Optiplex 7010 and VPro/AMT/ME

There should’t be any problem.



I ran the UEFI firmware update and can confirm that all went well - now running version A26. Thanks.

Hi,

Yesterday i successfully reactive the Intel AMT MEBx function on a Dell Optiplex 9010 with ME 3 Status (AMT disabled). I use A26 Bios and a Windows 8.1 OS for modification. This evening i’ll provide my SPI Dump with ME and KVM enabled.
1Question = In the full SPI Dump? Is there Service Tag and Serial Number included ?



best regards, florian

// Update //

The ZIP File must be renamed to .7z.

// Process //
Set Service Mode Jumper
Flash SPI DUmp fptw64 -f outimage.bin
Shutdown PC / Remove Service Mode Jumper
StartUp
Run fptw64 -greset

Now you should have access to MBEx (STRG+P)

WARNING: Maybe you’ll get my S/N and ServiceTag. It could be that you have to remove them from Image

Good luck

ROMS.7z.zip (5.66 MB)

Two things:

I’ve heard rumors that “ME Lockout” or “Permanently Disabled” physically and irreversibly disables some functionality of the Management Engine, possibly by blowing a fuse. I can’t remember where I heard it from, so it may be bunk.

Secondly, I now have a 7010 here and would like to enable full manageability on it. Is there an ME region in this thread I can use, or will mine need to be modified? I’ve attached it just in case.

O7010ME.zip (2.75 MB)

The one from post #94 will do just fine. Note that it is a full SPI image so extract the Engine region via UEFITool.



The checksum on the SPI image is bad. Should I be worried about this?

What checksum? Nothing is bad. Besides, I explicitly said for you to extract the Engine region only.


When I load the SPI file into UEFITool to extract the ME region, the lower pane has a message repeated about seven or eight times.
"parseFile: invalid data checksum 5Ah, should be 00h"

First, that “issue” has to do with the old branch of UEFITool as NE shows a clean slate. Secondly, the warnings are found at the BIOS region, not Engine. So it wouldn’t matter for your case either way.

Thank you! I just wanted to make sure that the ME region wasn’t affected before writing it.

Hi. Got today to my office DELL 7010 with hated by me white label ME Disabled 3 !!!

Can u mod for me those files, please ?

System had BIOS A08 and tried update until A21 but ME cannot be flashed.
So now is BIOS A21 at this moment and files are dumped from this version.
SERVICE MODE is ON (jumper)

Thank you.

https://drive.google.com/drive/folders/1…9qd?usp=sharing

Ok system now updated ME FW but cannot see during POST and pressing F12 option to enter to MEBx, even Ctrl + P doing nothing. Any idea how to "back to life" ME functions ? Need this to remote power on my systems.

I assume you checked the bios settings and jumpers on the board. Some bioses have an option to disable AMT and some boards have a jumper.

Having a quick look into the manual shows a line “Alert! Security override Jumper is installed. The MFG_MODE jumper has been set and AMT Management features are disabled until it is removed”
(http://downloads.dell.com/manuals/all-pr…nual4_en-us.pdf)



You’re better off using WoL to power them on. If you’re attached to AMT when the machine is powered on (through something like the Intel Manageability Commander) the network interface gets stuck at 10mbit/s. The web interface might not do that, though…

Hello, I have an OptiPlex 7010 which has the white label “ME DISABLED 3” on the inside of the case. http://www.dell.com/support/article/us/e…-327359?lang=en

The machine originally came with an i3 CPU but has since been replaced with an i5-3470.

I have no MEBx option during start-up and I see no options within BIOS. I am running the latest A28 BIOS. details here: https://www.dell.com/support/home/us/en/…?driverId=R5PWH

I have enabled the SERVICE jumper and I have dumped SPI. http://s000.tinyupload.com/index.php?fil…076082861547575

Can anyone advise what I should do next? I assume I can just flash using the bin file that was supplied in this post but i’m wondering if I first need to downgrade my BIOS version from 28 to 25?
Optiplex 7010 and VPro/AMT/ME (2)

Many thanks

@ BirtyB:

You should always have the latest BIOS applied first. Flash the attached SPI image back. It includes your own BIOS dump as well as cleaned, 7010-configured & AMT enabled ME 8.1.72.3002 5MB firmware. Run Flash Programming Tool with command “fptw -greset” once the image is flashed back.

spi_fix.rar (5.67 MB)

Thank you so much for doing this and also for all your contributions to this excellent forum. I can confirm that the flash worked perfectly and I now have a fully working AMT device.

I donated 10 euros by way of thanks. :slight_smile:

You’re welcome BirtyB, enjoy your AMT-unlocked system. Thank you very much for your donation and nice words.

I have a optiplex 7010 with the “6 ME LOCKOUT” tag as well and I haven’t had any luck with any of the me region files so far. On a whim, I tried flashing the entire file (not just the me region) from post #116 and it worked (I was able to get into MEBx with the normal ctrl-p shortcut). I haven’t done any testing so far to check to see if the full me/amt functionality is working though.

(I think) This means that there isn’t a hardware limitation for systems with the ME LOCKOUT tag. Since a full image worked, but the me region didn’t, it makes me think that there is something set in the bios code (or somewhere else in the firmware image) that doesn’t allow the ME code to run.

Some other things I observed in the process:
- When I hit ctrl-P on the stock bios/me it shows a progress bar (like when its loading the bios setup menu) almost as if it’s trying to load MEBx, but then it gets almost to the end and skips to the rest of the boot process.
- I also tried flashing an empty stock bios (posted earlier in this thread). This didn’t work to enable ME, but it did reboot into manufacturing mode allowing me to set the service tag/other info
- When i flashed the full spi image, expectedly, I ended up with the service tag/other info from the original system this was from.
- Is there any downside to having service tag from another system? Is there any other info in the bios code that is system specific? Would any of this cause issues?
- Is there any way to customize the bios with my own system’s info? maybe forcing it into the manufacturing mode somehow?

This line, answers your last question >> - I also tried flashing an empty stock bios (posted earlier in this thread). This didn’t work to enable ME, but it did reboot into manufacturing mode allowing me to set the service tag/other info

LAN MAC ID is usually involved in this process, of using some other dump on different system, usually this needs fixed before or after the initial recovery.

See post #68 here for addendum to your last question, alternate method with Dell Tools, once you have ME how you want it
[SOLVED] How to unlock MSR 0x194 for 2nd/3rd Gen CPU overclocking (5)