Optiplex 7010 and VPro/AMT/ME

@gorgarath - yes, sorry, I almost backed up and removed some, but wanted to leave for others benefit in the futre if ever needed. I guess I should have asked about the jumper, or looked back in the thread, yes this solves much of what I was describing how to get around

Yes, all you need for the MAC is the hex edited GbE and then reflash that via FPT directly. GbE region is not locked, so nothing needed to be able to write that via FPT. Yes, you can skip almost all of what I said, especially since plutomaniac pointed out you have a service jumper on this model (That unlocks the FD and allows ME reflash via FPT too)
I didnā€™t link any post, but I did link an unlocked BIOS for you (BIOS lock disabled, and FD fully unlocked). You can use that BIOS, to reflash to all machines via FPT if you want, with jumper enabled, then much easier flashing later if ever needed and jumper wont need put on then.

Yes, for the unaffected systems, what you mentioned would be proper way to redo the ME, and FD if needed too. However, I would extract each of those things (FD, ME) from the corrected BIOS using UEFITool, right click each item and extract as-is save as xxx.bin, then flash using only those files as source instead of the entire BIOS.
FPTw.exe -desc -f fd.bin << This flashes the FD (FD extracted as source)
FPTw.exe -me -f me.bin << This to flash ME (ME extracted as the source)

Dell DSTCD tools. in case these can help you redo the serials/service tags easier (Asset_A209.COM is not same as ASSET.COM, try both if one gives you issues) >>
http://s000.tinyupload.com/index.php?filā€¦250786477991185

Hi, I have a few Dell 7010s that Iā€™d like to enable AMT. Unfortunately all are ā€œwhite-label-3-disabledā€ but Iā€™ve read here that it is possible so before I brick these things perhaps I can ask a couple of questionsā€¦

1) Iā€™ve found the service mode jumper on the Desktop/Mini-Tower, but not on the SFF; does it have one if so where is it?
2) Do I first flash the BIOS that is the same as when some of the files on here were read? For instance I think A21 seems to have been used beforeā€¦
3) What are the latest/best files to try to flash please?

Many thanks for the great work already done!

PS So I had a go myself with the files on here where someone had dumped A29 files so I preformed the process and flashed the ME area with service mode jumper on a desktop 7010. I did the fpt -greset and also reset the CMOS with the jumper but still no AMT in either CTRL-P or F12. Wonder if I did anything wrong or whether the file I used from here was not AMT_Enabled? Not sure where to go next? Could do with a little help please. Thanks.

PPS Just to update, Iā€™ve now cracked it, thanks to the thread here! I used the file from post 94 and down-flashed my BIOS from A29 to A25 to match (probably unnecessary?) and then followed the instructions in this thread using the service mode jumper. I also noticed that being able to access AMT survives a BIOS update, as it should I guess, but was a question mark for me. BTW I also found the Service Mode jumper on the 7010 SFF - its on the far right, just up and to the right of the RAM (with the RAM facing you, horizontally, at the front).

Oops, I had one of these in storage. I pull the bios with fptw64 -d. I thought I cleaned it properly, I think we all know where this is going! One bad flash later and it doesnā€™t boot. Beware, ask for help donā€™t do what I did. ā€œnice big paper weightā€ Can I recover the bios/motherboard?


Thanks everyone.

snakeman

@Lost_N_BIOS what can I do now?

Warning: There are some addresses that are not defined in any regions.
Read/Write/Erase operations are not possible on those addresses.

Same message I got when i bricked the other board, I was trying to do a fptw64 -f 7010_bios I get this in total

C:\70102>fptw64 -f 70102_bios.bin

Intel (R) Flash Programming Tool. Version: 8.1.60.1561
Copyright (c) 2007 - 2014, Intel Corporation. All rights reserved.

Platform: Intel(R) Q77 Express Chipset
Reading HSFSTS registerā€¦ Flash Descriptor: Valid

ā€” Flash Devices Found ā€”
MX25L6405D ID:0xC22017 Size: 8192KB (65536Kb)
MX25L3205D ID:0xC22016 Size: 4096KB (32768Kb)


Warning: There are some addresses that are not defined in any regions.
Read/Write/Erase operations are not possible on those addresses.

PDR Region does not exist.

- Reading Flash [0x600000] 6144KB of 6144KB - 100% complete.
- Erasing Flash Block [0x004000] - 100% complete.
- Programming Flash [0x004000] 16KB of 16KB - 100% complete.
- Verifying Flash [0x600000] 6144KB of 6144KB - 100% complete.

Iā€™m afraid to reboot!


Solved, already great guides thanks for all the write ups,


snakeman

@snakeman - did you get it sorted out?

@Jed1 - great you figured it all out yourself, and thanks for posting the 2pin jumper location

@Lost_N_Bios I almost used the -erase but I was afraid! So instead I flashed the original back with -rewrite and then I verified it a few times, before I did -greset. I got real lucky.

Now probably try and get nvme booting working in this bios.

Dear friends, @gorgarath & Lost_N_BIOS, did I understand that with @gorgarath kvm on Optiflex 7010 it works? I have a model with AMT_DASH_VPRO: DEFAULT 1. Everything works except KVM
I do not see the KVM enable menu in MEBx.
@gorgarath can you tell me how you turned on KVM? Through MEBx menu or on software?
Lost_N_BIOS, can you guess where this option is disabled and what to do to make it available?
Thank.

@Ohlamon I was able to get KVM working on the Optiplex 7010 by flashing one of the first files in this thread. It worked for all of my devices except for the ones that were marked by Dell as 6 (lockout) instead of 1 (default, though it sometimes is only the stripped down version that doesnā€™t include KVM) or 3 (AMT disabled). The file I am currently using is the last one I posted myself that is a whole BIOS file. But make sure you do not actually flash the entire BIOS as that will rewrite your serial number and MAC address and possibly other things. The nice thing with these Dells is the fact they have a jumper that allows you to completely overwrite the normally inaccessable parts of the BIOS. Iā€™m not sure which version of the 7010 you have, but here is where the jumpers are located on the two I have here. On the Ultra Small Form Factor ones, it is next to the password clearing jumper under the hard drive/optical drive enclosure. On the Small Form Factor desktops, it is located on the edge of the board next to the PCI-Express slots.

I have a bootable USB drive with FreeDOS that I use for flashing. On it I have a directory (called 7010) with all of the files (FPT.EXE, fparts.txt, A29_AMT.bin, O7010A29.EXE) needed for enabling AMT on the 7010. If the BIOS is not already at A29, I will update the BIOS by either booting from the USB drive and running the update file, or running the update file from Windows first. After updating the BIOS, I will shut the PC off and put a jumper on the the service mode pins. Then simply boot up the PC with the USB drive. I then change to the 7010 directory and run a batch file that runs these commands:

FPT -rewrite -desc -f A29_AMT.bin
FPT -rewrite -ME -f A29_AMT.bin
FPT -greset

@Lost_N_BIOS recommends saving the individual parts as separate files, but I find it simpler to have the single file and just flash the parts of it. (Mostly because I already had the full file already made.) The first command will write to the Flash Descriptor and includes the change to enable AMT if it a machine that has the AMT lockout (6 according to the sticker inside the cover) as well as the change to disable the 3G driver since the Intel Anti-theft Technology is disabled in the ME due to being EOL. The second command flashes the ME region which includes enabling full AMT, including KVM, and the disabling of the EOL Intel Anti-theft Technology.

After the machine boots back to the USB drive again, I shut the PC off and remove the jumper from the service mode pins and boot back to the USB drive. I will then run one final FPT -greset. I am fairly certain that I do not need to do that step, but I do it anyway. I then will hit Ctrl+P when it reboots to go and set my settings for AMT before moving on to the next machine.

Dear @gorgarath and @Lost_N_BIOS , unfortunately I had absolutely no time to deal with this system unit earlier. I tried several times to upload the modified bios, but I did not succeed in searching for kvm. My current version of bios in the attachment, there seems to be everything that is needed, but kvm never appeared in the settings. Maybe Iā€™m doing something wrong? I think I did everything according to your recommendations.

Hello guys, iā€™ve got bricked 7010 SFF (purely BIOS fault) and Iā€™d like to reuse some of SPI dumps posted here. Question is, how to split that 12MB file into 8MB and 4MB for particular flash chips. Like first 8MB for 25Q64 and remaining 4MB for 25Q32? Iā€™ll use SPI programmer on desoldered ICsā€¦ Thanks a lot for any info.

@TomasHC
You can use ā€œwinhexā€ ,and split it into 2 files directly.Remember the first file is 8MB.

@TomasHC - 8MB is first as mentioned above (cut 800000h), then rest is 4MB file (400000h)

Thanks gents, both 7010s working now. Remaining question is how to change MAC and TAG (at least). Maybe how to add Windows Digital key as well. Tried to find a way, but maybe will be faster ask directly. Thanks in advance.

@TomasHC - great! You canā€™t ā€œChangeā€ MAC, you can ā€œFixā€ MAC to what itā€™s supposed to be for that system, should be on sticker somewhere, or hopefully you made a dump of BIOS chips before you did anything.
What I mean there, in case you didnā€™t know, is you cannot use some new made up MAC, you have to use the one assigned to that system at manufacturing.
These tools will help with the Asset Tag, maybe MAC too I canā€™t remember. I put that in at the BIOS file level myself, if you need help with that and have the proper MAC ID let em know and send me files (both files or single large one)

Dell DSTCD tools. in case these can help you redo the serials/service tags easier (Asset_A209.COM is not same as ASSET.COM, try both if one gives you issues) >>
http://s000.tinyupload.com/index.php?filā€¦250786477991185



One of them is in a case so Iā€™ve got a TAG, but 2nd is just a MoBo which Iā€™ve purchased to repair only. I do not rely on real TAG, especially for the naked MoBo, just would like to have different MACs.

EDIT: what if I just flash 2nd mobo with image using SPI programmer like for unbricking, but different image (several here attached). It should include different MAC, right?

None of the provided tools were able to change the TAG :frowning:

20191026_101514.jpg

@Lost_N_BIOS new member/noob here! Iā€™ve got a Precision Tower 5810 that has ā€œME DISABLED 3ā€ as well. I have a service jumper pin on there but when I do that it only presents UEFI option to reboot and then I am no longer in service mode. Do you have to enable legacy to boot to a usb drive or cd for this work?

Dell Optiplex 9010 ME AMT A30_AMT.bin REQUEST

I have a Dell OptiPlex 9010 the sister of the Dell OptiPlex 7010, both manufactured Mid 2012.
ME DISABLED 3.
Iā€™m finding all the Dell Business Optiplex 's 7010 & 9010 are ME DISABLED 3 for Businesses that need a high level of security. ME Lockout 6 unknown why that was done?
AMT is a remote management feature of Intel ME.

My BIOS right now is @ A09. ME AMT will need BIOS updated to A30?

9010 is A30 18 Jul 2018 O9010A30.exe
https://www.dell.com/support/driver/en-uā€¦?driverId=90DD2

7010 is A29 18 Jul 2018 O7010A29.exe
https://www.dell.com/support/driver/en-uā€¦?driverId=5M70H

dell_ME_AMT_7010 contains:
A29_AMT.bin
fparts.txt
fpt.exe

I need the complete sentence by sentence details how to make an A30_AMT.bin fparts.txt fpt.exe.
Download location for Intel FIT Flash Image Tools ? And exact line description for download.
Intel Management Engine: Drivers, Firmware & System Tools
Will it be faster for somebody to make rather than explain the how to details?
Thank you.

Itā€™s mentioned to begin a new thread, for help, as this thread has been quiet?