Forum - Intel Management Engine » Activate PTT in ME firmware

Win-Raid Forum (Drivers - Firmware - Modding) � Special Topics � Intel Management Engine � Activate PTT in ME firmware

Page 1 of 3 � Page 1 2 3 Page �

Topic settings

Print view

Jump to forum

General & Forum related Topics News / Announcements Forum-related Questions & Suggestions Off Topic Important Drivers (AHCI/RAID, NVMe, USB etc.) General: Storage Drivers (AHCI/RAID, NVMe and USB) Specific: Intel AHCI/RAID Drivers Specific: NVIDIA nForce Chipset Drivers (incl. AHCI/RAID) Specific: NVMe Drivers Other Drivers System Performance RAID Performance AHCI/NVMe Performance Solid State Drives BIOS Modding BIOS Modding Guides and Problems BIOS modules (PCI ROM, EFI and others) BIOS Modding Requests Reports: BIOS Modding Results Offers: Already modded special BIOSes Special Topics Intel Management Engine CPU Microcodes NVMe Support for old Systems Other Tools (not BIOS modding related) Interesting PC Hardware & Software OS related Topics Windows 11 Windows 8-10/Server 2012-2019 Windows 7/Vista/Server 2008 Windows XP/2000/Server 2003 DOS/Windows 3.X/9X/ME - Retro Gaming Other Operating Systems

#1 | Activate PTT in ME firmware datum

Mon Jan 22, 2018 2:18 am

cam234

Show info

Posts:	43
Registered since:	06.30.2016

I got this EVGA board that for some reason does not seem to have PTT/TPM2 enabled (did not think to check in this day and age). There does not have to be a TPM socket like ASUS boards.

Fortunately the descriptors seem to be unlocked. But PTT is not listed at all (not PRESENT/DISABLED) just missing. The ME is current thus does not need to be updated - or does it since PTT is not even listed as present in the firmware?

I've read the clean-up guide - but since BIOS/ME are OK - is it just a case of dumping the spi, modifying the flags in FIT and then just flashing it back?

Thanks for the guide and sorry for all the questions - just don't want to "screw it up" and return it if PTT cannot be enabled ;(

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
 
BIOS Version                                 1.12
MEBx Version                                 0.0.0.0000
GbE Version                                  0.2
Vendor ID                                    8086
PCH Version                                  0
FW Version                                   11.11.50.1436 H
Security Version (SVN)                       3
LMS Version                                  11.7.0.1058
MEI Driver Version                           11.7.0.1045
                                             
FW Capabilities                              0x00100140
                                             
	Intel(R) Capability Licensing Service - PRESENT/ENABLED
	Intel(R) Dynamic Application Loader - PRESENT/ENABLED
 
<PTT not even listed here at all - missing from ME firmware?>
                                             
Re-key needed                                False
Platform is re-key capable                   True
TLS                                          Disabled
Last ME reset reason                         Firmware reset
Local FWUpdate                               Enabled
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Host Read Access to ME                       Enabled <- cool
Host Write Access to ME                      Enabled <- cool
Host Read Access to EC                       Enabled
Host Write Access to EC                      Enabled
SPI Flash ID 1                               C84018
SPI Flash ID 2                               Unknown
BIOS boot State                              Pre Boot
OEM ID                                       00000000-0000-0000-0000-000000000000
Capability Licensing Service                 Enabled
OEM Tag                                      0x00000000
Slot 1 Board Manufacturer                    0x00000000
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Disabled
C-link Status                                Disabled
Independent Firmware Recovery                Disabled
EPID Group ID                                0x1FD5
LSPCON Ports                                 None
5K Ports                                     None
OEM Public Key Hash FPF                      Not set
OEM Public Key Hash ME                       0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF                                  0x0
KM SVN FPF                                   0x0
BSMM SVN FPF                                 0x0
                                             
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Not set                  Disabled
Protect BIOS Environment                     Not set                  Disabled
CPU Debugging                                Not set                  Enabled
BSP Initialization                           Not set                  Enabled
Measured Boot                                Not set                  Disabled
Verified Boot                                Not set                  Disabled
Key Manifest ID                              Not set                  0x0
Enforcement Policy                           Not set                  0x0
 

reply

#2 | RE: Activate PTT in ME firmware datum

Mon Jan 22, 2018 2:46 pm

Which EVGA motherboard are you referring to? Since you have FD read/write access, you can dump your SPI image and adjust settings in Flash Image Tool (FIT) > Platform Protection. Then flash back.

reply

#3 | RE: Activate PTT in ME firmware datum

Mon Jan 22, 2018 3:41 pm

Thanks for replying.

It is the X299-Micro. If you want to look the the BIOS (or I can upload SPI?) http://cdn.evga.com/BIOS/X299/E295_flashtool_112.zip

I've loaded the SPI in FIT and the PTT flags are disabled. If I just turn them on/enable and rebuilt in FIT - do I flash full SPI or just ME region with flash tool?

I'm also not sure what kind of init (just -greset?) is required for ME to use the new flags (I remember when Intel changed the NUC ME to increase OPI bus rate for NVME SSDs it needed a complete BIOS recovery not just a flash for the new flags to take)

reply

#4 | RE: Activate PTT in ME firmware datum

Mon Jan 22, 2018 6:02 pm

Use the EVGA SPI/BIOS image (1E295112.bin) at FIT and adjust PTT settings to your liking. Then build the new SPI/BIOS (outimage.bin). Since you only need to re-flash the Engine region (not the entire SPI), use UEFITool to extract the Engine region from outimage.bin and flash it via "fptw -me -f outimage_me.bin" command followed by "fptw -greset", if successful.

reply

#5 | RE: Activate PTT in ME firmware datum

Mon Jan 22, 2018 10:05 pm

Unfortunately I've done the above and it is not taking.

1. I modified 1E295112.bin in FIT - changed "Intel PTT Supported: No" to "Yes"
2. Built it with FIT.
3. Deleted all intermediates, opened "out_image.bin" in FIT - checked that "Intel PTT Supported: Yes"
4. Exported ME.bin with UEFI tool - 4MB.

5. Flashed ME.bin. Performed reset.
6. Upon reboot, PTT still not shown (checked MEInfo - same result no changes whatsoever)

7. Dumped whole SPI. Loaded it in FIT - same as before "Intel PTT Supported: No"

It seems the PTT value does not stick. Any ideas? Should I start with clean ME - is it possible the code (for PTT) itself is missing from the ME firmware EVGA provides? Flash the whole SPI BIOS?

I can post SPI if needed, also original and the one I've modified - done it 4 times, no change. Should I reset CMOS? Wipe NVRAM?

Thanks!

reply

#6 | RE: Activate PTT in ME firmware datum

Tue Jan 23, 2018 1:43 am

The firmware is the same for all OEMs, all configuration is then done via FIT. So unless the platform does not support PTT (I think it does), setting it via FIT should enable it. It doesn't make sense for an option to be reset back once set in FIT. In such case, it is possible that EVGA has implemented some sort of firmware restoration procedure. I can't see something at the SPI/BIOS image that would indicate that though. Try the attached CSME region via "fptw -rewrite -me 1E295112_ptt_me.bin" followed by "fptw -greset". After the reboot, go into the BIOS and make sure that any Platform Trust Technology (PTT) option is set to Enabled. That should be enough.

plutomaniac has attached files to this post

1E295112_ptt_me.rar

reply

#7 | RE: Activate PTT in ME firmware datum

Mon Jan 29, 2018 7:41 pm

Sure - the Asus X299-A I've tried and pretty much everything else does support PTT - it did not even occur to me that EVGA would specifically disable it (I got a deal).

Somehow - the above does not work either. I think I may have an explanation for you - in FIT there is a 2nd disable option which says "warning disabling this will permanently disable PTT" and I think both settings were "No" aka disabled originally - unfortunately due to so many flashings I cannot be 100% certain. Otherwise I cannot explain why it does not stick. I am pretty sure I've not disabled anything myself. Unless the board itself is "defective" in a very strange way.

The only other way I can try - is remove the BIOS (it's socketed) and try a clean BIOS chip (programmed externally) - even without any data (serials, MAC, etc) with the modified ME - and see whether this does come up with ME enabled. I have the programmer and everything just need to find the time to do it.

I would like to thank you for all your help. Many thanks.

reply

#8 | RE: Activate PTT in ME firmware datum

Mon Jan 29, 2018 8:01 pm (Last edited: Mon Jan 29, 2018 8:02 pm)

By 2nd option I assume you mean "PTT Supported [FPF]". Indeed, if that was set to "No" (Disabled) at the initial SPI flash and first motherboard boot at the EVGA factory, PTT would be permanently set to Disabled. That option sets a PCH Field Programmable Fuse (FPF) which is permanent and would require a new PCH to adjust. There is no need for you to re-flash any changed SPI/CSME firmware in such case. Thing is, I don't understand why EVGA would (potentially) do such a thing on a high-end X299 motherboard for custom system builds. I think you can check if PTT is disabled via FPF via "MEInfo -verbose" tool. Can you take a look?

reply

#9 | RE: Activate PTT in ME firmware datum

Tue Jan 30, 2018 3:20 pm

cam234

Show info

Posts:	43
Registered since:	06.30.2016

Of course - anything you wish ;)

Attached MeInfo -verbose to this post - please let me know what else you want me to run. Strangely FPF says "not set" for everything - PTT just does not feature at all (!) and "PTT" and the rest show as "not present" rather than "disabled". That's why I find it confusing why they are "missing" and not disabled. It's the FW Caps that are just missing completely.

I will get you a corresponding Asus X299-A if you need to see it. It MEInfo dump is completely different. Should I try to extract ME from it and flash to the EVGA?

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
 
FW Capabilities                              0x00100140
                                             
	Intel(R) Capability Licensing Service - PRESENT/ENABLED
	Intel(R) Dynamic Application Loader - PRESENT/ENABLED
	Service Advertisement & Discovery - NOT PRESENT
	Intel(R) NFC Capabilities - NOT PRESENT
	Intel(R) Platform Trust Technology - NOT PRESENT
 
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Not set        
Retrieving Variable "Force Boot Guard ACM Enabled" 
          Disabled
Protect BIOS Environment                     Not set        
Retrieving Variable "Protect BIOS Environment Enabled" 
          Disabled
CPU Debugging                                Not set        
Retrieving Variable "CPU Debugging" 
          Enabled
BSP Initialization                           Not set        
Retrieving Variable "BSP Initialization" 
          Enabled
Measured Boot                                Not set        
Retrieving Variable "Measured Boot Enabled" 
          Disabled
Verified Boot                                Not set        
Retrieving Variable "Verified Boot Enabled" 
          Disabled
Key Manifest ID                              Not set        
Retrieving Variable "Key Manifest ID" 
          0x0
Enforcement Policy                           Not set        
Retrieving Variable "Error Enforcement Policy" 
          0x0
 

reply

#10 | RE: Activate PTT in ME firmware datum

Tue Jan 30, 2018 3:22 pm

cam234

Show info

Posts:	43
Registered since:	06.30.2016

Here is Asus X299-A:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
 
FW Capabilities                              0x20110540
                                             
	Intel(R) Capability Licensing Service - PRESENT/ENABLED
	Intel(R) Dynamic Application Loader - PRESENT/ENABLED
	Service Advertisement & Discovery - NOT PRESENT
	Intel(R) NFC Capabilities - NOT PRESENT
	Intel(R) Platform Trust Technology - PRESENT/ENABLED
 
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Disabled       
Retrieving Variable "Force Boot Guard ACM Enabled" 
          Disabled
Protect BIOS Environment                     Disabled       
Retrieving Variable "Protect BIOS Environment Enabled" 
          Disabled
CPU Debugging                                Enabled        
Retrieving Variable "CPU Debugging" 
          Enabled
BSP Initialization                           Enabled        
Retrieving Variable "BSP Initialization" 
          Enabled
Measured Boot                                Disabled       
Retrieving Variable "Measured Boot Enabled" 
          Disabled
Verified Boot                                Disabled       
Retrieving Variable "Verified Boot Enabled" 
          Disabled
Key Manifest ID                              0x0            
Retrieving Variable "Key Manifest ID" 
          0x0
Enforcement Policy                           0x0            
Retrieving Variable "Error Enforcement Policy" 
          0x0
PTT                                          Enabled        
Retrieving Variable "Intel(R) PTT Supported" 
          Enabled
PTT Lockout Override Counter                 0x1
EK Revoke State                              Revoked
PTT RTC Clear Detection FPF                  0x0
 

Ouch I see he's got EK Revoke set - must tell him to re-init it ;))

cam234 has attached files to this post

asus_x299_me11.11.txt

reply

#11 | RE: Activate PTT in ME firmware datum

Tue Jan 30, 2018 3:33 pm (Last edited: Tue Jan 30, 2018 3:33 pm)

Doing a Diff on the 2 I see on EVGA:

ManufacturingMode: Enabled

Is that relevant? Do we need to disable that? Also

FPF and ME Config Status: Not committed

On Asus they say "Match". Is that why FPF does not take?

Obviously all Fw Caps, Feature Caps are different. Shall we copy those?

Thankfully EVGA has Host R/W enabled but Asus has them disabled. But I have a feeling that once we commit the FPF data host access will go?

Many thanks for replying back - I hope this helps.

reply

#12 | RE: Activate PTT in ME firmware datum

Tue Jan 30, 2018 5:17 pm (Last edited: Tue Jan 30, 2018 8:43 pm)

The FPF state of your EVGA motherboard is not Committed exactly because Manufacturing Mode is enabled, which also allows Read/Write access to the Engine region.

The Engine firmware is properly configured. I'm fairly certain that the problem is with the BIOS as PTT must be currently set to Disabled there. Are you sure that you cannot see any menu relating to PTT or Platform Trust Technology? Maybe under a TPM or Trusted Platform Module menu? Usually it's called "PTT Configuration" though. If it's not there, obviously EVGA forgot to enable it for the end user to configure TPM or PTT so you should let them know and wait for a new BIOS update.

reply

#13 | RE: Activate PTT in ME firmware datum

Tue Jan 30, 2018 7:56 pm

Sorry but surely this means ME has not been fully configured either by mistake so we need to commit ME config? Isn't the fix toggling ME out of manufacturing mode?

PTT just seems to be a symptom of the ME being in manufacturing mode and thus the configuration is not set.

There is nothing about PTT at all in BIOS/manual I don't think EVGA had any idea about it:
https://www.evga.com/support/manuals/files/131-SX-E295.pdf

reply

#14 | RE: Activate PTT in ME firmware datum

Tue Jan 30, 2018 8:43 pm (Last edited: Tue Jan 30, 2018 8:45 pm)

You are correct. The FPF are set when Manufacturing Mode is Disabled for the first time (normally at the OEM factory) and thus the platform is FPF Committed. PTT does not work in Manufacturing Mode (no FPF commitment) so that's why it's not shown at all. So, now that you still have read/write access to the Engine region (Manufacturing Mode Enabled), download the attached Engine region which has PTT fully enabled. Flash via "fptw -rewrite -me -f 1E295112_ME_PTT.bin" followed by "fptw -greset". After the reboot, run "fptw -closemnf". PTT should now be Enabled.

plutomaniac has attached files to this post

1E295112_ME_PTT.rar

reply

#15 | RE: Activate PTT in ME firmware datum

Wed Feb 07, 2018 8:29 pm (Last edited: Wed Feb 07, 2018 8:33 pm)

cam234

Show info

Posts:	43
Registered since:	06.30.2016

Due to other issues I was not able to do this earlier. Flashed your version, reset, then closed man-mode.

Just done it now - and FPFs are now set but still no dice. It seems it is not as easy as it sounds:

1
2
3
4
5
6
7
8
9
10
 
FW Capabilities value is 0x100140
Feature enablement is 0x100140
 
FW Capabilities                              0x00100140
                                             
	Intel(R) Capability Licensing Service - PRESENT/ENABLED
	Intel(R) Dynamic Application Loader - PRESENT/ENABLED
	Service Advertisement & Discovery - NOT PRESENT
	Intel(R) NFC Capabilities - NOT PRESENT
	Intel(R) Platform Trust Technology - NOT PRESENT
 

To me it seems the issue is still that PTT is shown as "NOT PRESENT" and not simply present/disabled as on other boards. Thus there is "nothing to enable" since it is not present.

The question is how the FW capabilities are being set. Pity I liked this board.

cam234 has attached files to this post

evga_x299_mfclosed.txt

reply

Asus X550LB shutting down every 30min �

Page 1 of 3 � Page 1 2 3 Page �

Please enter a reason for warning.