Intel (Converged Security) Management Engine: Drivers, Firmware and Tools (2-15)

Dromadus · November 12, 2017, 11:04am

Windows 10 after clean installation installed 11.0.0.1157 from 07.07.2015, my OEM driver is 11.0L03 from 27.07.2015 . Still should I stay with that ? Or install OEM driver ?

regards

Fernando · November 12, 2017, 11:37am

@Dromadus :
Please look into the A1 section of the start post. I recommend to install just the “pure” Intel MEI driver manually from within the Device Manager.

Dromadus · November 12, 2017, 12:11pm

so Can I install Intel MEI Driver v11.7.0.1043 without problems ?
it will be correct to Intel 8 series /c220 ?
better is check and Ask Specialist my OEM MEI shows me version numer 11.0.5.1189. any advice please ?

rvail623 · November 12, 2017, 5:53pm

Intel MEI Driver v11.7.0.1045 installed and working okay on two different chipset boards: Z87 & Z170.
However: Windows 7 didn’t like (wouldn’t accept) 11.7.0.1045, although 11.7.0.1040 works fine with Windows 7.

plutomaniac · November 13, 2017, 6:21pm

Intel MEI Driver v11.7.0.1045 (Windows XP & Windows 7) INF for manual installation
Intel SOL “Driver” v11.6.0.1009 INF for manual installation (Updated)
Intel MEI v11.7.0.1050 for Corporate systems Drivers & Software
Intel CSME System Tools v11 r3 (Updated)

The following firmware versions fix the WPA2 vulnerability:

11.8.50.3399
10.0.56.3001
9.5.62.3000
9.1.42.3000
8.1.72.3000

Note: ME 2-7 will not receive a fix for the WPA2 vulnerability because they are no longer supported by Intel.

Pete12 · November 13, 2017, 6:41pm

" Intel MEI Driver v11.7.0.1045 (Windows XP & Windows 7) INF for manual installation "…works fine in Win10 RS3 x64 also…

khanmein · November 14, 2017, 9:33am

@plutomaniac FYI, v11.7.0.1045 from the Microsoft Update Catalog have a lot version like Samsung, Toshiba, HP, Lenovo, Compal, etc. Actually got any differences?

guigo21 · November 14, 2017, 10:19pm

What about the 11.8.50.3425 version? It also fix the WPA2 vulnerability?

aiocr · November 14, 2017, 10:22pm

Excuse me. Can i safely update IME using FWUpdate or do i need to update it to the bios file and then update the bios?

monta990 · November 14, 2017, 11:01pm

new driver http://www.station-drivers.com/index.php…id=3194&lang=fr

Fernando · November 14, 2017, 11:25pm

This package doesn’t contain a new driver. It is still v11.7.0.1045, which is already available within the start post of this thread.

Fernando · November 14, 2017, 11:29pm

@aiocr :
Welcome to the Win-RAID Forum!

The Intel ME Region and the BIOS Region are different things. If you want to update Intel ME Firmware, you have use the related FWUpdate Utility, which is offered within the start post of this thread.

Regards
Dieter (alias Fernando)

plutomaniac · November 15, 2017, 12:15am

Intel MEI v11.7.0.1050 for Consumer systems Drivers & Software

Thanks to SD/Fdrsoft for the new driver and monta990 for letting me know.

ex58 · November 15, 2017, 3:30pm

Where is 9.1.42.3000…?

plutomaniac · November 15, 2017, 6:01pm

When it gets found, it will be available here as always.

Hybrid · November 15, 2017, 6:03pm

Sorry if i am in the wrong place, i want to ask @plutomaniac if i can flash my MEI firmware to the latest : 8.1.70.1590 (1.5mb)
Ive got a gigabyte x79-ud3 mobo.
Thanks.

tuanbacky · November 16, 2017, 5:52am

I clear me finished close to the mailboard then run but win is automatically turned off
pls help me !

plutomaniac · November 16, 2017, 12:29pm

Intel MEI v11.7.0.1052 for Corporate systems Drivers & Software

Intel CSME 11.11 Corporate PCH-H Firmware v11.11.50.1402 (CVE-2017-9765, CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-5705, CVE-2017-5708, CVE-2017-5711, CVE-2017-5712, CVE-2017-5729)

Intel CSME 11.7 Consumer PCH-LP Firmware v11.7.4.3314

Intel CSME System Tools v11 r4

Lex · November 16, 2017, 1:29pm

@timofonic , @Jest , @plutomaniac , @igorsk : Thank you for your replies to my post.

Zitat von timofonic im Beitrag #3366
My paranoid mind reads…

What is MEI: (…) it is an interface that uses the Intel ME hardware features (always-on watchdog in the CPU) to enable an interaction between high- and low-level hardware systems in a system (to always be able to control a system, despite the desires of the user). With this Intel feature, the administrators can now handle the tasks (of spying on users) without intervention of the human beings (without them being aware of it). This has simplified various tasks in a computer system(, such as spying). Intel Management Engine Interface allows you to work in both low as well as high level hardware environments (it’s multi-platform spy tool).

Well, I must say that when I was browsing many other internet websites that was one of most common "suspicion". People like to create conspiracy theories about the things they do not fully understand - and that's the reason why I asked my questions here: to get more knowledge about this "stupid thing" *I* do not understand. :D

[quote="Jest, post:3372, topic:30719"] MEI is OS independant (...). It even works when computer is off. [/quote] This is one of the examples which create such "suspicions" I mentioned above. Most people do like to have full control over their PC so if they are turning system power off they want it to be off - why there is "something" that can work even in this state?

[quote="plutomaniac, post:3371, topic:30719"] The Chipset INF Installer is useless, has no actual drivers and should only be installed if you see yellow exclamation marks for Intel devices at Device Manager. Read more here. Intel MEI is a system device and used for communication between the OS and ME, whenever that is needed. Install the latest driver from Section A1, nothing more is needed. [/quote] Yes, I do know that Chipset INF Installer does not contain "real" drivers and only identifies "yellow warning marks". :)

At this moment, I have used "Chipset Device Software" just to "identify" my DEV_8D3A "IMEI device" on my X99 motherboard. This "driver" was inside "Null_Heci" folder of INF package. My question could be now: What are the main "benefits" of installing a "real driver" from the location you have pointed (Section A1)? What are the main "disadvantages" if it stays as it is now? (Or maybe I should ask - are there any "disadvantages"?) If, as @Jest said, IMEI can work even when computer is off then why any "real drivers" are even needed?

[quote="igorsk, post:3377, topic:30719"] In consumer systems, the ME mostly works independently from the OS and does not require drivers to function. Drivers are needed in the following situations:
1) To get rid of the "Unknown Device" entry in the Device Manager.
2) There is some software which communicates with the ME and to avoid issues it should do so using the driver instead of poking the PCI bus directly. I *think* that, for example, Intel® Extreme Tuning Utility (Intel® XTU) is one of those. Maybe there are others. I expect they will notify you in case they can't communicate with the ME, but it's possible they may also fail silently.
3) Intel's integrated video drivers may communicate with ME to enable playback of some DRM-protected media via PAVP (Protected Audio-Video Path), so if you use integrated video you *may* get playback issues without MEI drivers. [/quote] The (1) and (3) points are not really valid in my current situation: (1) I can get rid of the "Unknown Device" entry just by using "Chipset Device Software", (3) As I am using X99 system, CPU does not have iGPU. As of (2): does anyone know more examples of such software?

plutomaniac · November 16, 2017, 2:21pm

Intel CSME 11.8 Corporate PCH-LP Firmware v11.8.50.3425 (NPDM + YPDM) (INTEL-SA-00086, CVE-2017-9765, CVE-2017-13077, CVE-2017-13078, CVE-2017-13080, CVE-2017-5705, CVE-2017-5708, CVE-2017-5711, CVE-2017-5712, CVE-2017-5729)