash Image Tool\WIN32\fulldump\Decomp\ME Sub Partition.bin

This file needs to be replaced/overwritten with the appropriate Unconfigured ME .bin file which is renamed to “ME Sub Partition.bin”

  1. Open FIT tool again and loaded previously saved .xml file

  2. Build new .bin image: Build → Build Image

You will be prompted for:

"Boot Guard Profile Configuration " is set to “Boot Guard Profile 0 - No_FVME”.
The Boot Guard feature will be disabled on the platform.

Select Yes to continue

Are you sure you want to set “Intel(R) PTT Supported [FPF]” to “No”?
This will cause Intel (R) PTT to be disabled permanently in HW.

Select Yes to continue

You will get “outimage.bin” file created - this is the .bin image that needs to be flashed on the chip using programmer.

  1. open “outimage.bin” with MEAnalyzer and check that “File System State” is shown as Configured now.

  2. Power down and disconnect all cables from Prodesk computer. Press and hold power button for 5 seconds to clear all resident electrical charge.
    Open the computer and connect flash programmer onto Winbond flash chip (it is located below SATA hard disk cage so remove it first).
    Make sure to connect pins correctly to avoid damaging the system board.


image

  1. If not done before install CH341A drivers on Windows

  2. Start NeoProgrammer and connect programmer to computer USB port. Prodesk power button should now flash red from time to time.
    Press Detect in NeoProgrammer - and from the selected list of possible flash chips select W25Q256JV [3.3V]
    Open “outimage.bin” file.

Select operations in NeoProgrammer in the following order:

  • Erase IC
  • Write IC
  • Verify IC
    (this takes around 15 minutes)

Once Verification completes with Success programming is done.
Disconnect programmer from the flash chip

  1. Before booting Prodesk clear CMOS. If you do not do this it might not boot properly.
    Hold for 5 seconds CMOS reset button (it’s a small white button between C-type USB and USB A-type connectors on the front of the system board)

  2. Boot computer, enter BIOS and change settings as required (e.g. increase boot time wait to 5 or 10 seconds)

  3. In Windows go to “Flash Programming Tool” directory and issue ME reset command
    fptw64.exe -greset

Computer will reboot now

  1. Select in the boot menu (press ESC key during boot) option to enter ME Setup.
    Here you should finally see that Intel AMT is now enabled.
    Configure Intel AMT as needed and enable AMT networking and you’re done.

Feel free to update HP BIOS to the latest available version after this and AMT should continue to work as expected.

2 Likes

Hi,

Your guide is quite detailed :+1:

I am thinking about enabling AMT (advanced) on HP ProDesk 600 G5 tower.

I have all the required hardware aforementioned by you.

Could you provide a schematic of which pins on the programmer to be connected to which pins on the flash chip?
I could check the model of the flash chip

It depends on the exact chip that you have.

In my case the chip was a SOIC 16 pin, and the programmer has 8 slot socket for SPI (the other 8 slots are for I2C EEPROM).

So try to find datasheet instructions for the exact SPI chip you have and in it there should be pinouts for different pin configurations.
In case your chip is 16 pin and you need to connect it to an 8 pin/slot programmer, compare pin descriptions in the datasheet of the 8-pin chip part with the 16-pin chip part that you have, then identify the same chip pins by name between 8-pin and 16-pin version to figure out what to connect. (16-pin version usually has a bunch od NC marked pins - meaning No Connection - ignore those).

CH341A USB programmer should have chip orientation drawings on it (bottom side) so you should be able to figure out which pin needs to connect to which programmer socket.

1 Like

Thank you for the comprehensive answer.

Please find the photo of the bios chip attached.

Is the highlighted part of micro clamp conductive on the photo attached?


micro_clamp

It should not be, otherwise it would short-circuit when it grips nearby pins.
Only the protruding part (which retracts and grabs chip pins) is.
If you have a multi-meter handy you can test them for conductivity.

1 Like

Which SPI pins need to be linked?

Imagine your chip is an 8-pin variant and not 16-pin.
Find relevant chip datasheet on the internet and compare PIN descriptions between 8-pin and 16-pin versions. Since 16-pin version does not fit into 8pin SPI part of the programmer you need to use the clamps to connect identically named pins on the 16-pin chip and the 8-pin programmer slots. Small dot on the chip and on the programmer marks pin number 1.
For example look at this schematic, pins that need to be connected are marked in yellow:

1 Like

@dpcwr

Thank you for this write up! :slight_smile:

I’m attempting to do this on a ProDesk 600 G5 SFF. I have the latest ME version 12.0.95 Build 2489 on the machine. The repository doesn’t have anything this current.

Do I try to downgrade my ME firmware? Can I use something older like the file you used? What do you suggest?

I have not tried to downgrade ME since I didn’t have newer ME on the computer, but I think you might be ok if you use closest version available.
As long as you make full SPI backup before starting you should be able to program it back and go back to beginning state.
Last step I did was to use official HP BIOS upgrade with the latest available BIOS from HP and it upgraded ME to the latest version.
If you are already at the latest available BIOS you could try to run HP BIOS upgrade again to upgrade ME once full AMT is working.

First post here links to a repo with only latest versions:

Ok, I guess its worth a shot trying to flash the latest version in the repo as long as I have a good back up of what is currently on the chip…

One other question I’m not clear on. In the repo, there are 4 files for each version. Why did you pick xxx_COR_H_BA_PRD_EXTR-Y.bin as opposed to the other three?

Edit: I see the extension is correlated to chipset… Still reading to see if I can figure it out…

@dpcwr

I ran into some issues after flashing my chip… Luckily, I made a backup with the programmer…

I used the latest unconfigured .bin file from the repository… My ProDesk 600 G5 is on ME 12.0.95 Build 2489 as mentioned above. I used 12.0.90.2072_COR_H_BA_PRD_EXTR-Y.bin and followed the instructions.

Everything seemed to go perfectly until I booted up for the first time. The machine detected bios corruption and completed an automatic repair, bringing me back up to 12.0.95.

Although it reset ME, it did not add full AMT as I suspect it wrote over it with the recovery.

I went into the bios and found a section on bios protection… I changed it to manual and tried the process again.

This time, after completing the flash and putting everything back together, when I powered on the machine, I got error beeps and no post. Two long ones and three short ones…

I went back and tried the process with the file you used… Same thing… no post and the same beeps…

I finally flashed the original .bin back to the chip and was able to recover…

So, I’m guessing I either need to find a newer unconfigured file or find some way to roll back my ME firmware, although I’ve read that doesn’t seem to be a possibility…

Any idea on bios settings you might have used? Should I try to roll back my bios?

@sencha , you have the same machine and bios chip as me. Did you get it to work?

@superdupe Not yet, do you have a schematic such as which pins on ch340a to which pins on the eeprom chip to connect to? @dpcwr provided a schematic for SPI pins on the eeprom chip, but I am not sure to which ones on ch340a these correspond.
Should be easy enough to find out, I just didn’t look into it yet.

Which part of my earlier post didn’t you understand?

Look into the first post of this thread, there’s a link to repository with the latest ME versions, including 5 ME 12.0.95…

But that won’t help you, these are most probably HPs anti tampering measures. There’s (probably) another chip on the board which has copies of the firmware for automatic recovery. In addition they might have stored some checksums and hashes in the TPM. You might check for measured boot and verified boot with MEInfo.
If this is a fTPM you can reset this information by re-initializing the ME, but those machines usually have a dTPM.

So you’d have to know how these systems get initialized, where the reduntant parts are stored, how to modify them and how to sell this information to the TPM…

I used the image dpcwr attached above, but also looked it up online to make sure it was the same…

Just pretend your programmer is the 8 pin version at the bottom and the top is the 16 pin chip on your board. Connect the leads to the same corresponding connection type. For example, VCC is pin 8 on the programmer. Connect it to VCC pin 2 on the board.

The next problem I ran into was NeoProgrammer doesn’t have our chip in it. So I had to add it via instructions I found here…

I’m attaching the xml I used to do the import.

When you hit the “detect” button, if its connected correctly, it will find the chip based on the import function you just did above. Ours is GD25B256D.

At first I couldn’t get it to read the chip, but found I had the numbers reversed on my programmer… Make sure you know where pin 1-8 are and then connect accordingly.
Import GD25B256D Chip.zip (6.5 KB)

Thank you. Sorry, I will look again. I must have missed it because I couldn’t find the 12.0.95.

But that won’t help you, these are most probably HPs anti tampering measures. There’s (probably) another chip on the board which has copies of the firmware for automatic recovery.

That’s why I was hoping @dpcwr could tell me the bios settings he had on his machine. They re basically the same except his is the micro version and mine is the SFF. He was able to get it done just a few months ago, so I’m guessing there is a way.

If I can find the current ME firmware, I’ll give that a shot next. :slight_smile:

Again, I appreciate your help…