Intel Me temporary disable

@plutomaniac

Hello Pluto,
I followed some tutorial over here on site to unlock bios settings for my Acer ph315-51-78np . i dumped my bios with ( fptw64 -d ) bios file v1.26 (DH53F_1A) and with H2OEZE i replaced setup utility only one module i then re-flashed it with asprogrammer and all went well and i have access to all settings now but there is something wrong with Intel Me.for a reason system can not communicate with Me and intel csme detection tool is giving system may be vulnrable.
i attached below both MEinfowin -Verbose result as well as MEManuf -verbose. Please can u take a look at it ? i Appreciate in advance. thxs[quote]Windows OS Version : 10.0

MEinfowin -verbose

LPC Device Id: A30D.
Platform: Cannonlake Platform
General FW Information
FW Status Register1: 0x80032144
FW Status Register2: 0x3B850110
FW Status Register3: 0x00000020
FW Status Register4: 0x00004800
FW Status Register5: 0x00000000
FW Status Register6: 0x40000000

CurrentState: Disabled
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with no UMA
InitComplete: Initializing
BUPLoadState: Success
ErrorCode: Disabled
ModeOfOperation: Temporary Disable mode
SPI Flash Log: Not Present
Phase: BringUp
PhaseStatus: CM0_MKHI_HANDLER_STOP
ME File System Corrupted: No
FPF and ME Config Status: Committed

Error 198: ME disabled


MeManufwin -verbose

Windows OS Version : 10.0

LPC Device Id: A30D.
Platform: Cannonlake Platform
General FW Information
FW Status Register1: 0x80032144
FW Status Register2: 0x3B850110
FW Status Register3: 0x00000020
FW Status Register4: 0x00004800
FW Status Register5: 0x00000000
FW Status Register6: 0x40000000

CurrentState: Disabled
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with no UMA
InitComplete: Initializing
BUPLoadState: Success
ErrorCode: Disabled
ModeOfOperation: Temporary Disable mode
SPI Flash Log: Not Present
Phase: BringUp
PhaseStatus: CM0_MKHI_HANDLER_STOP
ME File System Corrupted: No
FPF and ME Config Status: Committed

Error 198: ME disabled.

Error 81: MEManuf Operation Failed

Something went wrong with the BIOS modification and it seems that it does not communicate with the Engine firmware properly. It’s not an Engine firmware issue. I have thus moved it to the BIOS section where someone else may be able to help you. On the Engine side of things, if you re-flash the entire SPI image instead of the BIOS region only, you can try following [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization but this looks like a bad BIOS mod.

i tried it 2 times for a certain reason ME firmware is not updating only PMC is giving green as latest and initialised but ME firmware will remain dated to 2018 and red as not latest.

I also tried to use ME_cleaner and followed what is detailed here but it gave me_cleaner result Full image detected The ME/TXE region is valid but the firmware is corrupted or missing. Btw

thxs a lot Plutomaniac for helping .

Compress and attach/link to the current full SPI chip dump. We’ll try the cleanup guide because maybe you followed it incorrectly.

OK great then will dump it using ASProgrammer or normally using FPTW? Or u just want me to attach the current file i was using?

The current file will do. The cleanup needs to happen to whatever image you end up flashing back.

Here it is

https://ufile.io/pczgl6co

thxs man


I think i succedded but had to replace biosregion.bin as well inside decompress folder and here is the result what do u think shall i flash it?


╔═══════════════════════════════════════════╗
║ ME Analyzer v1.148.4 r210 ║
╚═══════════════════════════════════════════╝

╔═════════════════════════════════════════════╗
║ outimage.bin (1/1) ║
╟─────────────────────────────┬───────────────╢
║ Family │ CSE ME ║
╟─────────────────────────────┼───────────────╢
║ Version │ 12.0.68.1606 ║
╟─────────────────────────────┼───────────────╢
║ Release │ Production ║
╟─────────────────────────────┼───────────────╢
║ Type │ Extracted ║
╟─────────────────────────────┼───────────────╢
║ SKU │ Consumer H ║
╟─────────────────────────────┼───────────────╢
║ Chipset │ CNP/CMP-H B,A ║
╟─────────────────────────────┼───────────────╢
║ TCB Security Version Number │ 1 ║
╟─────────────────────────────┼───────────────╢
║ ARB Security Version Number │ 9 ║
╟─────────────────────────────┼───────────────╢
║ Version Control Number │ 26 ║
╟─────────────────────────────┼───────────────╢
║ Production Ready │ Yes ║
╟─────────────────────────────┼───────────────╢
║ OEM Configuration │ No ║
╟─────────────────────────────┼───────────────╢
║ FWUpdate Support │ No ║
╟─────────────────────────────┼───────────────╢
║ Date │ 2020-06-25 ║
╟─────────────────────────────┼───────────────╢
║ File System State │ Configured ║
╟─────────────────────────────┼───────────────╢
║ Size │ 0x27C000 ║
╟─────────────────────────────┼───────────────╢
║ Flash Image Tool │ 12.0.64.1551 ║
╟─────────────────────────────┼───────────────╢
║ Latest │ Yes ║
╚═════════════════════════════╧═══════════════╝
╔═════════════════════════════════════════════╗
║ Power Management Controller ║
╟─────────────────────────────┬───────────────╢
║ Family │ PMC ║
╟─────────────────────────────┼───────────────╢
║ Version │ 300.2.11.1025 ║
╟─────────────────────────────┼───────────────╢
║ Release │ Production ║
╟─────────────────────────────┼───────────────╢
║ Type │ Independent ║
╟─────────────────────────────┼───────────────╢
║ Chipset SKU │ H ║
╟─────────────────────────────┼───────────────╢
║ Chipset Stepping │ B ║
╟─────────────────────────────┼───────────────╢
║ TCB Security Version Number │ 3 ║
╟─────────────────────────────┼───────────────╢
║ ARB Security Version Number │ 3 ║
╟─────────────────────────────┼───────────────╢
║ Version Control Number │ 0 ║
╟─────────────────────────────┼───────────────╢
║ Production Ready │ No ║
╟─────────────────────────────┼───────────────╢
║ Date │ 2020-02-06 ║
╟─────────────────────────────┼───────────────╢
║ Size │ 0x14000 ║
╟─────────────────────────────┼───────────────╢
║ Chipset Support │ CNP ║
╟─────────────────────────────┼───────────────╢
║ Latest │ Yes ║
╚═════════════════════════════╧═══════════════╝

Press enter to exit

Ok, try the attached SPI image. Flash it (programmer or fpt -f spi_fix.bin), remove all power for 1 minute and boot. Check if the problem is gone and verify CSME status via MEInfo.

spi_fix.rar (5.25 MB)

Error 238: The host CPU does not have write access to the target flash area.
To enable write access for this operation you must modify the descriptor
settings to give host access to this region.

FPT Operation Failed.

though protection descriptors are disabled in bios and bios reflash enabled and spd write access is set to true, am i missing something ?

The Flash Descriptor is locked. You have Read but not Write access to the CSME firmware region. You can use the programmer of course and it will work that way. Thing is, if the FD is locked then I assume that you flashed the BIOS region only before? Maybe via "fpt -bios -f bios.bin" or similar? In such case, the CSME has not been touched so I doubt cleaning it will make any difference because the problem should be at the BIOS side. If you want to rule out CSME firmware, flash the provided "clean" SPI image via the programmer. If the problem persists though, it is the modded BIOS that has problems.

You are z Expert Thxs man a lot i guess it’s ok now since status in bios is enabled normal mode and version is latest.
attached MEinfo result and thxs again PlutoM



General FW Information

Platform Type Mobile
FW Type Production
Last ME Reset Reason Global system reset
BIOS boot State Post Boot
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
Capability Licensing Service Enabled
Local FWUpdate Enabled
OEM ID 00000000-0000-0000-0000-000000000000
Integrated Sensor Hub Initial Power State Disabled
Intel(R) PTT Supported Yes
Intel(R) PTT initial power-up state Disabled
OEM Tag 0x00
TLS Disabled

Intel(R) ME code versions:
BIOS Version V1.26
Vendor ID 8086
FW Version 12.0.68.1606 H Consumer
LMS Version 2026.14.0.1682
MEI Driver Version 2021.14.0.1615

IUPs Information
PMC FW Version 300.2.11.1025

PCH Information
PCH Version 11
PCH Device ID A30D
PCH Step Data B1
PCH SKU Type Production PRQ Revenue
PCH Replacement State Disabled
PCH Replacement Counter 0
PCH Unlocked State Disabled

Flash Information
SPI Flash ID 1 207018
SPI Flash ID 2 Not Available
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled

FW Capabilities 0x31119140
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/DISABLED
Persistent RTC and Memory - PRESENT/ENABLED

End Of Manufacturing
Post Manufacturing NVAR Config Enabled Yes
HW Binding Enabled
End of Manufacturing Enable Yes

Intel(R) Protected Audio Video Path
Keybox Not Provisioned
Attestation KeyBox Not Provisioned
EPID Group ID 0x28BF
Re-key needed False
PAVP Supported Yes

Security Version Numbers
Minimum Allowed Anti Rollback SVN 1
Image Anti Rollback SVN 9
Trusted Computing Base SVN 1

FW Supported FPFs
FPF UEP ME FW
*In Use
— — -----
Enforcement Policy 0x00 0x00 0x00
EK Revoke State Not Revoked Not Revoked Not Revoked
PTT Enabled Enabled Enabled
OEM ID 0x00 0x00 0x00
OEM Key Manifest Present Not Present Not Present Not Present
OEM Platform ID 0x00 0x00 0x00
OEM Secure Boot Policy 0x400 0x400 0x400
CPU Debugging Enabled Enabled Enabled
BSP Initialization Enabled Enabled Enabled
Protect BIOS Environment Disabled Disabled Disabled
Measured Boot Disabled Disabled Disabled
Verified Boot Disabled Disabled Disabled
Key Manifest ID 0x00 0x00 0x00
Persistent PRTC Backup Power Enabled Enabled Enabled
RPMB Migration Done Disabled Disabled Disabled
SOC Config Lock Done Not Done Done
SPI Boot Source Enabled Enabled Enabled
TXT Supported Disabled Disabled Disabled

ACM SVN FPF 0x00
BSMM SVN FPF 0x00
KM SVN FPF 0x00
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash UEP 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME FW 0000000000000000000000000000000000000000000000000000000000000000
PTT Lockout Override Counter FPF 0x07