The problem is likely at the BIOS, not CSME. Maybe it does not boot properly if serial tags or similar are missing (I see INVALID fields). I donβt see a problem at the CSME cleaning process so you should look into the BIOS.
Maybe it does not boot properly if serial tags or similar are missing (I see INVALID fields)οΌοΌοΌPlease help me point out the invalid field and tell me how to solve this problem. Thank you!
The backup BIOS program is completely backed up from a good machine. It should be OK. I mainly wanted to upgrade the BIOS, but I found this problem. Everything in the factory program was normal, which bothered me for a long time.
I donβt have such knowledge, try asking that in the BIOS sub-forum in case someone else does. It is off-topic here.
If the backup SPI image from that specific machine is working properly, leave it as it is. If you want to update, use FWUpdate tool for CSME and the official OEM procedure for the BIOS.
Hello all,
thanks for the guide. I followed everything carefully and created new rom but txe does not load.
Here some info from new rom:
βββββββββββββββββββββββββββββββββββββββββββββ
β ME Analyzer v1.207.0 r246 β
βββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Boot Partition Descriptor Table β
βββββββββββββββ¬βββββββ¬ββββββββββββ¬βββββββββββ¬βββββββββββ¬βββββββββββ¬βββββββ¬ββββββββ’
β Name β Type β Partition β Start β Size β End β ID β Empty β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β DLMP β 09 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UEPB β 10 β Primary β 0x001200 β 0x000010 β 0x001210 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β S-BPDT β 05 β Primary β 0x145000 β 0x1D5000 β 0x31A000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β OBBP β 06 β Secondary β 0x146000 β 0x0CE000 β 0x214000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β NFTP β 07 β Secondary β 0x214000 β 0x104000 β 0x318000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β IUNP β 15 β Secondary β 0x318000 β 0x002000 β 0x31A000 β 0001 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β RBEP β 01 β Primary β 0x006000 β 0x00B000 β 0x011000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UFS PHY β 12 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UFS GPP LUN β 13 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β FTPR β 02 β Primary β 0x021000 β 0x066000 β 0x087000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UEP β 17 β Primary β 0x001210 β 0x000108 β 0x001318 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β SMIP β 00 β Primary β 0x002000 β 0x004000 β 0x006000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β PMCP β 14 β Primary β 0x011000 β 0x010000 β 0x021000 β 0001 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UCOD β 03 β Primary β 0x087000 β 0x005000 β 0x08C000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β IBBP β 04 β Primary β 0x08C000 β 0x0B7000 β 0x143000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UTOK β 11 β Primary β 0x143000 β 0x002000 β 0x145000 β 0000 β True β
βββββββββββββββ§βββββββ§ββββββββββββ§βββββββββββ§βββββββββββ§βββββββββββ§βββββββ§ββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Boot Partition Descriptor Table β
βββββββββββββββ¬βββββββ¬ββββββββββββ¬βββββββββββ¬βββββββββββ¬βββββββββββ¬βββββββ¬ββββββββ’
β Name β Type β Partition β Start β Size β End β ID β Empty β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β DLMP β 09 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UEPB β 10 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β S-BPDT β 05 β Primary β 0x380200 β 0x37DE00 β 0x6FE000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β OBBP β 06 β Secondary β 0x381000 β 0x37D000 β 0x6FE000 β 0000 β False β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β RBEP β 01 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UFS PHY β 12 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UFS GPP LUN β 13 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β FTPR β 02 β Primary β β β β 0000 β True β
βββββββββββββββΌβββββββΌββββββββββββΌβββββββββββΌβββββββββββΌβββββββββββΌβββββββΌββββββββ’
β UEP β 17 β Primary β β β β 0000 β True β
βββββββββββββββ§βββββββ§ββββββββββββ§βββββββββββ§βββββββββββ§βββββββββββ§βββββββ§ββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββ
β B325P012.MOD_TXE3.1.BIN (1/1) β
ββββββββββββββββββββββββββββββββββββ¬ββββββββββββββββ’
β Family β CSE TXE β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Version β 3.1.80.2400 β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Release β Production β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Type β Extracted β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Chipset Stepping β B β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β TCB Security Version Number β 3 β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β ARB Security Version Number β 4 β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Version Control Number β 71 β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Production Ready β Yes β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β OEM Configuration β Yes β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Date β 2020-07-12 β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β File System State β Configured β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Flash Image Tool β 3.1.70.2340 β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Chipset Support β APL β
ββββββββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Latest β Yes β
ββββββββββββββββββββββββββββββββββββ§ββββββββββββββββ
βββββββββββββββββββββββββββββββββββββββββββββ
β Power Management Controller β
βββββββββββββββββββββββββββββββ¬ββββββββββββββ’
β Family β PMC β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Version β 0.1.0.0 β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Release β Production β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Type β Independent β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Chipset Stepping β B β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β TCB Security Version Number β 0 β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β ARB Security Version Number β 0 β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Version Control Number β 0 β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Production Ready β No β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Date β 2016-08-10 β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Size β 0x10000 β
βββββββββββββββββββββββββββββββΌββββββββββββββ’
β Chipset Support β APL β
βββββββββββββββββββββββββββββββ§ββββββββββββββ
CSME version detection tool:
<?xml version="1.0" encoding="UTF-8"?>
<System>
<Application_Name>Intel(R) CSME Version Detection Tool</Application_Name>
<Application_Version>4.0.1.0</Application_Version>
<Computer_Name>TEMPUSER-PC</Computer_Name>
<Scan_Date>29.05.2021 13:53:47</Scan_Date>
<Hardware_Inventory>
<Computer_Manufacturer>NA</Computer_Manufacturer>
<Computer_Model>ZBOX-CI327NANO-GS-01</Computer_Model>
<OperatingSystem>Microsoft Windows 10 Pro</OperatingSystem>
<Processor>Intel(R) Celeron(R) CPU N3450 @ 1.10GHz</Processor>
</Hardware_Inventory>
<ME_Firmware_Information>
<Driver_Installed>True</Driver_Installed>
<FW_Version>3.1.80.2400</FW_Version>
<Platform>Intel(R) TXE</Platform>
</ME_Firmware_Information>
<System_Status>
<System_Risk>This system is not vulnerable. It has already been patched.</System_Risk>
<System_Risk_Value>101</System_Risk_Value>
<System_Exposure />
</System_Status>
</System>
But FPT tells me that TXE is not present:
Intel (R) Flash Programming Tool. Version: 3.1.70.2340
Copyright (c) 2007 - 2019, Intel Corporation. All rights reserved.
Reading HSFSTS register⦠Flash Descriptor: Valid
β Flash Devices Found β
GD25LQ64C ID:0xC86017 Size: 8192KB (65536Kb)
β Flash Image Information β
Signature: VALID
Number of Flash Components: 1
Component 1 - 8192KB (65536Kb)
Regions:
Descriptor - Base: 0x000000, Limit: 0x000FFF
BIOS - Base: 0x001000, Limit: 0x6FEFFF
TXE - Not present
PDR - Not present
DEVICE EXPANSION - Base: 0x6FF000, Limit: 0x7FEFFF
Master Region Access:
CPU/BIOS - ID: 0x00, Read: 0xFFF, Write: 0xFFF
TXE - ID: 0x00, Read: 0xFFF, Write: 0xFFF
Total Accessable SPI Memory: 8188KB, Total Installed SPI Memory : 8192KB
FPT Operation Successful.
I tried flashing new rom by programmer and FPT , run -greset with no success.
What im doing wrong?
Thanks for help!
If you are talking about "TXE - Not present" indication, that is 100% correct. Your platform uses IFWI 2.0 structure where the CSTXE is combined with the BIOS within the BIOS region. Nothing to worry about.
Thanks plutomamiac, yes thatβs true
Update : I was able to switch to version 3.1.80.2400 leaving all other parts untouched. It is now detected by bios. However I canβt do any modding of βBios region.binβ . I can edit/update that part in uefitool but every try to flash reconstructed rom let the PC post into bios (recovery mode - reflash module). I can skip here (do not continue, always skip or you will brick the board!) and boot into os. I donβt know the kind of protection used here . My setting is "Boot Guard Profile 0 Legacy " to skip boot guard .OEM Public Key Hash UEP is set but OEM Public Key Hash FPF value is βnot setβ . Modded bios region has still a manifest .
Because FPF is not set , is there a method to
use a new OEM Public Key Hash and resign all parts ?
If FPF are not set, BG is not the reason for the problem after modifications. Maybe a BIOS issue after those changes. I suggest you ask at the BIOS sub-forum in case someone can help you out.
Hi!!!
In case I canβt find a compatible major and minor version, would I have to update ME first to clear the data region?
Thanks
Iβm getting this error when I get to this part of the guide:
Invalid Parameter File Error:
The given parameter file is missing parameters.
Reading the editable fields guide (AMTNVM_editable_fields.pdf), I noticed that there werenβt some mandatory fields in the outputted dump image by ftoolc.exe. I include the missing mandatory fields but I still get the same error.
A note: I couldnβt find the exact same ME RGN firmware reported by the ME Analyzer, 3.0.9.1133 AMT, so I used the closest one, which in this case was 3.0.2.1105_AMT_PRD_RGN.bin
I donβt have experience with ME 2-3, aside from the basic instructions written at the guide. They are extremely old and very different/weird to configure. I suggest you trial and error until you manage to figure out what it expects, as I donβt know unfortunately.
Hi Guys,
Thank you for making this guide. My system is Asus R6EO and 9980XE. I use the latest CSME 11.12.86.1877
I decided to clean the dump SPI because ME Analyzer showed "Initialized" FSS.
So I followed the guide with care and I skipped step 7 and 13 as SMIP key hasn`t been shown in FIT.
When I created outimage.bin it was look good "configured" but after I flashed it became unconfigured. Did I missed something or make it wrong?
Please help!
Thanks,
ME Analyzer v1.220.0 r251 β
βββββββββββββββββββββββββββββββββββββββββββββ
βββββββββββββββββββββββββββββββββββββββββββββββββ
β outimage.bin (1/1) β
βββββββββββββββββββββββββββββββ¬ββββββββββββββββββ’
β Family β CSE ME β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Version β 11.12.86.1877 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Release β Production β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Type β Extracted β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β SKU β Consumer H β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Chipset β KBP/BSF/GCF-H A β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β TCB Security Version Number β 3 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Version Control Number β 301 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Production Ready β Yes β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Workstation Support β No β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β OEM Configuration β No β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Date β 2021-01-14 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β File System State β Configured β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Size β 0x1F0000 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Flash Image Tool β 11.8.86.3877 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Latest β Yes β
ME Analyzer v1.220.0 r251 β
βββββββββββββββββββββββββββββββββββββββββββββ
βββββββββββββββββββββββββββββββββββββββββββββββ
β fw.bin (1/1) β
βββββββββββββββββββββββββββββββ¬ββββββββββββββββ’
β Family β CSE ME β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Version β 11.12.86.1877 β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Release β Production β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Type β Update β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β SKU β Consumer H β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Chipset Stepping β A β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β TCB Security Version Number β 3 β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Version Control Number β 301 β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Production Ready β Yes β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Workstation Support β No β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β OEM Configuration β No β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Date β 2021-01-14 β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β File System State β Unconfigured β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Chipset Support β BSF/GCF β
βββββββββββββββββββββββββββββββΌββββββββββββββββ’
β Latest β Yes β
βββββββββββββββββββββββββββββββ§ββββββββββββββββ
The 2nd MEA output shows that you loaded an Update (UPD) image type which is created via FWUpdate -save parameter. UPD images do not contain File System data so it makes sense to see "Unconfigured". If you were to dump the full SPI chip image again (flash programming tool, hardware programmer etc), you would see "Initialized", as expected.
Thanks Plutomaniac. You were right the 2nd output was created via FWupdate.
So I created another via FPT see below. Thats looking good isn
t it.
Many thanks.
ME Analyzer v1.220.0 r251 β
βββββββββββββββββββββββββββββββββββββββββββββ
βββββββββββββββββββββββββββββββββββββββββββββββββ
β spi.bin (1/1) β
βββββββββββββββββββββββββββββββ¬ββββββββββββββββββ’
β Family β CSE ME β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Version β 11.12.86.1877 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Release β Production β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Type β Extracted β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β SKU β Consumer H β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Chipset β KBP/BSF/GCF-H A β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β TCB Security Version Number β 3 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Version Control Number β 301 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Production Ready β Yes β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Workstation Support β No β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β OEM Configuration β No β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Date β 2021-01-14 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β File System State β Initialized β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Size β 0x1F0000 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Flash Image Tool β 11.11.60.1561 β
βββββββββββββββββββββββββββββββΌββββββββββββββββββ’
β Latest β Yes β
βββββββββββββββββββββββββββββββ§ββββββββββββββββββ
Yes, looks proper. You can check the dumped firmware health by fully unpacking it via β-unp86 -bug86β parameters. If it completes successfully without pauses on red error messages, youβre good. For the live firmware, use MEInfo and MEManuf tools, as explained at Intel (Converged Security) Management Engine: Drivers, Firmware and Tools.
Many thanks.
Are these "-unp86 -bug86" can be used with FPT or could you give example how to use it please?
Edit: In the meantime I figured it out these are for MEAnalyzer. Both are Ok without error. Sorry for my "stupid" question above. I`m new in this :).
Anyway. Thanks for your help again.
No youβre right, I should have mentioned these are for MEA. Either way, everything is fine now. Enjoy your cleaned system.
@plutomaniac sorry to disturb, I reflashed my SPI chip with a programmer, as I messed up things. I used a clean extracted bios file from manufaturer (added MAC, UDID and serial), now the ME region results as Initialized and not Configured.
I donβt have the dump of the chipβ¦
Is this correct or not?
If you want to clean the Engine firmware for some reason, follow the guide. As the guide says, you should see Configured at the output image.
@plutomaniac I donβt get. If I download BIOS from official site do I need to clean it? Or clean procedure is only for dumped BIOSes from board by myslef?
And another couple of question. Official Gigabyte BIOS have issue preventing update IME (you describe it to fix some bit). Do I need to fix it in official downloaded BIOS?
And I mod my BIOS to replace IME v7 to IME v8 with manual from tweaktownforum (I canβt post urls srill). I donβt get do I need to update it to IME v9 or upper?
The problem to follow this guide, is that I need a dumped image of SPI chip, and I donβt have it, just the one downloaded from manufacturer websiteβ¦