Intel (Converged Security) Management Engine: Drivers, Firmware and Tools (2-15)

Special Topics Intel Management Engine
5724

That means that you could not use the ME region of the full msi bios file for an ME update, somthing you never wanted.

And yes, Consumer H, but you’d have to combine/ stich the CSM ME firmware with the PMC firmware before you can use the update command…

5725

Yeah i will do it like you guys said
Now ik what to download/command to use ; about the pmc firmware ( PMC CNP H B v300.2.11.1025 For systems running PMC CNP H B v300.2.1x ; this one should do it right ? )


EDIT : The Con One
CSME 12.0 CON H BA v12.0.81.1753.

5726
Yes, Consumer H
5727

So i just need to combine those two CSME 12.0 CON H BA v12.0.81.1753 & PMC CNP H B v300.2.11.1025
And then use the app to update it right ?


5728

Well, it’s just some steps again, but they got to be done precisely as written in the guide. I prefer to copy the lines from the guide into a simple notepad textfile (or whatever), separate them by extra lines and deleting lines when finished. Be careful- there’s once or twice two tasks per line…

5729

Intel Management Engine (ME) Firmware Version 12.0.85.1869 (S&H) (5MB)

5730

Hello

someone would have the ME firmware 11.12.90.1962 for X299 ?

R6E3601MODDEDBIOS3.jpg



Thanks

5731

@tistou77

https://www.station-drivers.com/index.ph…1.5–and–5Mo)/

5732
5733



Hi MeatWar and lfb6. I have gotten myself a CH341A (XTW-3 to be exact, but I think they are similar). Can I just download the CAP file from Asus website and write it into the BIOS chip? Thanks in advance and happy holidays!

5734

Extract the bios image from the CAP file with uefitool, u cant flash CAP directly.
The resulted saved bin file, is the file to flash, doesnt matter the name for the programmer, ull noticed that is 2k shorter than CAP file.

*Forgot to tell u, that u need to transfer ur motherboard original data from backup or add it manual, with the tool for Asus FD44 editor, to the bin or cap to program.
Better redo the SPI programming with the new data

EDIT: Then re-initialize the ME8 engine FPT -greset, check it.
Next step here: [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization

5735


Thanks, MeatWar. I reflashed the chip using the programmer. However, I still see the same issue (N/A ME version displayed. funny values in date/time and RAM clock freq, and date/time cannot be updated). So it seems the issue is not related to BIOS?

5736

16.jpg




BTW: Conspiration theory or easteregg ot just ? (ME 14.1.53.1649 corp H update, but seems to be WLAN? driver)

wsfno.jpg





@plutomaniac Why is MEA reporting “FWUpdate support No”? The update file was created according to the guide and works just fine, see MEInfo/MEMAnuf. Guide requires a ‘Yes’, too?

╔═══════════════════════════════════════════╗
║ ME Analyzer v1.254.0 r265 ║
╚═══════════════════════════════════════════╝

╔════════════════════════════════════════════╗
║ FWUpdate_60.bin (1/1) ║
╟─────────────────────────────┬──────────────╢
║ Family │ CSE ME ║
╟─────────────────────────────┼──────────────╢
║ Version │ 14.1.60.1807 ║
╟─────────────────────────────┼──────────────╢
║ Release │ Production ║
╟─────────────────────────────┼──────────────╢
║ Type │ Extracted ║
╟─────────────────────────────┼──────────────╢
║ SKU │ Corporate H ║
╟─────────────────────────────┼──────────────╢
║ Chipset │ CNP/CMP-H A ║
╟─────────────────────────────┼──────────────╢
║ TCB Security Version Number │ 1 ║
╟─────────────────────────────┼──────────────╢
║ ARB Security Version Number │ 10 ║
╟─────────────────────────────┼──────────────╢
║ Version Control Number │ 26 ║
╟─────────────────────────────┼──────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼──────────────╢
║ OEM Configuration │ No ║
╟─────────────────────────────┼──────────────╢
║ FWUpdate Support │ No ║
╟─────────────────────────────┼──────────────╢
║ Date │ 2021-09-05 ║
╟─────────────────────────────┼──────────────╢
║ File System State │ Configured ║
╟─────────────────────────────┼──────────────╢
║ Size │ 0xA4C000 ║
╟─────────────────────────────┼──────────────╢
║ Flash Image Tool │ 14.0.60.1790 ║
╟─────────────────────────────┼──────────────╢
║ Latest │ Yes ║
╚═════════════════════════════╧══════════════╝
╔═════════════════════════════════════════════╗
║ Power Management Controller ║
╟─────────────────────────────┬───────────────╢
║ Family │ PMC ║
╟─────────────────────────────┼───────────────╢
║ Version │ 140.2.01.1018 ║
╟─────────────────────────────┼───────────────╢
║ Release │ Production ║
╟─────────────────────────────┼───────────────╢
║ Type │ Independent ║
╟─────────────────────────────┼───────────────╢
║ Chipset SKU │ H ║
╟─────────────────────────────┼───────────────╢
║ Chipset Stepping │ A ║
╟─────────────────────────────┼───────────────╢
║ TCB Security Version Number │ 3 ║
╟─────────────────────────────┼───────────────╢
║ ARB Security Version Number │ 3 ║
╟─────────────────────────────┼───────────────╢
║ Version Control Number │ 0 ║
╟─────────────────────────────┼───────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼───────────────╢
║ Date │ 2021-02-22 ║
╟─────────────────────────────┼───────────────╢
║ Size │ 0xE000 ║
╟─────────────────────────────┼───────────────╢
║ Chipset Support │ CMP ║
╟─────────────────────────────┼───────────────╢
║ Latest │ Yes ║
╚═════════════════════════════╧═══════════════╝
╔════════════════════════════════════════════════════════╗
║ Platform Controller Hub Configuration ║
╟─────────────────────────────┬──────────────────────────╢
║ Family │ PCHC ║
╟─────────────────────────────┼──────────────────────────╢
║ Version │ 14.0.0.7002 ║
╟─────────────────────────────┼──────────────────────────╢
║ Release │ Production, Engineering ║
╟─────────────────────────────┼──────────────────────────╢
║ Type │ Independent ║
╟─────────────────────────────┼──────────────────────────╢
║ TCB Security Version Number │ 0 ║
╟─────────────────────────────┼──────────────────────────╢
║ ARB Security Version Number │ 0 ║
╟─────────────────────────────┼──────────────────────────╢
║ Version Control Number │ 0 ║
╟─────────────────────────────┼──────────────────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼──────────────────────────╢
║ Date │ 2020-06-12 ║
╟─────────────────────────────┼──────────────────────────╢
║ Size │ 0x1000 ║
╟─────────────────────────────┼──────────────────────────╢
║ Chipset Support │ CMP ║
╟─────────────────────────────┼──────────────────────────╢
║ Latest │ Yes ║
╚═════════════════════════════╧══════════════════════════╝
Intel (R) MEInfo Version: 14.1.60.1790
Copyright (C) 2005 - 2021, Intel Corporation. All rights reserved.


Windows OS Version : 10.0

LPC Device Id: 687.
Platform: Cometlake Platform
General FW Information
FW Status Register1: 0x90000245
FW Status Register2: 0x62000506
FW Status Register3: 0x00000030
FW Status Register4: 0x00004000
FW Status Register5: 0x00000000
FW Status Register6: 0xC0400000

CurrentState: Normal
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with UMA
InitComplete: Complete
BUPLoadState: Success
ErrorCode: No Error
ModeOfOperation: Normal
SPI Flash Log: Not Present
Phase: HOSTCOMM Module
PhaseStatus: UNKNOWN
ME File System Corrupted: No
FPF and ME Config Status: Committed
RPMC status: OK
FW Capabilities value is 0x7DF6D147
Feature enablement is 0x5DF6D147
Platform type is 0x42001492
No Intel Wireless device was found

Platform Type Desktop
FW Type Production
Last ME Reset Reason Global system reset
BIOS boot State Post Boot
Boot critical code redundancy Disabled
Current Boot Partition 1
Firmware Update OEM ID 00000000-0000-0000-0000-000000000000
TCSS FW partial update Disabled
Crypto HW Support Enabled
Integrated Sensor Hub Initial Power State Disabled
OEM Tag 0x00
FWUpdLcl Enabled
Capability Licensing Service State Enabled
TLS State Enabled
CSME Measured Boot to TPM Disabled

Intel(R) ME code versions:
BIOS Version 1621
MEBx Version 14.0.0.0001
GbE Version 0.4
Vendor ID 8086
MEI Driver Version 2131.1.4.0
FW Version 14.1.60.1807 H Corporate
LMS Version 2130.1.16.1
Wireless Hardware Version Not Available
Wireless Driver Version Not Available

IUPs Information
PMC FW Version 140.2.1.1018
OEM FW Version 0.0.0.0000
LOCL FW Version 14.1.60.1807
WCOD FW Version 14.1.60.1807
PCHC FW Version 14.0.0.7002

PCH Information
PCH Version 0
PCH Device ID 687
PCH Step Data A0
PCH SKU Type Production PRQ Revenue
PCH Replacement State Disabled
PCH Replacement Counter 0
PCH Unlocked State Disabled

Flash Information
Storage Device Type SPI
SPI Flash ID 1 C84018
SPI Flash ID 2 C84017
RPMC Replay Protection Unsupported
RPMC Replay Protection Bind Counter 0
RPMC Replay Protection Bind Status Pre-bind
RPMC Replay Protection Rebind Unsupported
RPMC Replay Protection Max Rebind 1
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled

FW Capabilities 0x7DF6D147
Intel(R) Active Management Technology - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/DISABLED
Service Advertisement & Discovery - PRESENT/ENABLED
Persistent RTC and Memory - PRESENT/ENABLED

End Of Manufacturing
Post Manufacturing NVAR Config Yes
HW Binding Enabled
End of Manufacturing Enable Yes

Intel(R) Active Management Technology
Intel(R) AMT State Enabled
MAC Address fc-34-97-11-a3-aa
IPv4 Address 0.0.0.0
IPv6 Enablement Disabled
Configuration State Not Started
Provisioning Mode PKI
M3 Autotest Disabled
Link Status Link Up
Localized Language English
C-link Status Enabled
System UUID e93812ab-2e57-e0fb-5a30-fc349711a3aa
Wireless Micro-code Mismatch No
Discrete vPro NIC on-board State Disabled
On Board Discrete vPro NIC SMBus address 0x00
vPRO TBT Dock State Disabled
On dock vPro NIC SMBus address 0x00
vPro TBT I2C Re-timer 1 address 0x20
vPro TBT I2C Re-timer 2 address 0x21
vPro TBT I2C Re-timer 3 address 0x22
vPro TBT I2C Re-timer 4 address 0x23
AMT Global State Enabled
Redirection Privacy / Security Level Default

Trusted Device Setup
Signing Policy Seal Signing Required
Reseal Timeout 0x06
Seal State Disabled
Trusted Device Setup Supported Disabled

Intel(R) Protected Audio Video Path
Keybox Not Provisioned
EPID Group ID 0x3579
Re-key needed False
PAVP State Yes

Security Version Numbers
Trusted Computing Base SVN 1
Minimum Allowed Anti Rollback SVN 0
Image Anti Rollback SVN 10

Intel(R) Platform Trust Technology -
Intel(R) PTT initial power-up state Disabled
Intel(R) PTT State Disabled

FW Supported FPFs
FPF UEP ME FW
*In Use
— — -----
EK Revoke State Not Revoked Not Revoked Not Revoked # Not Revoked=0, Revoked=1
Error Enforcement Policy 0 Disabled Disabled Disabled # Disabled=0, Enabled=1
Error Enforcement Policy 1 Disabled Disabled Disabled # Disabled=0, Enabled=1
Flash Descriptor Verification Disabled Disabled Disabled # Disabled=0, Enabled=1
Intel(R) PTT Enabled Enabled Enabled # Disabled=0, Enabled=1
OEM ID 0x00 0x00 0x00
OEM KM Present Enabled Enabled Enabled # Disabled=0, Enabled=1
OEM Platform ID 0x00 0x00 0x00
OEM Secure Boot Policy 0x440 0x440 0x440
CPU Debugging Enabled Enabled Enabled # Enabled=0, Disabled=1
BSP Initialization Enabled Enabled Enabled # Enabled=0, Disabled=1
Protect BIOS Environment Disabled Disabled Disabled # Disabled=0, Enabled=1
Measured Boot Disabled Disabled Disabled # Disabled=0, Enabled=1
Verified Boot Disabled Disabled Disabled # Disabled=0, Enabled=1
Key Manifest ID 0x01 0x01 0x01
Force Boot Guard ACM Disabled Disabled Disabled # Disabled=0, Enabled=1
PTT Lockout Override Counter 0x00 0x00 0x00
Persistent PRTC Backup Power Enabled Enabled Enabled # Enabled=0, Disabled=1
RPMC Rebinding Disabled Disabled Disabled # Disabled=0, Enabled=1
RPMC Support Disabled Disabled Disabled # Disabled=0, Enabled=1
SOC Config Lock State Enabled Disabled Enabled # Disabled=0, Enabled=1
SPI Boot Source Enabled Enabled Enabled # Enabled=0, Disabled=1
Txt Supported Enabled Enabled Enabled # Disabled=0, Enabled=1

ACM SVN 0x00 0x00 0x00
BSMM SVN 0x00 0x00 0x00
KM SVN 0x00 0x00 0x00


OEM Public Key Hash FPF 90A527D5AADD2DDF4FBD8622DCF8C97B2F774B3F3E79C3E0867E287013412C14
OEM Public Key Hash UEP 90A527D5AADD2DDF4FBD8622DCF8C97B2F774B3F3E79C3E0867E287013412C14
OEM Public Key Hash ME FW 90A527D5AADD2DDF4FBD8622DCF8C97B2F774B3F3E79C3E0867E287013412C14
Intel (R) MEManuf Version: 14.1.60.1790
Copyright (C) 2005 - 2021, Intel Corporation. All rights reserved.


Windows OS Version : 10.0

LPC Device Id: 687.
Platform: Cometlake Platform
General FW Information
FW Status Register1: 0x94000245
FW Status Register2: 0x62000506
FW Status Register3: 0x00000030
FW Status Register4: 0x00004000
FW Status Register5: 0x00000000
FW Status Register6: 0xC0400000

CurrentState: Normal
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with UMA
InitComplete: Complete
BUPLoadState: Success
ErrorCode: No Error
ModeOfOperation: Normal
SPI Flash Log: Not Present
Phase: HOSTCOMM Module
PhaseStatus: UNKNOWN
ME File System Corrupted: No
FPF and ME Config Status: Committed
RPMC status: OK
FW Capabilities value is 0x7DF6D147
Feature enablement is 0x5DF6D147
Platform type is 0x42001492
No Intel Wireless device was found
Feature enablement is 0x5DF6D147
ME initialization state valid
ME operation mode valid
Current operation state valid
ME error state valid
MFS is not corrupted
PCH SKU Emulation is correct

Request Intel(R) ME BIST status command… done

Get Intel(R) ME test data command… done

Get Intel(R) ME test data command… done

Get Intel(R) ME test data command… done
Total of 19 Intel(R) ME test result retrieved



Policy Kernel - Power Package : Live Heap Test - Passed

Common Services - LAN : Connectivity to NIC in M3 - Passed

Policy Kernel - Boot Guard : Self Test - Passed

VDM - General : VDM engine - Passed

GFX - General : Sampling engine - Passed

USBr - General : Storage - Passed

USBr - General : KVM - Passed

Common Services - LAN : Connectivity to NIC in M0 - Passed

AMT - KVM : Compression engine - Passed

AMT - KVM : Compare engine - Passed

PAVP - General : Verify Edp and Lspcon Configurations - Passed

PAVP - General : Set Lspcon Port - Passed

PAVP - General : Set Edp Port - Passed

IP Loading - TCSS IPL Tests : TCSS IPL Health Test - IOM - Passed

Policy Kernel - ME Password : Validate MEBx password - Passed

Common Services - EHBC State : EHBC and Privacy Level states compatibility - Passed

Common Services - EHBC State : Valid Embedded Host Based Configuration (EHBC) state - Passed

Common Services - Privacy Level : Valid Privacy Level settings - Passed

AMT - Power : Valid LAN power well - Passed

Clear Intel(R) ME test data command… done


MEManuf Operation Passed

141601807_corp_h.zip (4.92 MB)

5737

CSME 12.0 Consumer H BA v12.0.85.1869

11.jpg



https://www.station-drivers.com/index.ph…Mo)/lang,fr-ca/

5738

Newer drivers from ASRock website
ME(v16.0.15.1545_2.1_CONS).zip
ME(v14.1.60.1790v4_Consumer).zip

5739

ME 16 is current and 14 is outdated.

5740


Wireless Microcode (WCOD) partitions have been included in Corporate/5MB (CS)ME firmware for a decade now (since ME 8 if I remember properly) so it’s nothing new really.


CSME 14.1 requires PHY as well, as can be seen at the guide. It’s required for RKL CPU support.

5741

Well, it doesn’t seem to be necessary if no RKL support is planned? Both HP Z2 Tower G5 Workstation and Fujitsu ESPRIMO P9910 have bios updates with ME 14.1 without PHY, both FIT and FWUpdLcl not complaining either.

5742


Sure, but neither me nor MEA can know (account for) what CPU someone might have actually installed on their mobo, so both cases have to be covered. Anyone with a RKL CPU will see FIT and FWUpdLcl complain that PHY is not included. Also, the inclusion of PHY is required for some mobos with a CML CPU installed, because some OEMs (e.g. ASUS) used to bundle a placeholder PHY partition at the CSME firmware, in anticipation/preparation for RKL. So in those cases, FWUpdate would fail w/o PHY, even if not using a RKL CPU.

5743

[[File:Bez názvu.png|none|auto]]

un-configured 11.8.90 CON-H “origin ASUS”


edit ,…GT75 7RE tested
added “FWUpdate tool” 11.8.90.4052

edit2// official source link "thanks @MoKiChU"
https://rog.asus.com/forum/showthread.ph…(Z170-Z270-Z370)