Hello Guys,
I need your help, i dont know how to downgrade my Intel ME.
When i downgrade my BIOS INTEL ME stays updated, i tried to manually downgrade Intel ME its not working anymore, since i updated it to version 11.8.55.3510.

How can i downgrade Intel ME?

I tried with FPT(FTK) on USB Stick, i get following message -> Error 368: Failed to disable Write Protection for BIOS space. FPT Operation failed.

Mainboard: ASUS STRIX Z270f -> KBL PCH-H

I Tried Check Locked/Unlocked Status -> i was fully dump the file. So its unlocked right?

When i try to downgrade Intel ME to my OLD one whats acctually on ASUS Site ( INTEL ME UPDATE ) i get following message.

Error 8758: The Image provided is not supported by the platform.

What the hell? I was using it before, i updated to newest.

IntelMeInfo

Intel(R) MEInfo Version: 11.8.55.3510
Copyright(C) 2005 - 2017, Intel Corporation. All rights reserved.
 

 
Intel(R) ME code versions:
 
BIOS Version                                 1301
MEBx Version                                 0.0.0.0000
GbE Version                                  0.2
Vendor ID                                    8086
PCH Version                                  0
FW Version                                   11.8.55.3510 H
Security Version (SVN)                       3
LMS Version                                  11.7.0.1054
MEI Driver Version                           11.7.0.1045
Wireless Hardware Version                    Not Available
Wireless Driver Version                      Not Available
 
FW Capabilities                              0x31111540
 
        Intel(R) Capability Licensing Service - PRESENT/ENABLED
        Protect Audio Video Path - PRESENT/ENABLED
        Intel(R) Dynamic Application Loader - PRESENT/ENABLED
        Intel(R) Platform Trust Technology - PRESENT/DISABLED
 
Re-key needed                                False
Platform is re-key capable                   True
TLS                                          Disabled
Last ME reset reason                         Firmware reset
Local FWUpdate                               Enabled
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Host Read Access to ME                       Enabled
Host Write Access to ME                      Disabled
Host Read Access to EC                       Disabled
Host Write Access to EC                      Disabled
SPI Flash ID 1                               20BA18
SPI Flash ID 2                               Unknown
BIOS boot State                              Post Boot
OEM ID                                       00000000-0000-0000-0000-000000000000
Capability Licensing Service                 Enabled
OEM Tag                                      0x00000000
Slot 1 Board Manufacturer                    0x00000000
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Disabled
C-link Status                                Disabled
Independent Firmware Recovery                Disabled
EPID Group ID                                0x1FCC
LSPCON Ports                                 None
5K Ports                                     None
OEM Public Key Hash FPF                      0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME                       0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF                                  0x0
KM SVN FPF                                   0x0
BSMM SVN FPF                                 0x0
GuC Encryption Key FPF                       0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME                        0000000000000000000000000000000000000000000000000000000000000000
 
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Disabled                 Disabled
Protect BIOS Environment                     Disabled                 Disabled
CPU Debugging                                Enabled                  Enabled
BSP Initialization                           Enabled                  Enabled
Measured Boot                                Disabled                 Disabled
Verified Boot                                Disabled                 Disabled
Key Manifest ID                              0x0                      0x0
Enforcement Policy                           0x0                      0x0
PTT                                          Enabled                  Enabled
PTT Lockout Override Counter                 0x0
EK Revoke State                              Not Revoked
PTT RTC Clear Detection FPF                  0x0
 
 

Greetings
St1cky

You can try my guide here, for 368 follow what it mentions but using your BIOS to get variables. And then also get variable for ME Re-flash from same setup file. This works for some BIOS/ME sometimes, but not always, it is covered in the guide linked above in Section E
[GUIDE] Grub Fix Intel FPT Error 368 - BIOS Lock Asus/Other Mod BIOS Flash

Similar little guide (in spoiler) to get or edit the ME Re-flash variable, but it's all in same file so you can use either guide, and you'll be getting all three variables from same module (BIOS Lock, SMI Lock, ME Re-Flash)
Intel Management Engine: Drivers, Firmware & System Tools (272)

Hello,
Thanks for you information.
I tried it earlier a similar way, but
i was using fptw -ME -F (of me), i managed to open Descriptors with EFI Shell.

Now my Board is dead :D , black screen no reaction
I destroyed even my backup bios i think (deleted ) i cant go into Crashfree BIOS.

I ordered a tool for SPI Flashing, hope it gone work.

Why is Crashfree BIOS not working?
Did it erased all data?

It just Turn On and Off but thats all no keyboard light and Mouse light. So its done i guess :D.

Greetings St1cky

It's not dead, you just need to reprogram the BIOS, this can be done with $3 CH341A flash programmer, you'll also need $3.50 SOIC8 test clip cable since this board BIOS is not socketed. Or SPI cable as you mentioned.

Not sure why any of that happened, you have to explain your exact steps before anyone can say why maybe this happened. Probably you messed up the ME, worse than it was, but very hard to guess without knowing what exactly you did and with what files etc.

@Lost
I buyed following ->

WINGONEER EEPROM Routing USB Programmer CH341A Writer LCD Flash
WINGONEER SOIC8 SOP8 Test Clip Für EEPROM 93CXX/25CXX/24Cxx In-Circuit-Programmierung + 2 Adapterr 25 SPI Serie 24 I2C

So i hope it will work again :D

I should reflash the hole BIOS w. Intel ME instead of only a ME Version thats the problem i guess, why everything is gone, including BIOS.
I was almost using the same techniq you postet. I was using setup_var inside of GRUB, it worked succesfully on my ASUS Board, inside BIOS INTEL ME 0.0.0.0 Version, so i did it again and instead of booting inside bios back i booted inside OS and flashed the Intel ME. What File exactly i dont know for now. i just needed to change the setup_var in the correct one and set it to 0x1. ( something like setup_var 0x6ED 0x1 ) But i saw when the Programm DELETED EVERYTHING instead only ME. AFTER restart, black screen no reaction :D.

greetings St1cky

That's all you need, once you get it make sure before you write anything to the chip you get a verified backup, that way you don't loose board details (serial, DTS key, UUID, LAN MAC ID) Read, verify and then if buffer/memory match chip save (If not, try more until it does, other software versions, settings etc)

Flashing and programming are very different, especially regarding "Flashing" to you right now with software methods, you can only flash certain things in certain ways. When you get your programmer, hopefully you can get a good dump.
Then from there you want to use the ME Cleanup guide to redo the ME Region, then if that looks ok in many programs, you can then program that to the board and test.

What file you don't know? There may be the problem? And how did you flash it, may also be the problem. Next time, slow down and wait for help, better to wait then brick the board. Now you have programmer though, so you can always fix things once it arrives.

Hey,
Thanks for respond.
I got one Backup on my Harddrive (was from re-write Methoted, it was doing a backup ) , so i can extract the Informations from that image right. Can i just Flash the BIOS on the BIOS chip, with the correct Board Details? I think i will get it right, it comes tomorrow, morning express :D. Im nervous whats left on the BIOS CHIP haha.

I just want the old ME Firmware and everything as before.

Greetings St1cky

Yes, hopefully all the data there is correct and in tact. make a copy of that too, so it doesn't get lost or written over etc.

I don't know what's in your backup, so I can't say if you can go ahead and write it to the chip or not. Upload a copy and I will check it, or you can check if you want with UEFITool. Does it show all regions (Desc, GbE. ME, BIOS)
If you still want older version of ME, take your current backup, use the clean ME guide and use the ME version you want from ME repositories thread and make a new BIOS with the older ME, then use that to program back instead.

Also, be sure to unlock your flash descriptor before you program to the BIOS, that way you can use FPT to flash anything you want later without having to get the programmer back out again each time.
You will need to always make sure you unlock the FD in each future BIOS update you do later on, some methods might write in the stock locked FD again

Hey,
I tried it with one flash to rewrite the BIOS on it. Other Chips dont look like BIOS.
But im not sure if this is even the BIOS Chip, i dont find any Information were i can Located it.

I will upload some Screenshots.

I tried some chips now, but the most of them are just 128kbyte? Even the LED Power just shine and the Run not? ( on the Stick )
But i can write / read?

Greetings St1cky

[img][img][img][/img][/img][/img]


It was the right chip, but still not working.

Maybe Something is wrong with device or Operating System, i will try on other PC.

Its working and Running, still thanks for help ;)

Don't write to chips you have not taken a verified backup from first (and once verified, open the file and make sure it's not all FF's, sometimes verified is not verified and the file is empty)
And second, always make sure you are writing to a BIOS chip if you are writing BIOS. You shouldn't blindly pick and choose what chips to write to, especially if you have not taken a verified backup and made sure the file contained proper data.
When you are not sure, wait for help! I saw you mention you would take images earlier, so I expected to come back to see images posted with you waiting for help to confirm what is BIOS etc.

You should not write anything, to any chips, until you have a verified backup from that chip, and have either confirmed it's contents yourself or had someone else look to be sure it's valid data and correctly what you thought it was.
Then you can write, because if it fails you can safely write back what was there originally from your backup.

I believe you have the correct chip circled in first image. Do you have a backup from the programmer (verified), before you wrote anything to the chip with the programmer? If yes, please upload the file.

You can't write .cap BIOS to the chip with programmer, you must first extract the body of the BIOS from the .cap file. Open capsule file in UEFITool and right click in the middle where you see "AMI Aptio Capsule", choose extract body.
That is what you write to the chip with programmer. In the programmer, first do erase, then blank check, then open the BIOS file, and do write operation, then verify (memory/buffer match chip).

It's best to get a backup first though, that way you can find through that process the working CHIP ID to use because auto ID or exact ID does not always work, and so you can find the correct version of the software that works for your current setup too.
Not doing that first, leaves you trying to figure all that out later/now with a write operation and so you may need to try a few software versions and chip ID's until you can get a valid write/verify operation.

Before you write any BIOS, make sure you also go ahead and unlock the FD following the guide here - [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing
How to unlock is in section B, second spoiler and you will be using the "FD V2-3" image on the bottom for reference (editing lines 80+90 just like the image)
And make sure you already have the BIOS created with the ME version you want in there so you don't have to do all that later