Im new to the concept of enabling Intel ME on a consumer system so forgive me if im missing something here. Ive been reading up on this for a while now (there is a lot going on regarding this topic) but im just trying to understand my options.
I have 3 Dell Optiplex 3080 MFF machines i want to flash corporate Intel ME firmware on to enable AMT
one of the 3 is on the latest firmware version (2.30.1) and this is its ME info:
╔═════════════════════
║ Family │ CSE ME ║
║ Version │ 14.5.55.2259 ║
║ Release │ Production ║
║ Type │ Extracted ║
║ SKU │ Consumer V ║
║ Chipset │ CMP-V A ║
║ TCB Security Version Number │ 1 ║
║ ARB Security Version Number │ 6 ║
║ Version Control Number │ 41 ║
║ Production Ready │ Yes ║
║ OEM Configuration │ No ║
║ FWUpdate Support │ No ║
║ Date │ 2024-06-20 ║
║ File System State │ Initialized ║
║ Size │ 0x373000 ║
║ Flash Image Tool │ 14.5.11.1106 ║
╔═════════════════════
║ Power Management Controller ║
║ Family │ PMC ║
║ Version │ 140.1.00.1005 ║
║ Release │ Production ║
║ Type │ Independent ║
║ Chipset SKU │ V ║
║ Chipset Stepping │ A ║
║ TCB Security Version Number │ 0 ║
║ ARB Security Version Number │ 0 ║
║ Version Control Number │ 0 ║
║ Production Ready │ Yes ║
║ Date │ 2019-11-11 ║
║ Size │ 0x20000 ║
║ Manifest Extension Utility │ 14.5.0.7021 ║
║ Chipset Support │ CMP-V ║
╚═════════════════════
╔═════════════════════
║ Platform Controller Hub Configuration ║
║ Family │ PCHC ║
║ Version │ 14.5.0.1001 ║
║ Release │ Production ║
║ Type │ Independent ║
║ TCB Security Version Number │ 0 ║
║ ARB Security Version Number │ 0 ║
║ Version Control Number │ 0 ║
║ Production Ready │ Yes ║
║ Date │ 2019-11-27 ║
║ Size │ 0x1000 ║
║ Manifest Extension Utility │ 14.5.0.9000 ║
║ Chipset Support │ CMP-V ║
╚════════════════════════
the 14.5 branch does not appear to have any corporate Intel ME firmware
albo@nostromo /d/intelME> ls -al CSME\ 14.5\ Repository\ r6/
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.0.1010_CON_V_A_PRD_EXTR.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.11.1105_CON_V_A_PRD_EXTR.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.11.1106_CON_V_A_PRD_EXTR.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.12.1111_CON_V_A_PRD_RGN.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.25.1163_CON_V_A_PRD_EXTR.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.25.1229_CON_V_A_PRD_RGN.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.32.1397_CON_V_A_PRD_EXTR.bin
.rw-r--r-- 3.5M albo 20 Jun 07:23 14.5.40.1532_CON_V_A_PRD_EXTR.bin
.rw-r--r-- 3.1M albo 20 Jun 07:23 14.5.45.1763_CON_V_A_PRD_EXTR.bin
ive found this:
and am wondering how bad of an idea it might be to attempt to install
14.1.65.1969_COR_H_A_PRD_EXTR-Y.bin
from the 14.1 branch by repacking a Dell BIOS update (the same version im running)
its info is:
╔═════════════════════
║ 14.1.65.1969_COR_H_A_PRD_EXTR-Y.bin (1/1) ║
║ Family │ CSE ME ║
║ Version │ 14.1.65.1969 ║
║ Release │ Production ║
║ Type │ Extracted ║
║ SKU │ Corporate H ║
║ Chipset │ CNP/CMP-H A ║
║ TCB Security Version Number │ 1 ║
║ ARB Security Version Number │ 11 ║
║ Version Control Number │ 31 ║
║ Production Ready │ Yes ║
║ OEM Configuration │ No ║
║ FWUpdate Support │ No ║
║ Date │ 2022-03-24 ║
║ File System State │ Unconfigured ║
║ Size │ 0xA3D000 ║
║ Flash Image Tool │ 14.1.65.1969 ║
╚════════════════════════
the oldest BIOS update file (1.0.7) for my Optiplex 3080 MFF’s contains ME 14.5.11.110
All BIOS files for the Optiplex 3080 ive unpacked so far only contain Consumer ME firmware
will this get caught by anti-rollback rejection?
can i change the version control number to get around that?
is this a horrible idea?
has anyone done this before?
do i have any other options?
etc
any help would be much appreciated
Optiplex 3080 MFF is B460 which (i think) 14.x supports?
root@node03:~# lspci | grep -i "Host bridge\|ISA bridge\|SMBus"
00:00.0 Host bridge: Intel Corporation Comet Lake-S 6c Host Bridge/DRAM Controller (rev 03)
00:1f.0 ISA bridge: Intel Corporation B460 Chipset LPC/eSPI Controller
00:1f.4 SMBus: Intel Corporation Comet Lake PCH-V SMBus Host Controller
i know i could use FPT or a hardware programmer (which i do have) to do this, but id like to hear from people more experienced than me since i am new to this topic and my situation seems a bit different than what ive found in these forums so far
thanks in advance
