t480s restore AMT settings in BIOS

Special Topics Intel Management Engine
1

HI,

After replacing my wifi card from intel 8265 to ax200 in lenovo t480s Intel AMI AMT settings disappear from BIOS.
When I repleaced to original wifi card intel 8265 still doesen’t have this setting in BIOS.

Is it possible to restore this settings in BIOS?


in MEInfo -verbose see:




full:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
 

Intel(R) MEInfo Version: 11.8.80.3762
Copyright(C) 2005 - 2020, Intel Corporation. All rights reserved.
 

 
Driverless mode
FW Status Register1: 0x94000245
FW Status Register2: 0x090B8506
FW Status Register3: 0x00000030
FW Status Register4: 0x00A84004
FW Status Register5: 0x00001F01
FW Status Register6: 0x44400AC9
 
  CurrentState:                               Normal
  ManufacturingMode:                          Disabled
  FlashPartition:                             Valid
  OperationalState:                           CM0 with UMA
  InitComplete:                               Complete
  BUPLoadState:                               Success
  ErrorCode:                                  No Error
  ModeOfOperation:                            Normal
  SPI Flash Log:                              Present
  FPF HW Source value:                        Original FPF HW Fuse Bank
  ME FPF Fusing Patch Status:                 ME FPF Fusing patch NOT required
  Phase:                                      ROM/Preboot
  ICC:                                        Valid OEM data, ICC programmed
  ME File System Corrupted:                   No
  PhaseStatus:                                CALL_NEXT_MODULE
  FPF and ME Config Status:                   Match
FW Capabilities value is 0x5930124C
Feature enablement is 0x59301248
Platform type is 0x42135421
Found an Intel vPro Wireless device
Intel(R) Manageability and Security Application code versions:
 

SMBIOS Table Data 
    SM BIOS Spec Version :    3.0 
    Starting address:         0x7A634000 
    Table Size in Bytes:        3060   ( 0xBF4 ) 
    Number of Table Entries:   the    63   ( 0x3F ) 
 
    Table Type   0 ( 0x 00 ) found, size of   0 (0x 00 ) bytes 
    Table Type 222 ( 0x DE ) found, size of  72 (0x 48 ) bytes 
    Table Type  14 ( 0x 0E ) found, size of  42 (0x 2A ) bytes 
    Table Type 134 ( 0x 86 ) found, size of  15 (0x 0F ) bytes 
    Table Type  16 ( 0x 10 ) found, size of  25 (0x 19 ) bytes 
    Table Type  17 ( 0x 11 ) found, size of 106 (0x 6A ) bytes 
    Table Type  19 ( 0x 13 ) found, size of  33 (0x 21 ) bytes 
    Table Type   7 ( 0x 07 ) found, size of  29 (0x 1D ) bytes 
    Table Type   4 ( 0x 04 ) found, size of 131 (0x 83 ) bytes 
BIOS Version                                 N22ET66P (1.43 )
 
SMBIOS Table Data 
    SM BIOS Spec Version :    3.0 
    Starting address:         0x7A634000 
    Table Size in Bytes:        3060   ( 0xBF4 ) 
    Number of Table Entries:   the    63   ( 0x3F ) 
 
    Table Type   0 ( 0x 00 ) found, size of   0 (0x 00 ) bytes 
    Table Type 222 ( 0x DE ) found, size of  72 (0x 48 ) bytes 
    Table Type  14 ( 0x 0E ) found, size of  42 (0x 2A ) bytes 
    Table Type 134 ( 0x 86 ) found, size of  15 (0x 0F ) bytes 
    Table Type  16 ( 0x 10 ) found, size of  25 (0x 19 ) bytes 
    Table Type  17 ( 0x 11 ) found, size of 106 (0x 6A ) bytes 
    Table Type  19 ( 0x 13 ) found, size of  33 (0x 21 ) bytes 
    Table Type   7 ( 0x 07 ) found, size of  29 (0x 1D ) bytes 
    Table Type   4 ( 0x 04 ) found, size of 131 (0x 83 ) bytes 
    Table Type   0 ( 0x 00 ) found, size of  60 (0x 3C ) bytes 
    Table Type   1 ( 0x 01 ) found, size of 127 (0x 7F ) bytes 
    Table Type   2 ( 0x 02 ) found, size of  89 (0x 59 ) bytes 
    Table Type   3 ( 0x 03 ) found, size of 107 (0x 6B ) bytes 
    Table Type   8 ( 0x 08 ) found, size of  30 (0x 1E ) bytes 
    Table Type 126 ( 0x 7E ) found, size of  30 (0x 1E ) bytes 
    Table Type   8 ( 0x 08 ) found, size of  30 (0x 1E ) bytes 
    Table Type 126 ( 0x 7E ) found, size of  30 (0x 1E ) bytes 
    Table Type   8 ( 0x 08 ) found, size of  37 (0x 25 ) bytes 
    Table Type 126 ( 0x 7E ) found, size of  37 (0x 25 ) bytes 
    Table Type   8 ( 0x 08 ) found, size of  57 (0x 39 ) bytes 
    Table Type   9 ( 0x 09 ) found, size of  31 (0x 1F ) bytes 
    Table Type  12 ( 0x 0C ) found, size of   7 (0x 07 ) bytes 
    Table Type  13 ( 0x 0D ) found, size of  29 (0x 1D ) bytes 
    Table Type  22 ( 0x 16 ) found, size of  55 (0x 37 ) bytes 
    Table Type 126 ( 0x 7E ) found, size of  28 (0x 1C ) bytes 
    Table Type 133 ( 0x 85 ) found, size of  21 (0x 15 ) bytes 
    Table Type 135 ( 0x 87 ) found, size of  21 (0x 15 ) bytes 
    Table Type 130 ( 0x 82 ) found, size of  22 (0x 16 ) bytes 
MEBx Version                                 11.0.0.0010
GbE Version                                  0.1
Vendor ID                                    8086
PCH Version                                  21
FW Version                                   11.8.83.3874 LP
Security Version (SVN)                       3
MEI Driver Version                           Not Available
                                             
FW Capabilities                              0x5930124C
                                             
        Intel(R) Small Business Technology - PRESENT/DISABLED
        Intel(R) Capability Licensing Service - PRESENT/ENABLED
        Protect Audio Video Path - PRESENT/ENABLED
        Intel(R) Dynamic Application Loader - PRESENT/ENABLED
        Service Advertisement & Discovery - PRESENT/ENABLED
        Intel(R) NFC Capabilities - NOT PRESENT
        Intel(R) Platform Trust Technology - NOT PRESENT
                                             
Re-key needed                                True
Platform is re-key capable                   True
Intel(R) AMT State                           Disabled
AMT Global State                             Disabled
TLS                                          Enabled
Last ME reset reason                         Power up
Local FWUpdate                               Enabled
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Get flash master region access status...done
Host Read Access to ME                       Enabled
Host Write Access to ME                      Disabled
Get EC region access status...done
Host Read Access to EC                       Disabled
Host Write Access to EC                      Disabled
Protected Range Register Base #0 0x89D
Protected Range Register Limit #0 0x89F
Protected Range Register Base #1 0x8A0
Protected Range Register Limit #1 0xE8F
Protected Range Register Base #2 0xE90
Protected Range Register Limit #2 0xE9F
Protected Range Register Base #3 0xEA0
Protected Range Register Limit #3 0xFFF
Protected Range Register Base #4 0x0
Protected Range Register Limit #4 0x0
SPI Flash ID 1                               C22018
SPI Flash ID 2                               Unknown
BIOS boot State                              Post Boot
OEM ID                                       =[CUT]=
Capability Licensing Service                 Enabled
OEM Tag                                      0x00000000
Slot 1 Board Manufacturer                    0x000017AA
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Enabled
C-link Status                                Enabled
Localized Language                           English
Independent Firmware Recovery                Disabled
EPID Group ID                                0x1041
                                             
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Enabled        
Retrieving Variable "Force Boot Guard ACM Enabled" 
          Enabled
Protect BIOS Environment                     Enabled        
Retrieving Variable "Protect BIOS Environment Enabled" 
          Enabled
CPU Debugging                                Enabled        
Retrieving Variable "CPU Debugging" 
          Enabled
BSP Initialization                           Enabled        
Retrieving Variable "BSP Initialization" 
          Enabled
Measured Boot                                Disabled       
Retrieving Variable "Measured Boot Enabled" 
          Disabled
Verified Boot                                Enabled        
Retrieving Variable "Verified Boot Enabled" 
          Enabled
Key Manifest ID                              0x1            
Retrieving Variable "Key Manifest ID" 
          0x1
Enforcement Policy                           0x3            
Retrieving Variable "Error Enforcement Policy" 
          0x3
                                             
 
Unable to clean up MEInfo before exiting.
 
 
2

You do mean AMT settings, not AMI settings? AMT requires vpro capable chipset, processor, network card. If you replace one of these parts, system has normally to be configured again. In addition you didn’t have AMT enabled when you ran MEInfo. Either there’s still a non- vpro part in the setup or if everything is ‘vpro’ you might have to reset ME by a fpt(w(64)) -greset at the administrator command prompt.

3

Yes, I mean AMT, my mistate.

Edit by Fernando: Unneeded parts of the fully quoted post removed (to save space)

4

After fpt(w(64)) -greset, I still don’t have AMT settings in BIOS, the only think that has changed is:

1
2
3
 
Re-key needed                                False
Last ME reset reason                         Global system reset
EPID Group ID                                0x2042
 
5

If that’s still
"Intel(R) Small Business Technology - PRESENT/DISABLED
…
Intel(R) AMT State Disabled
AMT Global State Disabled"
then this isn’t a vpro system and there’s no AMT configuration.

You neither have Intel(R) Active Management Technology nor Intel(R) Standard Manageability, just Intel Small Business Technology. There were vpro and non- vpro configurations og the t480s. If in doubt post a screenshot of cpuz processor tab and chipset tab.

6

CPU: Intel(R) Core™ i5-8350U

t480_mb.PNG

t480s_cpu.PNG

7

Each generation of AMT works with specific WLAN devices only. CSME 11.8 works with Snowfield Peak and Windstorm Peak.

8

i put back wifi card which was orginaly with this t480s
@plutomaniac i have 8265

9

Is the 8265 WiFi card recognized?

10

Yes it is recognized and I’m using it now.

In output from MEInfo which I add in first post there is:
Found an Intel vPro Wireless device

AMT settings before replacing wifi card to ax200 has been visable in BIOS.

11

Well, plutomaniac knows this stuff best, but it seems that he doesn’t follow this thread any longer.

ME 9 corrects itself when changing between non-vpro and vpro setup, newer versions can need a reset (fpt(w(64)) -greset at the administrator command prompt. MEInfo doesn’t indicate corruption of the ME, but that’s not always a 100% reliable.
There’s a ME update on Lenovo’s website, try to run it. If it won’t run it might be ME itself.

Could be bios settings, too. Some Thinkpad E460 disables AMT when you change from Discrete TPM to Intel PTT for example. Is “Lock Uefi BIOS settings” enabled?

Did you reset bios settings to Setup defaults?

12

I also tried re-upgrading intel me but nothing has changed.
Regarding reset bios settings I pulled bios battery out for 1 minute and the only thing that has reset was data settings.
It it possible that the battery shoud be out more then 1 minute?

I have disabled TPM for now

EDIT:
I turned on TPM 2.0 but no changes
Lock Uefi BIOS settings is disabled

13

Not the CMOS battery- load setup defaults on the bios restart menu.

14

nothing has changed after - load setup defaults :confused:
@plutomaniac do you have an idea?

15

I don’t understand what the problem is now. As I said, AMT settings will appear only if a compatible Wi-Fi card is installed. You need to perform a general reset (CSE + CPU) at every such change. Use Flash Programming Tool with parameter “fptw64 -greset”. Alternatively, power down the system, remove all power for 1 minute (AC/Battery, not RTC), try to power it on a few times and re-connect power.

16

His 8265 vpro wireless card was in place again in #1, output of MEInfo in #1 (spoiler)

"Found an Intel vPro Wireless device"



Already asked him to do a ‘fptw64 -greset’ in #4, change in output MEInfo was:

#5 “Last ME reset reason Global system reset”

17

@plutomaniac I used a different wifi card for a while but I brought the original one back and I would also like to restore the AMT

18

The issue is either with BIOS NVRAM or CSME Initialization. For BIOS NVRAM, re-apply the latest BIOS and reset settings to default (perform a clear CMOS). For CSME Initialization, if BIOS NVRAM does not help, follow these instructions.

19

did a reinstall using:
fwupdmgr install --allow-reinstall ./n22ul25w/N22HT37W.cab
fwupdmgr install --allow-reinstall ./n22ul25w/N22ET66P.cab

but nothing has changed,
Now I also have a problem with high power consumption during sleep(suspend)

20

I would like to add that I suffer the exact same phenomenon on a different Lenovo notebook computer and started my own thread about it. But to add to this discussion: I changed wlan adapter on my X1 Yoga 2nd Generation from AC 8265 to AX 210. Now suddenly my management engine went from 5MB full corporate to Small Business Technology. I did BIOS reset, CMOS battery disconnection. Have latest AMT firmware from Lenovo and also tried latest from this site (11.8 CSME Corporate LP no power mitigation). I also put back the original wlan card. It stubbornly stays at SmallBusinessTech instead of full corporate. It must be something in the data ME region of the SPI flash. Would anyone be willing to help me reset the ME data region? Thanks in advance, and a happy New Year.

FW Capabilities 0x5930164C

Intel(R) Small Business Technology - PRESENT/ENABLED
Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Service Advertisement & Discovery - PRESENT/ENABLED
Intel(R) NFC Capabilities - NOT PRESENT
Intel(R) Platform Trust Technology - NOT PRESENT

How to change the FW Capabilities variable from Small Business Technology to full corporate CSME?

MEInfoWinVerbose.txt (8.7 KB)