Intel CSME 12.0 Consumer PCH-LP Firmware v12.0.8.1123
Intel PMC CNP PCH-LP C Firmware v300.1.20.1018
Hey guy’s, can i know why the FD of my BIOS File is shown as Unlocked in MEInfo, i have GA-Z97M-DS3H Rev 1.1 F5 Bios is Updated?
Thanks
That is normal for Gigabyte BIOS @ammoune78 and usually you get lucky and the FD is actually all unlocked on the board too (with Gigabyte)
If you can dump FD and ME via following then it’s probably all unlocked >> FPTw -me -d me.bin
Confirm by dumping FD using >> FPTw -desc -d fd.bin
Thanks for your reply @Lost_N_BIOS , with the two commands you wrote, the two files are successfully dumped. It means that, yes, all unlocked?
You’re welcome! It’s not 100% definitive, upload the FD file and I will tell you for sure.
Flash Descriptor (FD, controls read/write access between the regions among other things), the (Converged Security) Management Engine (CSME/ME or Engine, holds the system’s Engine firmware) and the BIOS. For security reasons, the Flash Descriptor and Engine regions of the SPI/BIOS chip are usually locked so that no read/write access is allowed via software means. Since the FD controls that read/write access, it must be locked/protected so that it is not manually overwritten to allow unauthorized access to the firmware regions of the system’s SPI/BIOS chip. The Engine region at the system’s SPI/BIOS chip is also locked/protected due to the nature of the (Converged Security) Management Engine co-processor, as explained at the Introductions above.
Is this secure to have them all unlocked, according to the first post of this topic?
Thanks
That is up to you? I prefer it all unlocked, for everyone always, but that’s because I modify BIOS all the time for people and when regions are locked it causes issues/hassles for users when flashing.
You can lock yours if you want, if the FD is unlocked to write to, I will show you how or send you a locked FD file to flash if that is what you want to do.
Yes, that is fully unlocked FD (Read/Write any region)
Thanks, i’m asking for that, to know if it does compromise the system security, with the last known Intel CPU Vulnerability or another vulnerability?
You’ll have to wait on someone else to comment about that, I am unsure, maybe @CodeRush or Plutomaniac can comment on vulnerabilities of an unlocked FD security-wise
Can you please tell me how to lock it? So i’ll just stay with minds free. Can i copy the entire ME file firmware and paste it to the BIOS File without modifying something on that new MEFirmware like the one posted in the first post of that topic?
Thanks
ME FW has nothing to do with locked FD in the way you are thinking - [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing
Here is locked FD (write to FD locked, read/write ME Locked) - http://s000.tinyupload.com/index.php?fil…128977777837200
Write to BIOS using >> FPTw.exe -desc -f fdlock.bin
Once you do this it cannot be undone without hardware flash programmer, or pinmod short on the board to rewrite the FD again, so be certain that is what you want.
Zitat von Fernando im Beitrag #100
If you want just to update the Intel ME Firmware, I recommend to use the "Intel ME 8 Consumer FWUpdate v8.1.51.1471", which you can find wthin the start post of >this< thread.
Can you recommend the Asus P8Z77 WS BIOS to add the possibility of using the PCI-E NVME SSD as a boot drive?
Sorry but could someone please help me with my above question?
They already have, but you did not bother to read. It’s all detailed in the first post.
Intel CSME 12.0 Consumer PCH-LP Firmware v12.0.10.1128
Intel PMC CNP PCH-LP C Firmware v300.1.20.1019
Hi,
Can someone point me to a guide that details how to prepare the ME ver 12 firmware for flashing? Seems all of a sudden it has become complicated.
Thank you
Intel CSME 11.22 Corporate PCH-H Firmware v11.22.0.1543
Intel CSME 11.8 Consumer PCH-H Firmware v11.8.60.3560
hi, can anyone enlighten me about MEI firmware & how to use or install or update them & how they’re different from MEI normal software/driver exe or MSI installer