Hi. I have an hp 250 g4 with brroadwell 5200u mei version 10. I had some acpi errors on linux mint and ubuntu. So i searched the web and recomendation was to update bios. Bios was latest version so i opted for me update. Before update i checked version it was 10.0.30.1072 1.5mb version. so i saved it with fwupdate utility with -save command. It wasnt 1.5mb it was 1.17mb but meanalyzer showed right info. so i thout it was okay as backup. I flashed me from megaupload 10.0.55.3000_1.5MB_PRD_RGN.bin. On windows it didnt change anything. But on linux the acpi errors i had , are stil there and now i have another error at boot DMAR: [Firmware Bug]: Your BIOS is broken; bad RMRR google says that its The error message indicates that there is no firmware reserved region that can cover this RMRR [0x000000008d800000-0x000000008fffffff], and your BIOS is broken; bad RMRR [0x000000008d800000-0x000000008fffffff]. SO itried to reflash my previosly made backup then bios but nothing changed. And other thing now i cant enroll mok on linux its gives me outpoot message “Nothing to do”. Is there a way to repair it? Thanks in advance.
What command did you use?
This one “FWUpdLcl64.exe -F 10.0.55.3000_1.5MB_PRD_RGN.bin”
Sounds more like bios region error, not ME.
Post complete output av MEInfo and MEInfo - verbose
Nothing irregular in MEInfo. As I said before I think this is bios related and not ME, maybe corrupt NVRAM.
The HP update sp112137 contains funny enough 4 complete Intel firmware images, with respective CSME10, CSME11, TXE 1, TXE 2.
If you really think you should work with the ME- follow this guide (to the letter!).
It might be interesting to have a look into your bios region. If you happen to dump the complete firmware please attach it here.
ME in firmware images from HP update
╔═══════════════════════════════════════════╗
║ ME Analyzer v1.283.3 r333 ║
╚═══════════════════════════════════════════╝
╔════════════════════════════════════════════╗
║ 08135.rom (1/4) ║
╟─────────────────────────────┬──────────────╢
║ Family │ CSE ME ║
╟─────────────────────────────┼──────────────╢
║ Version │ 11.0.0.1160 ║
╟─────────────────────────────┼──────────────╢
║ Release │ Production ║
╟─────────────────────────────┼──────────────╢
║ Type │ Extracted ║
╟─────────────────────────────┼──────────────╢
║ SKU │ Consumer LP ║
╟─────────────────────────────┼──────────────╢
║ Chipset │ SPT/KBP-LP C ║
╟─────────────────────────────┼──────────────╢
║ TCB Security Version Number │ 1 ║
╟─────────────────────────────┼──────────────╢
║ Version Control Number │ 4 ║
╟─────────────────────────────┼──────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼──────────────╢
║ Power Down Mitigation │ No ║
╟─────────────────────────────┼──────────────╢
║ Workstation Support │ No ║
╟─────────────────────────────┼──────────────╢
║ OEM Configuration │ No ║
╟─────────────────────────────┼──────────────╢
║ Date │ 2015-07-03 ║
╟─────────────────────────────┼──────────────╢
║ File System State │ Configured ║
╟─────────────────────────────┼──────────────╢
║ Size │ 0x1BF000 ║
╟─────────────────────────────┼──────────────╢
║ Flash Image Tool │ 11.0.0.1160 ║
╚═════════════════════════════╧══════════════╝
╔═══════════════════════════════════════════╗
║ 080CD.rom (2/4) ║
╟─────────────────────────────┬─────────────╢
║ Family │ TXE ║
╟─────────────────────────────┼─────────────╢
║ Version │ 1.1.4.1145 ║
╟─────────────────────────────┼─────────────╢
║ Release │ Production ║
╟─────────────────────────────┼─────────────╢
║ Type │ Extracted ║
╟─────────────────────────────┼─────────────╢
║ SKU │ 1.375MB M/D ║
╟─────────────────────────────┼─────────────╢
║ TCB Security Version Number │ 1 ║
╟─────────────────────────────┼─────────────╢
║ Version Control Number │ 13 ║
╟─────────────────────────────┼─────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼─────────────╢
║ OEM Configuration │ No ║
╟─────────────────────────────┼─────────────╢
║ Date │ 2015-03-22 ║
╟─────────────────────────────┼─────────────╢
║ Size │ 0x153000 ║
╟─────────────────────────────┼─────────────╢
║ Flash Image Tool │ 1.1.4.1145 ║
╟─────────────────────────────┼─────────────╢
║ Chipset Support │ BYT ║
╚═════════════════════════════╧═════════════╝
╔════════════════════════════════════════════╗
║ 080C1.rom (3/4) ║
╟─────────────────────────────┬──────────────╢
║ Family │ ME ║
╟─────────────────────────────┼──────────────╢
║ Version │ 10.0.45.1024 ║
╟─────────────────────────────┼──────────────╢
║ Release │ Production ║
╟─────────────────────────────┼──────────────╢
║ Type │ Extracted ║
╟─────────────────────────────┼──────────────╢
║ SKU │ 1.5MB ║
╟─────────────────────────────┼──────────────╢
║ TCB Security Version Number │ 1 ║
╟─────────────────────────────┼──────────────╢
║ Version Control Number │ 3 ║
╟─────────────────────────────┼──────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼──────────────╢
║ Date │ 2015-06-17 ║
╟─────────────────────────────┼──────────────╢
║ Size │ 0x17D000 ║
╟─────────────────────────────┼──────────────╢
║ Flash Image Tool │ 10.0.30.1054 ║
╟─────────────────────────────┼──────────────╢
║ Chipset Support │ WPT-LP ║
╚═════════════════════════════╧══════════════╝
╔══════════════════════════════════════════╗
║ 080C6.rom (4/4) ║
╟─────────────────────────────┬────────────╢
║ Family │ TXE ║
╟─────────────────────────────┼────────────╢
║ Version │ 2.0.0.2077 ║
╟─────────────────────────────┼────────────╢
║ Release │ Production ║
╟─────────────────────────────┼────────────╢
║ Type │ Extracted ║
╟─────────────────────────────┼────────────╢
║ SKU │ 1.375MB ║
╟─────────────────────────────┼────────────╢
║ TCB Security Version Number │ 1 ║
╟─────────────────────────────┼────────────╢
║ Version Control Number │ 3 ║
╟─────────────────────────────┼────────────╢
║ Production Ready │ No ║
╟─────────────────────────────┼────────────╢
║ OEM Configuration │ No ║
╟─────────────────────────────┼────────────╢
║ Date │ 2015-07-08 ║
╟─────────────────────────────┼────────────╢
║ Size │ 0x15F000 ║
╟─────────────────────────────┼────────────╢
║ Flash Image Tool │ 2.0.0.2077 ║
╟─────────────────────────────┼────────────╢
║ Chipset Support │ BSW/CHT ║
╚═════════════════════════════╧════════════╝
Thanks. What utility should i use for dumping bios?
Also i wanted to reflash mei from original bios but when i extracted it i have 080C1.bin thats 8mb. Meanalyzer shows same as in your post but i think its not safe to flash 8mb rom?
Try Intel ME tools fpt(w(64) of efi variant. Otherwise CH341 programmer.
What do you mean by ‘reflash mei from original bios’? Flashing a configured uninitialized ME region works only with fpt if the flash descriptor is unlocked or a service jumper is set, but that’s a completely different process tha using FwUpdCl shich triggers only the update function of the ME itself, which only updates code but not configuration.
One can extract the ME region from a complete firmware image (UEFIToolNE for structure).
Thanks.Ok tomorrow i look into fptw utility the command to dump bios is this “fptw.exe -d bios.bin”, right?
Yes, right.
I use other names to have it more clear what I get but that’s just names
fptw.exe -d spi.bin
In case you don’t have read access for all firmware regions:
fptw.exe -bios -d biosreg.bin
fptw.exe -ME -d ME.bin
fptw.exe -DESC -d FD.bin
Be careful, only warning fpt* gives is about the size! Otherwise it writes without checking proper content.
ACPI errors are normal on these HP laptops, the RMRR error also is.
Do you think so? For me its okay as long it works but i cant enroll mok key after this update. Certainly i could disable secure boot and then i dont need mok anymore. I dont now is there any good to leave secure boot enabled on linux?
Hi lfb6. So i did what you asked me with fpt. Couldnt do a full dump of bios because of Error 26: The host CPU does not have read access to the target flash area. To enable read access for this operation you must modify the descriptor settings to give host access to this region.
Same thing with fptw64 -ME -d ME.bin - same error as above. Other two commands were ok. Here are files
biosreg.zip (3.5 MB)
FD.zip (341 Bytes)
Thanks
And i didnt understand how to run fpt from efi it starts but it gives me an Error 200: Invalid parameter value specified by user. Use -? option to see help.
Looked into your bios-region, static parts are identical to stock bios, NVRAM has OK structure and enough space left.
One thing you could try would be:
-
Extracting ME region from stock firmware
-
Extract EfiSystemNcDataFvGuid from stock firmware
-
Put together a ‘new’ firmware image: FD - ME region (stock) - your bios region
-
Replace EfiSystemNcDataFvGuid in your bios with the one you extracted from stock bios
That would give you a freshly initiailized ME and an empty NVRam. But I doubt, that this will solve your acpi errors or the other errors…
Result should look like:
080C1_u_eNV.zip (4.5 MB)
Another thing you could try to flash a complete stock firmware
Both procedures would either require a service jumper or a CH341 programmer and could cause more errors than the ones you’re experiencing!
Hi lfb6. Thank you very much for your reply. What is service jumper . Is it some contacts that you have to solder on board. If it is. I didnt find any boardview for this model only schemes. So i dont know where is service jumper. So i think i’ll disable secure boot for the time being.
A jumper or a switch that’d allow you for reflashing ME (and maybe bios region, too)
OK. Thank you. I think i will buy programmer in future. For now i’ll opt for disabling secure boot.
Hi lfb6. Is this one good CH341 24 25 Serie EEPROM Flash BIOS Programmatore USB Modulo + SOIC8 SOP8 Clip di Prova Per La EEPROM 93CXX / 25CXX / 24CXX - AliExpress. Or its better to order ch341a version?
Those are cheap devices, descriptions are accordingly unprecise. There’s no warranty that you get a better CH341 if you buy more, most probably it’s just a higher sellers margin…
Most of the devices do work, some are doa or die quickly, so according to Murphys law the first CH341 will work completely fine if you buy two, and if you buy one it might be a doa device and you spend hours until you find out…
Biggest problem though is positioning of the clip, that requires quite an amount of training.
Thanks Ok but what about version CH341 or CH341A do you know what is better? As for the clip i am capable to desolder bios chip if there are problems with connecting it via clip.