[HELP] Intel ME (11.8.55.3510) ASUS STRIX Z270F

Hello Guys,
I need your help, i dont know how to downgrade my Intel ME.
When i downgrade my BIOS INTEL ME stays updated, i tried to manually downgrade Intel ME its not working anymore, since i updated it to version 11.8.55.3510.

How can i downgrade Intel ME?

I tried with FPT(FTK) on USB Stick, i get following message -> Error 368: Failed to disable Write Protection for BIOS space. FPT Operation failed.

Mainboard: ASUS STRIX Z270f -> KBL PCH-H

I Tried Check Locked/Unlocked Status -> i was fully dump the file. So its unlocked right?

When i try to downgrade Intel ME to my OLD one whats acctually on ASUS Site ( INTEL ME UPDATE ) i get following message.

Error 8758: The Image provided is not supported by the platform.

What the hell? I was using it before, i updated to newest.

IntelMeInfo

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
 
Intel(R) MEInfo Version: 11.8.55.3510
Copyright(C) 2005 - 2017, Intel Corporation. All rights reserved.
 

 
Intel(R) ME code versions:
 
BIOS Version 1301
MEBx Version 0.0.0.0000
GbE Version 0.2
Vendor ID 8086
PCH Version 0
FW Version 11.8.55.3510 H
Security Version (SVN) 3
LMS Version 11.7.0.1054
MEI Driver Version 11.7.0.1045
Wireless Hardware Version Not Available
Wireless Driver Version Not Available
 
FW Capabilities 0x31111540
 
Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/DISABLED
 
Re-key needed False
Platform is re-key capable True
TLS Disabled
Last ME reset reason Firmware reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 20BA18
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 00000000-0000-0000-0000-000000000000
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Disabled
Independent Firmware Recovery Disabled
EPID Group ID 0x1FCC
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000
 
FPF ME
--- --
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0
PTT Enabled Enabled
PTT Lockout Override Counter 0x0
EK Revoke State Not Revoked
PTT RTC Clear Detection FPF 0x0
 
 


Greetings
St1cky

Read Intel Management Engine: Drivers, Firmware & System Tools

You can try my guide here, for 368 follow what it mentions but using your BIOS to get variables. And then also get variable for ME Re-flash from same setup file. This works for some BIOS/ME sometimes, but not always, it is covered in the guide linked above in Section E
[GUIDE] Grub Fix Intel FPT Error 368 - BIOS Lock Asus/Other Mod BIOS Flash

Similar little guide (in spoiler) to get or edit the ME Re-flash variable, but it’s all in same file so you can use either guide, and you’ll be getting all three variables from same module (BIOS Lock, SMI Lock, ME Re-Flash)
Intel Management Engine: Drivers, Firmware & System Tools (272)

Hello,
Thanks for you information.
I tried it earlier a similar way, but
i was using fptw -ME -F (of me), i managed to open Descriptors with EFI Shell.

Now my Board is dead :smiley: , black screen no reaction
I destroyed even my backup bios i think (deleted ) i cant go into Crashfree BIOS.

I ordered a tool for SPI Flashing, hope it gone work.

Why is Crashfree BIOS not working?
Did it erased all data?

It just Turn On and Off but thats all no keyboard light and Mouse light. So its done i guess :D.

Greetings St1cky

It’s not dead, you just need to reprogram the BIOS, this can be done with $3 CH341A flash programmer, you’ll also need $3.50 SOIC8 test clip cable since this board BIOS is not socketed. Or SPI cable as you mentioned.

Not sure why any of that happened, you have to explain your exact steps before anyone can say why maybe this happened. Probably you messed up the ME, worse than it was, but very hard to guess without knowing what exactly you did and with what files etc.

@Lost
I buyed following ->

WINGONEER EEPROM Routing USB Programmer CH341A Writer LCD Flash
WINGONEER SOIC8 SOP8 Test Clip Für EEPROM 93CXX/25CXX/24Cxx In-Circuit-Programmierung + 2 Adapterr 25 SPI Serie 24 I2C

So i hope it will work again :smiley:

I should reflash the hole BIOS w. Intel ME instead of only a ME Version thats the problem i guess, why everything is gone, including BIOS.
I was almost using the same techniq you postet. I was using setup_var inside of GRUB, it worked succesfully on my ASUS Board, inside BIOS INTEL ME 0.0.0.0 Version, so i did it again and instead of booting inside bios back i booted inside OS and flashed the Intel ME. What File exactly i dont know for now. i just needed to change the setup_var in the correct one and set it to 0x1. ( something like setup_var 0x6ED 0x1 ) But i saw when the Programm DELETED EVERYTHING instead only ME. AFTER restart, black screen no reaction :D.

greetings St1cky

That’s all you need, once you get it make sure before you write anything to the chip you get a verified backup, that way you don’t loose board details (serial, DTS key, UUID, LAN MAC ID) Read, verify and then if buffer/memory match chip save (If not, try more until it does, other software versions, settings etc)

Flashing and programming are very different, especially regarding “Flashing” to you right now with software methods, you can only flash certain things in certain ways. When you get your programmer, hopefully you can get a good dump.
Then from there you want to use the ME Cleanup guide to redo the ME Region, then if that looks ok in many programs, you can then program that to the board and test.

What file you don’t know? There may be the problem? And how did you flash it, may also be the problem. Next time, slow down and wait for help, better to wait then brick the board. Now you have programmer though, so you can always fix things once it arrives.

Hey,
Thanks for respond.
I got one Backup on my Harddrive (was from re-write Methoted, it was doing a backup ) , so i can extract the Informations from that image right. Can i just Flash the BIOS on the BIOS chip, with the correct Board Details? I think i will get it right, it comes tomorrow, morning express :D. Im nervous whats left on the BIOS CHIP haha.

I just want the old ME Firmware and everything as before.

Greetings St1cky

Yes, hopefully all the data there is correct and in tact. make a copy of that too, so it doesn’t get lost or written over etc.

I don’t know what’s in your backup, so I can’t say if you can go ahead and write it to the chip or not. Upload a copy and I will check it, or you can check if you want with UEFITool. Does it show all regions (Desc, GbE. ME, BIOS)
If you still want older version of ME, take your current backup, use the clean ME guide and use the ME version you want from ME repositories thread and make a new BIOS with the older ME, then use that to program back instead.

Also, be sure to unlock your flash descriptor before you program to the BIOS, that way you can use FPT to flash anything you want later without having to get the programmer back out again each time.
You will need to always make sure you unlock the FD in each future BIOS update you do later on, some methods might write in the stock locked FD again

Hey,
I tried it with one flash to rewrite the BIOS on it. Other Chips dont look like BIOS.
But im not sure if this is even the BIOS Chip, i dont find any Information were i can Located it.

I will upload some Screenshots.

I tried some chips now, but the most of them are just 128kbyte? Even the LED Power just shine and the Run not? ( on the Stick )
But i can write / read?

Greetings St1cky

[/img][/img]


It was the right chip, but still not working.

Maybe Something is wrong with device or Operating System, i will try on other PC.

Its working and Running, still thanks for help :wink:

20181008_123612.jpg

20181008_123616.jpg

20181008_123632.jpg

20181008_123644.jpg

Don’t write to chips you have not taken a verified backup from first (and once verified, open the file and make sure it’s not all FF’s, sometimes verified is not verified and the file is empty)
And second, always make sure you are writing to a BIOS chip if you are writing BIOS. You shouldn’t blindly pick and choose what chips to write to, especially if you have not taken a verified backup and made sure the file contained proper data.
When you are not sure, wait for help! I saw you mention you would take images earlier, so I expected to come back to see images posted with you waiting for help to confirm what is BIOS etc.

You should not write anything, to any chips, until you have a verified backup from that chip, and have either confirmed it’s contents yourself or had someone else look to be sure it’s valid data and correctly what you thought it was.
Then you can write, because if it fails you can safely write back what was there originally from your backup.

I believe you have the correct chip circled in first image. Do you have a backup from the programmer (verified), before you wrote anything to the chip with the programmer? If yes, please upload the file.

You can’t write .cap BIOS to the chip with programmer, you must first extract the body of the BIOS from the .cap file. Open capsule file in UEFITool and right click in the middle where you see “AMI Aptio Capsule”, choose extract body.
That is what you write to the chip with programmer. In the programmer, first do erase, then blank check, then open the BIOS file, and do write operation, then verify (memory/buffer match chip).

It’s best to get a backup first though, that way you can find through that process the working CHIP ID to use because auto ID or exact ID does not always work, and so you can find the correct version of the software that works for your current setup too.
Not doing that first, leaves you trying to figure all that out later/now with a write operation and so you may need to try a few software versions and chip ID’s until you can get a valid write/verify operation.

Before you write any BIOS, make sure you also go ahead and unlock the FD following the guide here - [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing
How to unlock is in section B, second spoiler and you will be using the “FD V2-3” image on the bottom for reference (editing lines 80+90 just like the image)
And make sure you already have the BIOS created with the ME version you want in there so you don’t have to do all that later