Intel ME on Dell Optiplex's

Special Topics Intel Management Engine
1

Hello,

I’ve been lurking the past couple of days trying to figure out how to enable Intel ME/AMT on a few different models of Dell OptiPlex. Specifically, 3020, 3040, 3050, 3070, and if possible, 7010, but those are a bonus. All of these were purchased with ME disabled from dell, and I have confirmed that all of them have service jumpers, and shorting this at boot unlocks the ME for reading/writing.

I’m starting with a PoC on a 3020, I unlocked it with the service jumper, dumped the ME region and full spi, made changes per a few comments I found on the forum, flashed the me region, did a greset, and ended up with a nearly unbootable machine (it would post, then power off when booting to a device). Some setting I changed in bios got it to boot again, I re-flashed the original spi.bin, made sure it was good, and am now bowing to superior knowledge.

Would someone be able to assist me with unlocking the ME region of my 3020 so I can use AMT? Also, what are the feature differences between the 1.5MB sku, and the 5MB sku? I get they’re consumer vs business, and AMT is included in the 5MB sku, but can it be unlocked on the 1.5MB sku? I’ve done some searching, but I haven’t seen any definitive answers as to what is available/not on each sku.

Once I have this working on a 3020, I will be moving onto the other models. If you could note what changes had to be made to unlock AMT, I would appreciate it, as I should be able to then modify the others with a little more confidence.


Thanks in advance!

ME Platform Type.PNG

MEInfo.PNG

spi.zip (4.42 MB)

2

If a system runs ME 1.5MB/Consumer firmware, you cannot enable AMT as that is a 5MB/Corporate feature. You cannot interchange 1.5MB and 5MB firmware. If you have AMT-locked 5MB systems then you can use the jumper, dump the SPI image, follow [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization and adjust the AMT related settings during step 5.

3

I didn’t accustom to flashing the full bios but ONLY the region you’re gong to flash.That would be safer.

4

I’d like to enable AMT on 3020, but I think will be necessary to solder 32 Mbit SPI flash to the empty position next to the existing 64 MBit one. Is it correct? Those two then shall be addressed like a one big SPI flash.

5

Optiplex 3020 runs 1.5MB firmware on a H81 chipset. Not 5MB, no AMT. Leave it as it is.

6


I’m aware of that fact, but would like to know, if soldering 2nd SPI flash and replacing ME with 5 MB one can work, or is it completely mission impossible :slight_smile: Just ordered 9020 mobo to replace 3020 (xpenology), thus 3020 will be available for testing.

EDIT: Please ignore, vPRO isn’t supported on H81 - https://ark.intel.com/content/www/us/en/…81-chipset.html