I got an OptiPlex 7010 with "ME DISABLED 3".

Can anyone unlock my image?
https://drive.google.com/open?id=1v2vq7r...Dzy-HpTIXkYAzbI

@show - What is "ME Disabled 3" Is this some error, if yes, show image.

this label.

Hahaaaaa! Well, that says it all in big font even!

Do you have flash programmer? if not, check the board over for two pin jumper areas, that say Service, ME, FD, or FDO.. Do you see any of those?

I don't have flash programmer.

There is "SERVICE MODE" pin on my board.

@show - How did you dump 12MB file without programmer, with FPT?

Great you have service mode jumper, download this Intel ME System Tools V8 R3 package if you do not have it already, it's in section "C"
Intel Management Engine: Drivers, Firmware & System Tools

Put a jumper on Service mode, and then inside System Tools package find Flash Programming Tool folder, inside it you will find windows folder. Select that windows folder, hold shift and press right click, then choose open command window here.
Then flash the file using command below
FPTw.exe -me -f fixmereg.bin

Then this command
FPTw.exe -greset

http://s000.tinyupload.com/index.php?fil...413823168523209

Then after reboot, shut down again and remove service mode jumper. If there is error running the -greset command above, run that again now with jumper removed.

If there is any errors, especially "Size" errors, stop, let me know and I will send you full image file instead.
It's better to flash regions when that is all you are fixing, but with split BIOS I'm not sure what FPT does, so stop if any error, do not force or continue.

@Lost_N_BIOS
I got a dump file by using fptw64.exe.
(Sorry, I didn't know this is called the flash programmer.)

Anyway I applied fixmereg.bin given by you,
and Intel AMT is available on my PC now!

Thank you!

@show - when I mention flash programmer (Not flash programming tools folder, as in Intel FPT), I mean hardware flash programmer like CH341A

Glad you were able to find and use Intel FPT, and it's good to hear the ME region posted above fixed the BIOS/AMT for you, thanks for reporting back!

I see that someone else has been able to get AMT access on a Optiplex 7010 that was set as ME 6 Lockout from Dell. We get our systems from a company that refurbishes PCs and get a mix of variations, usually ME 1 or ME 3 from Dell, but I have at least one that is ME 6. I've been able to get the ones that were... I forget what exactly, Intel Management something, updated to full AMT access with KVM, along with the ones that were ME 3 Disabled updated to AMT access. But the one machine that I came across so far (I still have a lot more computers to go through before I know how many more) that is locked out and flashing the ME doesn't enable AMT access. I'm not certain which file it was that they flashed to get it working, though I did see that they lost the serial number and other such information from the flash.
It's been a long time since I've done any BIOS hacking (side note: hot flashing BIOS chips was a fun exercise back in the day) and it seems a lot more sophisticated these days. I read the thread on instructions, but I'm still not certain on what I need to pull, or if I just need to modify something in that other file that someone flashed so that the system doesn't wipe it's own info in regards to serial number, MAC, and whatnot. While for this machine, since we have a lifetime parts warranty, I could just call them up and say the motherboard needs replaced and hopefully get one that isn't locked out, we also got ~60 PCs from a local business that also are set to lockout and I can't get those motherboards replaced. (They're actually a larger motherboard as they aren't the ultra small form factor PCs.)
If you need an image from either one of the working machines or one of the lockout machines, or want to give me a heads up on what I need to do myself to get it to work, just let me know. Thank you.

I grabbed an SPI from a PC with a working AMT that's been updated to the latest BIOS and ME firmware. Went to grab an SPI from the version that is disabled and noticed something interesting. I tried on several, but each one would fail on the Intel ME Firmware update on the first attempt. A second attempt would appear to work correctly and will then show the latest version being installed when running the BIOS update again. However, ME Analyzer shows that the ME was not updated. I then flashed the modified ME from A21 that I used successfully on other AMT disabled PCs on one of the machines and it did update the ME to that version, but when running the A29 update again, it still does not update the ME.

So it appears that I can't do a straight apples to apples comparison on the SPI images of the lockout and working files, but hopefully it is close enough.

Here are the files I grabbed if anyone else would like to take a look while I try and find some time to dive into them.

A29_* are the files from the PC with the working AMT.
DA29_* are the files from the PC with Dell shipping it in AMT lockout mode.
MA29_* are the files from the PC where I applied the modified ME that enables AMT on machines where it was disabled but doesn't seem to have an effect on lockout machines other than actually updating the ME firmware.

Probably only needed the SPI files since flashing just the ME doesn't seem to get these working.

While I do intend to try and get this figured out on my own, I don't mind if someone with a bit more experience with doing this figures it out before me and offers up the needed files. (Preferably with an explanation of how it was done so that 1, it is a learning experience and I can possibly know how to do this for other models in the future and 2, I don't screw up the instructions right now when trying to do it myself and screw up the whole PC. lol)

EDIT >
Files were grabbed using these commands:
FPT -d a29_me.bin -me
FPT -d a29_spi.bin

I haven't even had a chance to sit down and look at the files yet, but with that bit of info, I think I might be able to do that this afternoon after lunch.

Just to make sure my thought process is correct, to get this to work, I would first have to flash the Flash Descriptor (I remember seeing it in an earlier post around page 3 at default view settings to fix an issue with the drivers for 3G modem) then flash the ME?

Thank you so much for your help.

I took what should have been my cleaned SPI image and flashed it to several PCs. It seemed to be a success as I was now able to get into AMT. However, when the computer lab was being used the next morning, it appears that somehow, the MAC addresses (and I believe serial numbers, possibly other settings) were all now being reported identically. This, needless to say, caused a lot of issues in that computer lab. Luckily, it had been the end of the day and I had only got to about 10 of the machines. As a temporary fix, once I figured out what the problem was, I used the registry to have Windows use the old MAC address (I luckily had those from an earlier network scan) for each of the machines while Windows is loaded. Attached is the file I used, if anyone can figure out how to make it not set the serial number/MAC/etc, I'd appreciate it. If you can also tell me how to purposefully make it set a specific serial number/MAC, I can create a handful of versions to reset the affected machines back to having their original MAC and serial numbers.

(It is probably something simple that I screwed up somewhere when following the instructions. In the meantime, would it be possible to just flash the ME from this file with the fptw -rewrite -me command and use the fpt -rewrite -desc command to flash the description instead of flashing the whole file? Or is it something in those bits that is re-writing the serial/MAC?)