Forum - RE: Optiplex 7010 and VPro/AMT/ME

Win-Raid Forum (Drivers - Firmware - Modding) � Special Topics � Intel Management Engine � Optiplex 7010 and VPro/AMT/ME

Page 2 of 11 � Page 1 2 3 4 5 6 ... 11 Page �

Topic settings

Print view

Jump to forum

General & Forum related Topics News / Announcements Forum-related Questions & Suggestions Off Topic Important Drivers (AHCI/RAID, NVMe, USB etc.) General: Storage Drivers (AHCI/RAID, NVMe and USB) Specific: Intel AHCI/RAID Drivers Specific: NVIDIA nForce Chipset Drivers (incl. AHCI/RAID) Specific: NVMe Drivers Other Drivers System Performance RAID Performance AHCI/NVMe Performance Solid State Drives BIOS Modding BIOS Modding Guides and Problems BIOS modules (PCI ROM, EFI and others) BIOS Modding Requests Reports: BIOS Modding Results Offers: Already modded special BIOSes Special Topics Intel Management Engine CPU Microcodes NVMe Support for old Systems Other Tools (not BIOS modding related) Interesting PC Hardware & Software OS related Topics Windows 11 Windows 8-10/Server 2012-2019 Windows 7/Vista/Server 2008 Windows XP/2000/Server 2003 DOS/Windows 3.X/9X/ME - Retro Gaming Other Operating Systems

#16 | RE: Optiplex 7010 and VPro/AMT/ME datum

Fri Apr 22, 2016 5:05 am

That's great. You can now use that me region on all the T1700 systems you ordered with AMT disabled. Don't forget to restore the service jumper after reflashing for the ME to work properly. Enjoy!

reply

#17 | RE: Optiplex 7010 and VPro/AMT/ME datum

Fri May 27, 2016 1:39 am (Last edited: Fri May 27, 2016 10:12 am)

Hello,

I would like to enable vPro on my Optiplex 7010,

Zitat von plutomaniac im Beitrag #2
If you cannot enable it from MEBx or cannot access that menu you will need to mod the ME Region using FITC and enable AMT.

Where do I enable AMT on FITC and how do I build the ME Region me.bin?

Many thanks!

reply

#18 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sat May 28, 2016 6:03 pm

@blackpac

Like the previous person did, attach me a dump of your current system with Flash Programming Tool's command fptw -d spi.bin and attach it here. Your ME region needs to have write access enabled for that so check for any jumpers, bios options or similar, just like I said to the previous person with the same system. I can then build you an AMT enabled ME region for your system.

reply

#19 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun May 29, 2016 12:45 pm

Thank you plutomaniac!

I did

1. Service mode jumper on board
2. fptw64 -d SPI.bin

SPI.bin attached

blackpac has attached files to this post

SPI.zip

reply

#20 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun May 29, 2016 1:15 pm (Last edited: Sun May 29, 2016 1:17 pm)

For some reason the ME region inside that dump causes Flash Image Tool to always crash. It's the first time I'm seeing this. Run Flash Programming Tool with command fptw -greset . After reset, shut down the system, set the jumper and attach a new dump of the system, this time with both commands fptw -d spi.bin and fptw -d me.bin -me .

reply

#21 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun May 29, 2016 2:03 pm (Last edited: Sun May 29, 2016 6:09 pm)

@plutomaniac

I did

1. fptw64 -greset
2. Restart
3. Shutdown
4. Service mode jumper
5. fptw64 -d spi.bin
6. fptw64 -d me.bin -me

blackpac has attached files to this post

reply

#22 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun May 29, 2016 2:23 pm (Last edited: Sun May 29, 2016 2:24 pm)

You did as I asked but the ME region still crashes FITC. Do you happen to have a programmer? If not, I will try asking the original poster for a ME dump since he has the same system. We'll have to wait for his reply because I cannot work with your dump and cannot find another dump online. If you have found another dump online, do share.

@Adam86

Hello Adam86, sorry for the poke. Could you provide a dump of your ME region from the 7010 system you have? If you happen to have one from a programmer and another from fpt while you were testing stuff to get it working, that would be even better.

reply

#23 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun May 29, 2016 9:10 pm (Last edited: Sun May 29, 2016 9:21 pm)

@plutomaniac
I actually do have a programmer :-)
I was able to load the old BIOS dump on FITC before I have updated the BIOS again,
I have tried to mod the SPI.bin myself, flashed it but it didn't work

blackpac has attached files to this post

reply

#24 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun May 29, 2016 11:47 pm (Last edited: Mon May 30, 2016 12:39 am)

blackpac

Show info

Posts:	9
Registered since:	09.06.2015

@plutomaniac
Something is terribly wrong with my BIOS
MEinfowin64 shows ME firmware version is 8.1.65.1586, Exactly how it should be in BIOS version A21
but Dells A21 BIOS update file shows ME firmware version 8.1.40.1416... could that be the problem?

Update:

I have flashed BIOS A21 twice and it solved the ME firmware version

Now...On MEManufWin64 I get

1
2
3
4
 
Error 9367: Firmware is in recovery mode
Error 9328: Internal error
 
Error 9296: MEManuf Test Failed
 

On MEInfoWin64 I get

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
 
Intel(R) ME code versions:
 
BIOS Version:                           A21
MEBx Version:                           0.0.0.0000
Gbe Version:                            1.3
VendorID:                               8086
PCH Version:                            4
FW Version:                             8.1.65.1586
UNS Version:                            Not Available
LMS Version:                            Not Available
MEI Driver Version:                     8.1.0.1263
Wireless Hardware Version:              Not Available
Wireless Driver Version:                Not Available
 
FW Capabilities:                        0x00111C60
 
    Intel(R) Anti-Theft Technology - PRESENT/ENABLED
    Intel(R) Capability Licensing Service - PRESENT/ENABLED
    Protect Audio Video Path - PRESENT/ENABLED
    Intel(R) Dynamic Application Loader - PRESENT/ENABLED
 
CPU Upgrade State:                      Not Upgradable
Cryptography Support:                   Disabled
Last ME reset reason:                   Power up
Local FWUpdate:                         Enabled
BIOS Config Lock:                       Enabled
GbE Config Lock:                        Enabled
Host Read Access to ME:                 Disabled
Host Write Access to ME:                Disabled
SPI Flash ID #1:                        20BA17
SPI Flash ID VSCC #1:                   20052005
SPI Flash ID #2:                        20BA16
SPI Flash ID VSCC #2:                   20052005
SPI Flash BIOS VSCC:                    20052005
BIOS boot State:                        Pre Boot
OEM Id:                                 68853622-eed3-4e83-8a86-6cde315f6b78
 
Error 8199: Communication error between application and Intel(R) ME (Get Intel(R
) AMT State)
 
Error 8199: Communication error between application and Intel(R) ME (Get System
UUID)
 
Error 8199: Communication error between application and Intel(R) ME (Get Ipv4 In
fo)
 
Error 8199: Communication error between application and Intel(R) ME (Get Ipv4 In
fo)
 
Error 8199: Communication error between application and Intel(R) ME (Get Provisi
oning State)
 
Error 8199: Communication error between application and Intel(R) ME (Get Provisi
oning Mode)
Capability Licensing Service:           Enabled
Capability Licensing Service Status:    Permit info not available
OEM Tag:                                0x00000000
Wireless Micro-code Mismatch:           No
Wireless Micro-code ID in Firmware:     0x0082
Wireless LAN in Firmware:               Intel(R) Centrino(R) Ultimate-N 6205
Wireless Hardware ID:                   No Intel WLAN card installed
Wireless LAN Hardware:                  No Intel WLAN card installed
Localized Language:                     English
Independent Firmware Recovery:          Disabled
 

I have cleared CMOS - no change

reply

#25 | RE: Optiplex 7010 and VPro/AMT/ME datum

Mon May 30, 2016 1:54 am

@plutomaniac @Adam86

SUCCESS!!!

After flashing the BIOS twice and corrected ME FW version I have updated ME to v8.1.70.1590 and got no more errors from MEInfoWin64
Than with FPT I took a new SPI.bin dump and loaded it up on FITC - NO CRASH ;-)
Edited the appropriate settings, Flashed back, switch off, Cleared CMOS, power on, CTRL+P and... VOILA - GOT THE MEBx Menu :-)

Thank you so much for your help!

Attached - Delll Optiplex 7010 A21 ME v8.1.70.1590 UNLOCKED SPI.bin

blackpac has attached files to this post

SPI.zip

reply

#26 | RE: Optiplex 7010 and VPro/AMT/ME datum

Mon May 30, 2016 2:23 am

@blackpac

Regarding MEManuf and MEInfo, "Firmware is in recovery mode" means that you have the jumper set. You need to move it to default/operational position first before using MEInfo and MEManuf.

Yes, your new dump is finally usable with FITC. I imagine that your previous ME region was corrupted, you just didn't know about it. I checked the dumped ME region and saw some things which I improved. So, use the ME Region I have attached below. Flash it with Flash Programming Tool's command fptw -rewrite -me -f ME_7010_AMT.bin followed by a fptw -greset once it's successful. After the reset, restore the jumper to it's original position and restart. Then check MEInfo and MEManuf.

Compared to your AMT-enabled ME region I have made these changes:

a) Cleaned-up the ME region DATA section so that no trash is left behind, based on this guide.
b) ME > Hide FW Update Control --> False (so that you can enable or disable FWUpdate from MEBx)
c) Features Supported > Anti-Theft Disabled --> Yes (AT has been EOL since January 2015 and must be disabled to avoid issues)

Notice that this is only the ME region of the full SPI image, thus the -me parameter at FPT. Additionally, you can also enable read/write access to the ME Region by altering the Flash Descriptor so that you won't have to set the jumper or use a programmer if you want to perform additional changes in the future.

plutomaniac has attached files to this post

ME_7010_AMT.rar

reply

#27 | RE: Optiplex 7010 and VPro/AMT/ME datum

Mon May 30, 2016 10:23 am

One small addition: ME region should remain locked because otherwise there is a chance it gets corrupted during BIOS update or even normal POST. I still don't know all conditions are needed for this corruption to trigger, but having an unlocked descriptor is one of them for sure. Use it for debugging and playing around, but when you finished, use "fpt -lock" command to set descriptor security settings back to defaults.

reply

#28 | RE: Optiplex 7010 and VPro/AMT/ME datum

Mon May 30, 2016 3:07 pm

Sure, especially in this case (hardware jumper/programmer at hand), it's not needed. But for a laptop which requires desoldering etc every time, it's probably worth the risk in my opinion.

reply

#29 | RE: Optiplex 7010 and VPro/AMT/ME datum

Mon May 30, 2016 4:38 pm (Last edited: Mon May 30, 2016 5:08 pm)

@plutomaniac

Zitat von plutomaniac im Beitrag #26
@blackpac

Regarding MEManuf and MEInfo, "Firmware is in recovery mode" means that you have the jumper set. You need to move it to default/operational position first before using MEInfo and MEManuf.

In my case the jumper was set on default/operational position while "Firmware is in recovery mode"

Zitat von plutomaniac im Beitrag #26
Yes, your new dump is finally usable with FITC. I imagine that your previous ME region was corrupted, you just didn't know about it. I checked the dumped ME region and saw some things which I improved. So, use the ME Region I have attached below. Flash it with Flash Programming Tool's command fptw -rewrite -me -f ME_7010_AMT.bin followed by a fptw -greset once it's successful. After the reset, restore the jumper to it's original position and restart. Then check MEInfo and MEManuf.

Compared to your AMT-enabled ME region I have made these changes:

a) Cleaned-up the ME region DATA section so that no trash is left behind, based on this guide.
b) ME > Hide FW Update Control --> False (so that you can enable or disable FWUpdate from MEBx)
c) Features Supported > Anti-Theft Disabled --> Yes (AT has been EOL since January 2015 and must be disabled to avoid issues)

That's brilliant, THANKS!

Update

Everything runs smoothly!
Just a small correction, fptw -greset can only be done after complete shutdown as SERVICE_MODE jumper needs to go back to default/operational position

reply

#30 | RE: Optiplex 7010 and VPro/AMT/ME datum

Sun Aug 28, 2016 2:11 am

Hello,

I would also to enable MEBx on my Optiplex 7010 - Will it be enough flash only "ME region"? Can I use 'ME image' from post #26 (file "ME_7010_AMT.rar")?

I noticed that the sizes ME region images files from "ME_7010_AMT.rar" and from my computer are different: 6242304 vs 6270 976 bytes - don't worry about it?

I attach dumps from my Optiplex 7010 (bios version A21):
1) ME Region - file 'me.bin-Dell_7010_A21.zip' (command 'fptw -d me.bin -me')
2) full dump - file 'spi.bin-Dell_7010_A21.zip' (command 'fptw -d spi.bin')

Thanks

jwlu has attached files to this post

reply

Beginner questions about BIOS and IME on Thinkpad T460 � � ME N/A at Z97 ASUS Maximus Hero VII

Page 2 of 11 � Page 1 2 3 4 5 6 ... 11 Page �

Please enter a reason for warning.