Intel (Converged Security) Management Engine: Drivers, Firmware and Tools (2-15)

@plutomaniac

I forgot to mention previously that the machine is not with me since the update, it was a present for someone else.
I do have on-demand remote access to it pretty much any time.
I will get you the HWInfo details probably a bit later today.

I will share the ideas here then as per your preference.
I wanted to do it in PM, because I actually wanted to prepare the whole content for you so you can just do a side-by-side comparison to make your decision easier.
Especially that I know now how limited your time is for such things.
Also, these are rather very specific things - some might say nitpicking, and I have no intentions in opening a lengthy debate.
The key changes are already there, feel free to reject all suggestions from this post.
I will try to keep this as short as possible, but long enough to make a point for each case.

So, a few suggestions for additional content to the post, but not related to the steps already in place:

1. It would be nice to have a changelog to see what has been modified since last time.
Anyone pretty much besides you will not be able to point out exactly what has changed since the last time.
A short (but specific) indication of the changes would be most welcome by many, I have no doubt about it.
People would not need to reread everything to figure out what was going on, especially that it would still be difficult to point out what has change since the last time.
It is also a good summary of your efforts (donations!).

Just an fictional example how it could be from content point of view:

2021.02.02: Replaced CSME 12.0 Consumer LP C v12.0.71.1681 with CSME 12.0 Consumer LP C v12.0.72.1689
2021.02.01: Updated instructions for "How to use FWUpdate Tool at CSME v14.1 H"
2021.01.30: Updated Intel CSME System Tools v15.0 r3 to v15.0 r4
2021.01.28: Minor changes to the instructions from B1 section

This could be in “spolier” tags or just linking to an external .txt file.
If it would be a link, keep it in the “Last Updated: xxx-xx-xx” line as clickable (link in a new tab to not go away from the site), maybe adding the word “changelog” to be the link itself.

2. Right below “Last Updated: xxx-xx-xx” (basically after the changelog reference) you should put in a few sentences how any newcomer should be using this guide
What they must do in order to successfully update the firmware.
Pretty what you wrote in your last response:

The goal of section B1 is for the end user to read all the red parts, one after the other, in that order.
If something does not apply, it can be skipped.


Maybe adding a little extra to it (explanation and other common question related stuff):
This is a prerequisite for performing a successful update.
The name of the files does not matter when building the firmware or performing the updates.


Do not worry about how basic things may sound, anyone who has no experience might be eventually resorting to asking these basic questions.
All these (“changelog”, “introduction”) should be on the top in my opinion, before the user begins to read the instructions, so they know exactly what they should expect from your article.

Visual (readability) related adjustments (I will include small examples):

1. I think it would add a lot to the experience if the content would be split on each small heading as well as at each sentence.
I personally have a lot of trouble reading (not writing) a wall of text, and maybe other would appreciate it, too.
It would also be much more easier to pick up where you left off (mostly when rereading while also performing the steps).

I wanted to prepare this myself based on the current content to see if it actually makes sense in this case as well.
Basically this is how I write e-mails and comments in scripts and never ever have anyone complained about it
The text also would not get too crowded even on smaller screens or screen resolutions.

If you do not like that some lines would go into multiple lines (as it may not be as appealing), you could manipulate the content a bit:

The mandatory regions are the Flash Descriptor, the (Converged Security) Management Engine and the BIOS.
Flash Descriptor (FD) controls read/write access between the regions among other things, (Converged Security) Management Engine (CSME/ME or Engine), holds the system’s Engine firmware.

2. The choice of colors (normal text, bold, blue and red) is perfect as it is.
If there is one thing I would like to have changed, it is the placeholder part - which I think should also be red.
Again, not something important to begin with, but they would still be standing out and you would have 1 less color based on the principle of “less is more”.

3. Text formatting suggestions
You are using bold text a bit sparingly in my opinion.
A lot more key words could be highlighted (bolded) to draw our attention to the critical steps or information, which is certainly an issue in my case.
Quotes would be redundancy in this case, they could be removed.
Try to be consistent as much as possible (e.g., “&” vs “and” - to me the latter just looks more professional, which should reflect your expertise, and this is some serious business after all)
Suggestions, comments/hints/remarks and alternatives could be italic.
This is how it would look like with the first point combined (ignore the bullet point changes, I do not know how to make them to be the same):

Here is what the combined efforts from points 1 and 3 would look like for one part of the current content:

How to use FWUpdate Tool at CSME v13.0, v13.50, v14.0, v14.5, v15.0 LP and v15.40:
At CSME v13.0, v13.50, v14.0, v14.5, v15.0 LP and v15.40, FWUpdate tool requires CSME firmware which have been combined/stitched with the equivalent PMC and PCHC IUP firmware via Flash Image Tool (FIT).
To generate the correct FWUpdate compatible CSME + PMC + PCHC firmware combination for your system via FIT, you must first know your system’s Chipset Series (ICP, JSP, CMP, TGP, EHL), Chipset Platform (H, LP, N, V), Chipset Type (Consumer, Corporate, Slim, Server, Atom) and Chipset Stepping/Revision (A, B, C, D etc).

  • Download the latest Intel CSME System Tools (Section C) as well as the ME Analyzer tool.
  • Acquire the Chipset Platform and Chipset Stepping information.
    From Intel CSME System Tools, run MEInfo command line tool:
    Under Intel(R) ME code versions > FW Version you will find your system’s Chipset Platform as well as Type (i.e. H Consumer etc).
    Under PCH Information > PCH Step Data you will find your system’s Chipset Stepping which starts with a letter (Ax, Bx, Cx etc).
    Alternative method for the above:
    Drag and drop your system’s SPI/BIOS image at ME Analyzer tool and find SKU field which shows your system’s Chipset Type and Platform (i.e. Consumer H).
    Find Chipset Stepping field which lists one or more supported Chipset Steppings in the form of letters (A, B, C etc).
  • Based on your system’s Chipset Series, Platform, Type and Stepping, choose the correct CSME, PMC and PCHC firmware (Section B).
  • Input the chosen CSME firmware into the ME Analyzer tool and make sure that FWUpdate Support is not reported as Impossible.
  • From Intel CSME System Tools, go to Flash Image Tool folder and make sure that only fit.exe and vsccommn.bin are present, otherwise delete everything else.
  • Run Flash Image Tool (FIT) and adjust the Chipset Platform drop-down menu at the top to match your system’s Chipset Platform (either H series (without RocketLake), LP series, N series or V series).
    For the purposes of FWUpdate, there is no need to further adjust the actual Chipset SKU on the right.
  • Load or drag and drop the chosen CSME firmware image anywhere at FIT.
  • Go to FW Update Image Build tab on the left and input PMC Image > PMC Binary File and PCHC Image > PCH Configuration File fields with the chosen PMC and PCHC firmware images accordingly.
  • Click the green Build Image For FWUpdate (not the Build Image) button at the top and a FWUpdate.bin file will be generated.
  • Input FWUpdate.bin file into ME Analyzer tool and make sure that FWUpdate Support is reported as Yes.
  • Use FWUpdate tool to flash the FWUpdate.bin image.


Changes to the text:
The Alternatively line should not belong to a different bullet point either way.
I did rephrase some of the sentences while strictly trying to maintain the original content.
Added a reference to not to click on the Build Image button (beginner’s trap).
You could also mention what should be done if FWUpdate Support is reported as Impossible and what could be the reason for it, how to prevent this from happening (what steps could have been wrong).

I hope I did not overdo this part.
Please note that I had to redo all the initial formatting you had in place not having access to the raw content, so I hope I have not missed out anything for this block.
If there is just one small part of this whole post that makes it based on everyone’s preference, it was worth the time putting it together.

@plutomaniac

I have attached the HWInfo report as per your request.
Let me know if it is fine this way or if you need anything else.

HWInfo_CSME_15_LP.html.txt (5.37 KB)

CSME 11.22 Corporate H B,A v11.22.82.1838

Capture1.PNG



CSME 11.12 Consumer H A v11.12.82.1838

Capture2.PNG



CSME 11.12 Corporate H A v11.12.82.1838

Capture3.PNG



@tempdrive

Thank you for the rest of the suggestions and the HWiNFO log. I know it must have taken a lot of time. I spent a few hours fixing/adjusting/improving/“bolding” most of the aforementioned things and I’m fairly happy with the result now.

The HWiNFO log shows that we can use it reliably to get the basic major.minor version info and the tool is free, updated and easy to use. I have thus added a “Getting Started” red section at the top which should cover “pain point #1” and also indicate how to follow the A,B,C sections.

The sentences at “SPI/BIOS Regions (FD/ME/BIOS)” have been split and adjusted a bit to be simpler to follow.

“How to update Engine firmware” has been adjusted to include an underlined sentence in regards to the usefulness (or lack thereof) of the file name.

All 4 () “How to use FWUpdate Tool” for CSME 12+ sections have been improved by adding bold and merging a few things while trying to keep them short. I don’t want too many “sub-sections” there. Also, a few sentences are now underlined to avoid mistakes (i.e. green build icon on the right).

Section C1 > FWUpdate has been adjusted and simplified as much as possible to avoid info duplication and point people towards the proper instructions at Section B.

Section C has a new notice in regards to the usage of System Tools at paths with non-English characters (very hard to diagnose this, the errors shown are very strange/unpredictable/“irrelevant”).

All paragraphs/sections are now split/spaced into a header followed by info. Much easier to read, avoids the look of “wall of text”.

Now, due to post character count limits (65K w/ HTML) and lack of time to update even more things, I have decided not to add a changelog. I used to have changelogs in the past which were very detailed and over the top (example) but I can’t do these anymore. It’s better and healthier to spend the time elsewhere.

I replaced all “&” with “and” and fixed bold stuff from place to place. I avoid using italics anymore because some people have difficulty reading misaligned text. Also, the “placeholder” color is left purple because red is meant to attract the attention and that’s not the goal with those. The goal is to not wonder where these are.

@plutomaniac

I think it gets better and better with each of your modification.

Hopefully others will like it as well.


Hello
sorry for the delay. It did not work
it gives these errors :



do you know how to solve this problem? thank you in advance

EDIT : I succeeded! This was not working :
FWUpdLcl64 -f 9.1.40.1000_1.5MB_PRD_EXTR.bin
by adding just before : . <br />like this :
.\FWUpdLcl64 -f 9.1.40.1000_1.5MB_PRD_EXTR.bin
it worked, screenshot attached ,but there is a problem, in fact the firmware did not install :



then i closed powershell. and then i rebooted my computer. And i may have made a mistake ,maybe i shouldn’t close powershell

because the update did not work
because i opened my software : HWiNFO64
and i still have the old firmware : Intel ME Version : 9.1, Build 1000, Hot Fix 40
screenshot attached :



Do i have to redo the update with powershell without closing it at the end and reboot immediately?

Ok seriously this is getting ridiculous, 3 pages to update a simple firmware and now you flashed “9.1.40.1000” but it is not the same as “9.1, Build 1000, Hot Fix 40”??? You’re ready, no need to do something more. Leave it as it is please.

lol
9.1.40.1000 = 9.1, Build 1000, Hot Fix 40
congratulations,it is done :slight_smile:
@vegzos

I have Asus B85M-G, with latest BIOS 3602 and Win 10 Pro x64
I cannot install Intel Management Engine downloaded from Asus website. I’ve already installed Intel Chipset Driver, but when trying to install IMEI, got Fatal Error Message.

Thanks in advance for any help

LOG.rar (17.8 KB)

Image 001.png

try installing MEI Drivers and Software Consumer v11.7.0.1069 (ME 9) from first page then,
try intalling MEI Drivers and Software v2101.15.0.2080 DCH (Windows 10 >= 1709)
@ctantra

@onuracengiz
Thanks alot, I’ll try it tomorrow.



thank you very much for your help
what misled me was the "hotfix",i had misread.i apologize

was my pleasure :slight_smile:

@ ALL

Important updates to the first post. Here is what has changed and should be re-read carefully in top-down order:

Getting Started
Engine Firmware Attributes (Family/Platform/SKU/Version)
Independent Update Partitions (IUP)
Power Management Controller (PMC) IUP
Platform Controller Hub Configuration (PCHC) IUP
USB Type C Physical (PHY) IUP
How to update Engine firmware
How to use FWUpdate Tool at CSME v13+
How to use FWUpdate Tool at CSME v12
Intel (CS)ME System Tools > Notice #2

Hi everyone,
I have a question regarding updating the Intel Management Engine on my Asus Z390-A Prime board.
I was able to successfully set up my system with Windows 7 x64, using canonkong’s modified Intel chipset and USB3 drivers.
I was looking at the Asus BIOS & Firmware page, where an updated firmware for Intel ME (12.0.70.1652v3) is posted. However, the provided MEUPdateTool only works on Windows 10, including version 12 of FwUpdLcl.exe. I tried downloading the missing .dll files online and was able to run the command line tool (x86 version), but updating did not work. I am not able to use version 11 of the tool either.
Thus, is there any way to update Intel ME and is it worth the hassle? Or will it also be updated by way of future BIOS updates?
I did read through the first post, but I am not as technically savvy to understand the manual procedure.
Thanks!



@onuracengiz
The first one installed but the second one failed. There is error "The platform is not supported" (I upload the logs)

I also tried to update driver from device manager, let choose from list, there is 2 options, but both also failed after windows trying to install awhile.

What else can I do? Thanks before…

Image 001.png

Image 002.png

Logs.rar (26.3 KB)


You don’t need the "manual" procedure. FWUpdate tool will work just fine for you needs. Instructions are provided in the first post.


The current MEI driver reports "device failure" which usually means firmware corruption. Check firmware health via MEInfo -verbose and MEManuf -verbose first.

@plutomaniac
@onuracengiz

I check firmware health via MEInfo (Intel ME System Tools v9.1 r7) → Errors

I read the first page again and again but still don’t know what to do, it’s too complicated for me… :slight_smile:

Image 003.png

error.rar (151 Bytes)


You don’t need the "manual" procedure. FWUpdate tool will work just fine for you needs. Instructions are provided in the first post.



The problem is I cannot run the downloaded version of FWUpdLcl, because it only runs on Windows 10. And I cannot run the earlier version (which I downloaded from the Z370-A page), because it’s not compatible with v12 firmware.


Yes, the ME firmware is corrupted. It might be easy to fix it in your specific case so try the following: Download/Decompress the attachment and run Flash Programming Tool with command "fptw64.exe -me -f ME_B85M-G_3602.bin" followed by "fptw64.exe -greset". If you don’t see any error, the system will reboot automatically. Afterwards, try MEInfo -verbose again.


There is no such restriction if you download the actual FWUpdate tool from the System Tools archive linked in the first post. Either way, you can use the EFI or DOS version of FWUpdate outside of Windows. I can only attest for what is provided here. If you want to use ASUS procedures for whatever reason (not needed) you need to contact them for issues/limitations they decide to impose.

ME_B85M-G_3602.rar (1010 KB)

Well, I downloaded CSME System Tools v12 r30 linked in post #2. FWUpdate will not run on my system (screenshot attached).
So the way to do it would be via a bootable disk with FWUpdate EFI or DOS version, and use the file ME.bin extracted from the Asus package?
I didn’t find information about whether BIOS updates also include ME firmware updates - I guess I would have to ask Asus about that.

Clipboard01.gif