Zitat von plutomaniac im Beitrag #89

---

The CPU is vPro capable, so is the chipset (Q77 - right?) and the modded ME firmware. The only remaining place is the BIOS which is were I assume Dell has placed the restriction. What you can try is replacing it with the stock one provided at their download site once the executable is unpacked. Note that you'll loose some info such as Serial Number, Service Tag or similar. What you can do though, if you want to test it and verify that the restriction is there, is to backup your current BIOS ("fptw -bios -d bios.bin") or better yet the entire SPI chip ("fptw -d spi.bin") for safekeeping and then flash the stock one ("fptw -bios -f section_0_A.25.data"). I've attached the cleaned/updated/AMT-enabled ME firmware region, based on the dump you provided earlier, as well as the latest stock BIOS A25 from Dell. You can either flash specific regions with "fptw -me -f me_clean.bin" and "fptw -bios -f section_0_A.25.data" or dump ("fptw -d spi.bin") and mod (UEFITool) your entire SPI image by "Replacing as is" the aforementioned regions and then flashing back ("fptw -f spi_mod.bin").

---

Zitat von plutomaniac im Beitrag #92

---

At this point we have to assume it is a hardware restriction, meaning motherboard design. Usually people see "ME Disable" and not "ME Lockout" tag. We have been successful in fixing the former every time. Maybe you can ask Dell to tell you what "ME Lockout" means exactly. For now, restore your backup BIOS to get back all system-specific info.

---

Zitat von plutomaniac im Beitrag #94

---

Does the new motherboard also have a "ME Lockout" tag? If it does and the limitation is motherboard design based, nothing will change. Hopefully you picked a replacement motherboard with AMT enabled or at least with "ME Disable" tag (which has been verified to work, after the ME firmware mod, multiple times in the past). Anyway, here is the cleaned/updated/AMT-Enabled SPI image based on your previous attached dump.

---

Can this ME Lockout message be related to Anti-theft being activated or maybe TPM problem ?

Hey people,

I wondered if anyone can help me here. I don't want to hijack anyone's thread, but I'm experiencing an issue which may have affected people here - or, someone here might be able to help me with.

I have a Dell Optilex 7010 SFF. It came with a sticker inside that states "ME DISABLED". My goal is to enable ME so I can use the IP/KVM functionality. I have followed the instructions from earlier in the thread, which are as follows:

1. Flash BIOS to A25
2. Reboot
3. Reset BIOS to defaults
4. Reboot
5. Adjust BIOS settings to your liking
6. Shutdown
7. Set jumper to Service mode
8. Flash me_fix.bin via "fpt -rewrite -me -f me_fix.bin"
9. Shutdown
10. Set jumper back to normal mode
11. Perform ME reset via "fpt -greset"
12. Reboot
13. AMT should be operational

Unfortunately, although MEBx is now available in the boot options list, after logging in with the default password "admin", I am immediately required to change this password. It doesn't matter what password I attempt to change it to (I have looked up the complexity requirements), but it is rejected each time. I have attempted entering passwords that consist of upper case, lower case, numbers and symbols (such as '!'), but it will not accept the new password and I therefore cannot proceed with provisioning of AMT.

I have also reset the CMOS (using the appropriate jumper), but this did not help.

Any help would be much appreciated.

Zitat von plutomaniac im Beitrag #99

---

That difficulty shouldn't be related to the firmware modifications. Here is a MEBx User Guide for you to see what is required when changing the password (chapter 3.3).

---

Zitat von plutomaniac im Beitrag #101

---

There should't be any problem.

---

Hi,

Yesterday i successfully reactive the Intel AMT MEBx function on a Dell Optiplex 9010 with ME 3 Status (AMT disabled). I use A26 Bios and a Windows 8.1 OS for modification. This evening i'll provide my SPI Dump with ME and KVM enabled.
1Question = In the full SPI Dump? Is there Service Tag and Serial Number included ?



best regards, florian

// Update //

The ZIP File must be renamed to .7z.

// Process //
Set Service Mode Jumper
Flash SPI DUmp fptw64 -f outimage.bin
Shutdown PC / Remove Service Mode Jumper
StartUp
Run fptw64 -greset

Now you should have access to MBEx (STRG+P)

WARNING: Maybe you'll get my S/N and ServiceTag. It could be that you have to remove them from Image

Good luck

Two things:

I've heard rumors that "ME Lockout" or "Permanently Disabled" physically and irreversibly disables some functionality of the Management Engine, possibly by blowing a fuse. I can't remember where I heard it from, so it may be bunk.

Secondly, I now have a 7010 here and would like to enable full manageability on it. Is there an ME region in this thread I can use, or will mine need to be modified? I've attached it just in case.