Forum - Intel Management Engine » Help me understand the Intel ME firmware update

Win-Raid Forum (Drivers - Firmware - Modding) � Special Topics � Intel Management Engine � Help me understand the Intel ME firmware update

Topic settings

Print view

Jump to forum

General & Forum related Topics News / Announcements Forum-related Questions & Suggestions Off Topic Important Drivers (AHCI/RAID, NVMe, USB etc.) General: Storage Drivers (AHCI/RAID, NVMe and USB) Specific: Intel AHCI/RAID Drivers Specific: NVIDIA nForce Chipset Drivers (incl. AHCI/RAID) Specific: NVMe Drivers Other Drivers System Performance RAID Performance AHCI/NVMe Performance Solid State Drives BIOS Modding BIOS Modding Guides and Problems BIOS modules (PCI ROM, EFI and others) BIOS Modding Requests Reports: BIOS Modding Results Offers: Already modded special BIOSes Special Topics Intel Management Engine CPU Microcodes NVMe Support for old Systems Other Tools (not BIOS modding related) Interesting PC Hardware & Software OS related Topics Windows 11 Windows 8-10/Server 2012-2019 Windows 7/Vista/Server 2008 Windows XP/2000/Server 2003 DOS/Windows 3.X/9X/ME - Retro Gaming Other Operating Systems

#1 | Help me understand the Intel ME firmware update datum

Wed Aug 07, 2019 12:48 pm (Last edited: Wed Aug 07, 2019 12:50 pm)

The motherboard ASUS Z170-WS had at the purchase time:
BIOS -> Intel ME firmware
3105 -> 11.6.10.1196
I ran "ME Update Tool" in Windows and updated Intel ME firmware ->11.8.50.3399
I skipped over the BIOS versions:
BIOS -> Intel ME firmware
3204 -> 11.6.10.1196
3601 -> 11.8.60.3561
I received from ASUS after a long insistence a new version of BIOS:
BIOS -> Intel ME firmware
3602 -> 11.8.65.3590
(checked with UEFITool).
I flashed BIOS 3602 with ASUS EZ Flash 3, the microcode version was updated (checked with UEFITool) but the Intel ME firmware remained 11.8.50.3399 from the update with the "ME Update Tool". The BIOS update ran without any error.
MEInfo:

Intel(R) MEInfo Version: 11.8.65.3590
Copyright(C) 2005 - 2018, Intel Corporation. All rights reserved.
Driverless mode
Intel(R) ME code versions:
BIOS Version
MEBx Version
GbE Version 0.7
Vendor ID 8086
PCH Version 31
FW Version 11.8.50.3399 H
Security Version (SVN) 3
MEI Driver Version Not Available
Wireless Hardware Version Not Available
Wireless Driver Version Not Available
FW Capabilities 0x11111540
Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Re-key needed False
Platform is re-key capable True
TLS Disabled
Last ME reset reason Firmware reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 EF4018
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 00000000-0000-0000-0000-000000000000
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Disabled
Independent Firmware Recovery Disabled
EPID Group ID 0xF83
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000
FPF ME
--- --
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0

Local FWUpdate -> Enabled allows updating with FWUpdate but blocks the upgrade to the existing version in the new BIOS?
Should I try manual updating with FWUpdate (I am now running Linux so FWUpdLcl version for LINUX64)?

Support Plato Mavropoulos (plutomaniac)
page-donation.html

reply

#2 | RE: Help me understand the Intel ME firmware update datum

Wed Aug 07, 2019 1:50 pm

Yes use FWUpdate tool to update the CSME firmware.

reply

#3 | RE: Help me understand the Intel ME firmware update datum

Fri Sep 06, 2019 9:37 am

I confirm that the FWUpdate version for LINUX64 (FWUpdLcl) works properly.

Support Plato Mavropoulos (plutomaniac)
page-donation.html

reply

#4 | RE: Help me understand the Intel ME firmware update datum

Fri Sep 06, 2019 10:51 am

Intel CSME System Tools v11 r26 -> FWUpdate -> LINUX64 -> FWUpdLcl -> 499 KB
Intel CSME System Tools v11 r26 -> FWUpdate -> LINUX64 -> FWUpdLcl -> Portable -> FWUpdLcl -> 503 KB

What is the difference between these two versions and what should I use?

Support Plato Mavropoulos (plutomaniac)
page-donation.html

reply

#5 | RE: Help me understand the Intel ME firmware update datum

Wed Nov 13, 2019 8:55 pm

Has anyone tried updating Intel ME in Linux remote -> ssh?

Support Plato Mavropoulos (plutomaniac)
page-donation.html

reply

#6 | RE: Help me understand the Intel ME firmware update datum

Wed Nov 13, 2019 9:55 pm

@ibsajc:
Our Intel ME expert plutomaniac has currently no opportunity to be online.
Please wait until he will answer your questions. This may take several days or maybe even several weeks.

My current System:
MB: ASRock X570 Pro4, CPU: AMD Ryzen 5 3600, System Drive: 500 GB Samsung 980 Pro, Graphics: Sapphire Radeon RX570, OS: Win10 x64 Pro
Donation Link:
If you are satisfied with my Forum activities, you can send a donation to my personal PayPal account by clicking onto >this< link.

reply

#7 | RE: Help me understand the Intel ME firmware update datum

Thu Nov 14, 2019 10:10 am

Thanks @Fernando.
I do not expect @plutomaniac to answer my questions personally, its activity is much more important and many users depend on it.
At the previous question a response from a user who has tried this is sufficient. I have also received responses for using the Intel ME update tool on Linux in the past from @thurask. If I had a test system I would have tried and then posted on the forum the result in case someone else needed it.

Support Plato Mavropoulos (plutomaniac)
page-donation.html

reply

surface pro 4 bios broken! lost touch after clean ME region,please help! � � Enabling "Headless display emulation" BIOS Option on Intel AMT Platforms.

Please enter a reason for warning.