Intel (Converged Security) Management Engine: Drivers, Firmware and Tools (2-15)

@plutomaniac

I know you said this in the OP: “FWUpdate tool does not require any prior Engine Configuration (DATA) and can thus work with merged RGN/EXTR + PMC images at CSME 12+ or both RGN & EXTR images at 8 <= (CS)ME <= 11 platforms” so I take it that the RGN firmware for my ASUS Z370 board (ASUS Maximus X Code) that can be downloaded from the OP will work when flashed with FWUpdate. But some people are reporting here that that is not the case. And that you need to copy the DATA portion from a dumped BIOS that has a Configured + Initialized ME of the same firmware version on it. Since the latest BIOS available for our boards (1602) has only ME 11.8.50.3470 included, how will I go about flashing the latest ME 11.8.55.3510 on it?

@ kevindd992002:

What the OP says is correct. That one person even quotes this thread but fails to understand. Obviously that reply cannot be trusted. Follow the instructions at the first post.



Thanks, that’s what I thought. I was flashing ME’s with my old Z68 board and didn’t do any "transfer" or "merging" of setting of some sort so I was wondering what’s different with the newer Z370 boards now. I’m very curious about what @KedarWolf has to say about this though. He experimented with this very recently and I think (not 100% sure) he’s one of those that tried flashing an RGN ME firm on the ASUS Maximus X Hero and failed. As to what kind of failure he experience, I do not know. I hope he can chime in the discussion.



Thanks, that’s what I thought. I was flashing ME’s with my old Z68 board and didn’t do any "transfer" or "merging" of setting of some sort so I was wondering what’s different with the newer Z370 boards now. I’m very curious about what @KedarWolf has to say about this though. He experimented with this very recently and I think (not 100% sure) he’s one of those that tried flashing an RGN ME firm on the ASUS Maximus X Hero and failed. As to what kind of failure he experience, I do not know. I hope he can chime in the discussion.




I flashed an EXTR version of the firmware before I knew it was ‘dirty’ and not the right firmware for my board, so I flashed back to the firmware that was in a BIOS from my board with help from the kind peeps here.

The RGN firmware wouldn’t even flash and from what I understand the RGN doesn’t have the board specific settings you need in it but I could be wrong.

Intel CSME 12.0 Consumer PCH-LP Firmware v12.0.6.1120

Capture1.PNG



Intel PMC CNP PCH-LP C Firmware v300.1.20.1016

Capture2.PNG

Intel MEI v1829.12.0.1154 for Corporate systems Drivers & Software

What error were you encountering when trying to flash the RGN firmware? @plutomaniac stands by his OP that it should work. I will try it when I have time during the weekend and hopefully not break anything.

I got an error it’s not a correct firmware and wouldn’t flash, why I had to flash a EXTR firmware, only that type would work.

You are not the only one, happens to me as well, the RGN even has a different file size than EXTR, and the clean one, RGN I guess, does not flash.

Yes I stand by the OP 100%. To understand what you’re doing wrong, please post details of your system as well as exactly what you’re trying to flash.



Weird, the latest Intel CSME 11.8 Consumer PCH-H Firmware v11.8.55.3510 flashed just fine now. Went back to 11.8.50.3399 though as I get 200 more points in 3DMark TimeSpy with it over the latest.



Weird, the latest Intel CSME 11.8 Consumer PCH-H Firmware v11.8.55.3510 flashed just fine now. Went back to 11.8.50.3399 though as I get 200 more points in 3DMark TimeSpy with it over the latest.




Ok, thanks for the feedback. You better relay this information on the OCN thread as well so that people wanting to go to the latest firmware know that it’s possible to flash the latest RGN for our Z370 boards :slight_smile:


This is placebo or testing margin of error. That first version does not even fix the SA-00086 vulnerability completely, 3425 at minimum which also includes WPA2 KRACK. The latter firmware have also fixed other issues. There is no point in downgrading the CSME firmware, there are only disadvantages.

I have firmware version 9.0.30.1482 5MB and Flash Image Tool 9.0.22.1467, for which version would you recommend upgrading? I want to upgrade using a hardware programmer


Since you have a programmer, I suggest you follow the Engine CleanUp Guide and at step 4 use the latest 9.1 5MB firmware. For the entire process, make sure to use the latest Flash Image Tool v9.1 from this thread.


This is placebo or testing margin of error. That first version does not even fix the SA-00086 vulnerability completely, 3425 at minimum which also includes WPA2 KRACK. The latter firmware have also fixed other issues. There is no point in downgrading the CSME firmware, there are only disadvantages.




This is exactly my predicament. There was no actual measuring of voltages (from the board itself) that warrant that the lower ME firmware version gave a lower CPU voltage for the same stable overclock.


Since you have a programmer, I suggest you follow the Engine CleanUp Guide and at step 4 use the latest 9.1 5MB firmware. For the entire process, make sure to use the latest Flash Image Tool v9.1 from this thread.




It’s already update and running. Thank you very much.

I’m confused. Do you need to do the Engine Tuneup Guide stuff on the Intel CSME 11.8 Consumer PCH-H Firmware v11.8.55.3510 or can you just flash it as is?

Update: I have successfully flashed my Z370 board’s ME firmware using the FWUpdate tool and the Intel CSME 11.8 Consumer PCH-H Firmware v11.8.55.3510. The process was a piece of cake, really.

@plutomaniac

Even after reading the OP multiple times, I’m kinda confused with the PMC firmware. Is this only applicable for CSME 12 systems? Are the 300-series chipsets different from the Z370? I always assumed that the Z370 is a 300-series chipset.

No matter where you look at the OP (PMC Introduction, PMC related Notes/Warnings, FWUpdate explanation etc), it is made clear that it is only relevant to 300-series CFL/CNL systems running CSME 12.

Z370 is not 300-series, despite the bullshit marketing name given by Intel in a desperate attempt to release a higher core count platform in Q3 2017 instead of Q2 2018. The so called “Z370” is basically Z270+ as still uses the 200-series Kaby Point (KBP) PCH. The same applies to a new PCH which is called H310C or H310 v2 (more like H110+), not to be confused with the actual H310 PCH which is truly 300-series Cannon Point (CNP) based and thus runs CSME 12 firmware.