Hi there,
I bought a couple of HP Elite Slice G1, second hand, especially for the out-of-band KVM capability but sadly mine came without the entire section of “Remote Management Options” in bios (the highlighted in photo is from manual, in my case is missing entirely). Also they have a customized business logo but this is minor, tough an indication that someone played with the default BIOS.
Any hint how I can restore the AMT section?
Thanks!
What are the specs of these machines? Chipset, CPU, network card is needed.
Oh, sorry, thanks for asking; I5 7500T, Q170, Intel i219-LM… - all of these should support VPRO/AMT
Dump a firmware, open it in FIT, check for AMT settings in ME.
The procedure of enabling AMT in FIT is identical to this guide, in addition some settings have to be changed:
(link corrected)
Thanks! Lot of info… I’ll have a look
No.
See the updated link in my post, see post #1 there for the guide
And post the ME type, has to be Corporate H for ME 11
@lfb6 - right! So, I’ve identified the correct version of FIT for my platform (11.8) and now I guess I have to open the dumped firmware in either .bin or .xml format… How do I dump a firmware? (I know, stupid question…)
OK, so from CSME system tools v.11 (from where I used FIT) I’ve run Flash Programming Tool (FPTw64.exe) at the command prompt and I dumped the BIOS (HP7500.bin) and ME(HP7500me.bin) into the attached .zip file… (that is 2 out of 6 possibilities)
7500.zip (7.9 MB)
After modifying AMT fields in FIT and after building the image in FIT a 16MB .bin file results, while HP issues a 9MB official file… the FIT generated one is not recognized as valid BIOS update file anyway… Do I need to convert somehow the greater file into an HP “standard”?
Did you replace the ME subpartition with a ‘fresh’ one from the repository? Simply changing settings and rebuild doesn’t work in most cases.
Enabled TLS?
Flashing- If the machine has a service jumper the ME alone can be flashed by fpt, otherwise it’s the hardware programmer.
Be careful- fpt flashes everything without warning!
@lfb6 - My workflow so far was; dump the actual BIOS with FPT, modify AMT fields/settings with FIT (including TLS enable), (re)build image with FIT, put it on USB, trying if works from BIOS setup (F10) using BIOS update function… I don’t know from where should I get a “fresh” ME subpartition?
Regarding the jumper, there is only one jumper on mobo for password reset, that’s it!.. But, in the official manual > Advanced > Remote Management options (which I don’t have at all) > there are these options, see nr.1 and 2 in the right of the picture… so in my case I assume it’s disabled so I can try flashing with FPT (as soon as I figure out the ME subsection)
So I guess my assumption was wrong, I tried to flash back the modified image with FPT and I received an error… is this how behaves when you don’t have a dedicated jumper on mobo?
Well the forum has a Intel Managment Engine section to read and learn, i would advise you so, also the forum has a search box Search results for ‘368’ - Win-Raid Forum
As lfb6 stated, flash by fpt if unlocked (by service jumper if present/unlocked by other methods) or hw programmer, IC soldered on pcb programmed outside.
So yes, usually a service jumper can allow access to partital or whole SPI IC bios regions, for read/write operations.
Good luck.
@MeatWar - Thank you, you’re right, of course! … just I’m not at that age anymore… 
@lfb6 - I’ve identified a FDO jumper, unpopulated, which I read is used by HP for ME updates (I don’t know how other brands name it)
So, for flashing with FPT you say that simply changing those fields in FIT doesn’t work? I still don’t know what “fresh” ME section means or how will I embed into the final file… or I can flash only that section via FPT?
Either the repository as described in the guide or- if version is too new- search the forum.
No.
