I linked you to thread, it’s ME System Tools packages, see post #8
I think mabe it’s not correct…
I guess rewriting SPI image is reason of the error
(edit) checking bios setup of ME Version is empty… ! hmm
MEInfoWin64.exe
Intel(R) MEInfo Version: 11.8.60.3561
Copyright(C) 2005 - 2018, Intel Corporation. All rights reserved.
Error 86: Communication error between application and Intel(R) ME module (FWU client)
Error 81: Internal error (Could not determine FW features information
Check ME FW version on main page of BIOS, if you do not see it, or you see ME FW NA or 0.0.0.0. then it’s corrupted. Your BIOS may not show this anyway, in that case check with HWINFO64, in large window, on left, in motherboard section, expand and see ME section, then look for ME Firmware
https://www.hwinfo.com/
You need to know the ME FW first, before you know which package to download to get the proper MEinfoWin from (they are version specific), and ME drivers need to be installed too so download and install those from your motherboard page if not already installed.
So, whatever you ran above may not be correct MEInfoWin version anyway, aside from if you have drivers installed yet or not, or if ME FW is corrupted etc.
Or, you can also download this Intel Spectre/Meltdown checking tool, run it and at the bottom you will see ME FW info (May not work without ME drivers installed, unsure)
http://s000.tinyupload.com/index.php?fil…835653541375528
Never mind, I see in your original BIOS Dump, it’s ME 11.8, so I think you have the correct package. Install ME drivers from Lenovo page for your system and then try again
In the end, yes, you may have corrupted ME FW - that will be fixed once you re-write any known working BIOS via programmer
I checked Intel SA tool and resulte is
engine version is 11.8.50.3425
Yes I agree with your opnion, If ME FW have corrupted, can re-write and patch to variety of method
Please re-write any known working BIOS you have and then run MEInfoWin, after install ME drivers first. Then we can check if bootguard is enabled or not.
But, since you have programmer it’s really no worry, if BIOS edit is blocked due to that, you can reprogram other BIOS, so you can go ahead and program in the BIOS I modified for you above and see if it works or not.
I have a question.
If I install Intel Me version lower than 11.8 then, re-write edited bios, bios boot have problem?
If you re-write BIOS with programmer, then whatever version is in that BIOS will be the version being used, and it wont matter what is on there before. As long as you change the ME version properly, using the clean ME settings transfer guide.
I don’t think you can go too low, maybe 11.6, or possibly 11.0, but I would try 11.6 first. Why do you need lower than 11.8 anyway? You never mentioned any of this until now? I could have changed to other ME in the mod BIOS I sent.
It’s easy to upgrade, but it’s hard to downgrade hahah
I installed Intel ME Driver and check the MEInfo
I think boot guard is disable, aren’t you?
“Intel(R) Manageability and Security Application code versions:
BIOS Version R07ET79W (2.19 )
MEBx Version 11.0.0.0010
GbE Version 0.8
Vendor ID 8086
PCH Version 31
FW Version 11.8.50.3425 H
Security Version (SVN) 3
LMS Version 11.0.0.1173
MEI Driver Version 11.0.0.1172
Wireless Hardware Version 2.1.77
Wireless Driver Version 20.10.2.2
FW Capabilities 0x7DF65145
Intel(R) Active Management Technology - PRESENT/ENABLED
Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Service Advertisement & Discovery - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/DISABLED
Re-key needed False
Platform is re-key capable True
Intel(R) AMT State Enabled
AMT Global State Enabled
TLS Enabled
Last ME reset reason Global system reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Disabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 EF4018
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 4c656e6f-766f-0000-0000-000000000000
Link Status Link Down
System UUID e38e744c-203a-11b2-a85c-e7074e26809c
MAC Address c8-5b-76-5a-6f-1d
IPv4 Address 0.0.0.0
Wireless MAC Address e4-a7-a0-04-a4-57
Wireless IPv4 Address 192.168.230.12
IPv6 Enablement Disabled
Wireless IPv6 Enablement Disabled
Privacy/Security Level Default
Configuration State Completed
Provisioning Mode PKI
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x000017AA
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Enabled
Wireless Micro-code Mismatch No
Wireless Micro-code ID in Firmware 0x24F3
Wireless LAN in Firmware Intel(R) Dual Band Wireless-AC 8260
Wireless Hardware ID 0x24F3
Wireless LAN Hardware Intel(R) Dual Band Wireless-AC 8260
Localized Language Korean
Independent Firmware Recovery Disabled
EPID Group ID 0x1FAB
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000
FPF ME
— –
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0
PTT Enabled Enabled
PTT Lockout Override Counter 0x0
EK Revoke State Revoked
PTT RTC Clear Detection FPF 0x0
”
No, it’s easy to downgrade too when you have programmer, but only to a certain extent, some BIOS you can’t put super old ME into. For sure you can’t go from ME 11 to ME 10 for example.
Yes, Boot Guard cannot be active on this machine now, it’s not burned to FPF side
>>>>>>>>> FPF Side >>> ME Side
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
So you are OK, go ahead and test the BIOS I sent you, if it fails then either due to my modifications or some RSA type check like HP has.
If it fails, we can make a single settings change to your dumped BIOS and test to see if that also fails, then if so we’ll know some RSA type security check is ran on BIOS start
Really Thanks!! Downgrade Success 2.13 ver …
But Unfortunately… I can’t find DCI enable options of bios,
i have changed UEFI Variable of DCI enable also not operated : ( ㅠㅠㅠ
[https://gist.github.com/eiselekd/d235b52…c6b3912731ab9b2]
Then… I am desperate…
What do you think I make a FIT IMAGE to enable DCI …??..
Founded Material explain method that make a FIT IMAGE …
ps. IMAGE
I think Modified DCI Enable Value of 2.13 Bios and Make FIT IMAGE is equal…?, aren’t you?
@jhong - thanks for report back, happy to see success! That setting is in the 2.13 BIOS, let me check the mod I sent you, maybe I put in wrong volume for the volume that contains setup (or it needs to be made visible, which I didn’t look at changing, since you said it was enabled before)
Method you mention is not required, since it’s already in your BIOS the proper way via exact DCI setting option. Please wait, checking BIOS now << * Edit _ I see it in the BIOS I sent to you, so I did put in correct 2.13 volume, assuming it was visible to you since you showed me image of you used it before in BIOS.
Please wait few minutes, I will make you new BIOS with this option unhidden. * Edit, it’s not hidden, unless entire section is not visible to you? Setting is located in >> PCH-IO Configuration page, can you see that page, inside advanced I believe?
You changed this setting already, via grub and setup_var ?? The page you linked, and the variables shown are not for your motherboard
One Of: DCI enable (HDCIEN), VarStoreInfo (VarOffset/VarName): 0x8, VarStore: 0x5, QuestionId: 0x2D8, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 8C 04 8D 04 D8 02 05 00 08 00 10 10 00 01 00}
0x4DE60 One Of Option: Disabled, Value (8 bit): 0x0 (default) {09 07 04 00 30 00 00}
0x4DE67 One Of Option: Enabled, Value (8 bit): 0x1 {09 07 03 00 00 00 01}
Did you type the following? This would be how to change to enabled >> Setup_var 0x8 0x1
If you want to wait a while, I think I can maybe make you fully unlocked BIOS, so you can see all settings. If you want to try this, do above first via grub and setup_var and see if it enables for you. If not, we try full unlock BIOS, send me in a zip file one image of each main page of your BIOS (main, advanced, chipset, boot, save and exit etc)
"If you want to wait a while, I think I can maybe make you fully unlocked BIOS, so you can see all settings"
Okay, Of course I can waiting…
i have multiple checked BIOS Setup, and can’t find DCI setting option…
then, I attach my Setup Var picture, 0x8 offset value is one
huu…
See my edits above. Two things, I cannot see your image above, it’s way too small (I see it now, >>> Still applies). And that is not grub or using setup_var, that is shell or RU etc, not the same thing at all, please make the change using grub and setup_Var only
Setup GUID is E6A7A1CE-5881-4B49-80BE-69C91811685C << There you can get IFR output, then you will find the DCI setting exactly as I posted above.
Here is general guide on how to use grub and setup_var
[GUIDE] Grub Fix Intel FPT Error 368 - BIOS Lock Asus/Other Mod BIOS Flash
Alt boot to grub when no boot to EFI on exit page - [Help needed] Hidden Advanced menu Bios HP Z1 J52_0274.BIN (2) << Probably you will have to use this method, since your BIOS does not have exit and launch shell (Shell and grub file linked in above guide are not same thing, you must boot to the file in that guide)
Your variable is above
Picture is main page of your BIOS (main, advanced, chipset, boot, save and exit etc)
Here, this is modified BIOS with DCI option still hidden, but I change setting to enabled, so you don’t have to mess with above stuff.
One Of: DCI enable (HDCIEN), VarStoreInfo (VarOffset/VarName): 0x8, VarStore: 0x5, QuestionId: 0x2D8, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 8C 04 8D 04 D8 02 05 00 08 00 10 10 00 01 00}
One Of Option: Disabled, Value (8 bit): 0x0 {09 07 04 00 00 00 00}
One Of Option: Enabled, Value (8 bit): 0x1 (default) {09 07 03 00 30 00 01} << now default in this BIOS
Please put on with programmer, erase then blank check, then write/verify
http://s000.tinyupload.com/index.php?fil…805667218316264
If that fails for you still, I will work on unlocking BIOS for you, but it will be the same then too, if you can see the setting I mean, it will fail same way if this BIOS fails to let you use the feature
Since this is enabled now, even though you can’t see setting, it will be same as this when you can see it, changing to enabled when you see it will be same as using this BIOS
Thanks for images, if needed, I will work on unlocking BIOS for you tomorrow. The above should fix it for you though, even though you wont be able to see the setting, it’s now enabled by default.
One image is missing, last tab >> Restart, thanks!
I see also, this already enabled
DCI Auto Detect Enable, VarStoreInfo (VarOffset/VarName): 0x9, VarStore: 0x5, QuestionId: 0x2D9, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 8E 04 8F 04 D9 02 05 00 09 00 10 10 00 01 00}
One Of Option: Disabled, Value (8 bit): 0x0 {09 07 04 00 00 00 00}
One Of Option: Enabled, Value (8 bit): 0x1 (default) {09 07 03 00 30 00 01} << Enabled
One Of: USB/UART, VarStoreInfo (VarOffset/VarName): 0x40, VarStore: 0x1, QuestionId: 0x2DA, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 84 04 85 04 DA 02 01 00 40 00 10 10 00 01 00}
One Of Option: UART, Value (8 bit): 0x0 (default) {09 07 87 04 30 00 00} << Are you using UART, or USB? If USB, this also need changed
One Of Option: USB, Value (8 bit): 0x1 {09 07 86 04 00 00 01}
Okay Thank you.
After SPI write completed, I will contact you again.
Thank you very much!!!
You’re welcome! Hope that gets it for you, sorry I didn’t thnk to enable before on first BIOS I sent back, just assumed it was already visible to you since you showed me that image of what I thought was the setting in your BIOS, but now I see your BIOS images I can tell that was not image of your BIOS.
How are you trying to use this feature, over USB? If yes, then I need to change that last setting I mentioned above too UART/USB one!
And, there is also these two, maybe related as well
Debug Port Selection, VarStoreInfo (VarOffset/VarName): 0x6, VarStore: 0x5, QuestionId: 0x2DB, Size: 1, Min: 0x0, Max 0x3, Step: 0x0 {05 91 88 04 8B 04 DB 02 05 00 06 00 10 10 00 03 00}
One Of Option: Legacy UART, Value (8 bit): 0x0 (default) {09 07 89 04 30 00 00} << Default UART
One Of Option: SERIALIO UART2, Value (8 bit): 0x3 {09 07 8A 04 00 00 03}
One Of: GNSS, VarStoreInfo (VarOffset/VarName): 0x29B, VarStore: 0x1, QuestionId: 0x2DC, Size: 1, Min: 0x0, Max 0x2, Step: 0x0 {05 91 AA 0B AB 0B DC 02 01 00 9B 02 10 10 00 02 00}
One Of Option: Disabled, Value (8 bit): 0x0 (default) {09 07 04 00 30 00 00} << Default = disabled
One Of Option: SerialIO UART, Value (8 bit): 0x1 {09 07 AE 0B 00 00 01}
One Of Option: ISH, Value (8 bit): 0x2 {09 07 AF 0B 00 00 02}
HaHa… BIOS image of dci enabled is on the google search…
Then I saw the image, I guess my bios can display to DCI enable option … Sorry haha… : )
After enable DCI, I start debugging through USING USB 3.0 Debug Cable
Really? To use USB, setting UART/USB var is need??!!
Well, the option in “In” your BIOS, if we can make visible to you or not, I will have to look into unlocking your BIOS. But we can change the setting easy via BIOS mod
I do not know about these settings, or how this works, what it’s used for etc, I assumed you did. That’s why I showed you the other settings above, that seemed related. You need to tell me which you need set to what, then I can make the changes in a BIOS for you.
No var changes are needed, I make changes directly in BIOS. BIOS I gave you in post #36 has DCI HDCIEN enabled as default now, but depending on how you use it you may need some of the other settings changed as well, I don’t know, you have to tell me.
In BIOS on post #36, these are now the current BIOS defaults
DCI enable (HDCIEN) >> Enabled * I set changed from disabled in BIOS I gave you previously.
DCI Auto Detect Enable >> Enabled *Default stock setting
USB/UART >> UART << Do you use that, or USB? UART is default/current setting, sounds like you want USB correct?