Zitat von plutomaniac im Beitrag #3711

---

You said that you downloaded the BIOS image from ASUS, flashed it and then updated the CSME firmware via FWUpdate tool. Then you check that same downloaded ASUS BIOS with MEA and you expect it to have its CSME firmware updated as well. Do you see the error in your logic?

---

Zitat von Gus.Ghanem im Beitrag #3710

---

I downloaded and manually updated the new Asus Z170-A BIOS 3703 from the local SSD, no problems.

-------[ ME Analyzer v1.42.0 r110 ]-------

File: Z170-A-ASUS-3703.CAP (1/1)

Family: CSE ME
Version: 11.6.10.1196
Release: Production
Type: Region, Extracted
SKU: Consumer H
Rev: D0
SVN: 1
VCN: 173
LBG: No
PV: Yes
Date: 2016-11-16
FIT Ver: 11.6.10.1196
FIT SKU: PCH-H Z170
Size: 0x1F0000
Platform: SPT/KBP
Latest: No

Intel(R) MEInfo Version: 11.8.50.3425
Copyright(C) 2005 - 2017, Intel Corporation. All rights reserved.



Intel(R) ME code versions:

BIOS Version 3703
MEBx Version 0.0.0.0000
GbE Version 0.7
Vendor ID 8086
PCH Version 31
FW Version 11.8.50.3426 H
Security Version (SVN) 3
LMS Version Not Available
MEI Driver Version 11.7.0.1057
Wireless Hardware Version Not Available
Wireless Driver Version Not Available

FW Capabilities 0x31111540

Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/DISABLED

Re-key needed False
Platform is re-key capable True
TLS Disabled
Last ME reset reason Firmware reset
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 EF4018
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 00000000-0000-0000-0000-000000000000
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Disabled
Independent Firmware Recovery Disabled
EPID Group ID 0x1FB3
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000

FPF ME
--- --
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0
PTT Enabled Enabled
PTT Lockout Override Counter 0x0
EK Revoke State Not Revoked
PTT RTC Clear Detection FPF Not set

Intel(R) MEManuf Version: 11.8.50.3425
Copyright(C) 2005 - 2017, Intel Corporation. All rights reserved.


Windows OS Version : 10.0

FW Status Register1: 0x90000245
FW Status Register2: 0x06F60506
FW Status Register3: 0x00000020
FW Status Register4: 0x00084000
FW Status Register5: 0x00000000
FW Status Register6: 0x40000000

CurrentState: Normal
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with UMA
InitComplete: Complete
BUPLoadState: Success
ErrorCode: No Error
ModeOfOperation: Normal
SPI Flash Log: Not Present
Phase: ROM/Preboot
ICC: Valid OEM data, ICC programmed
ME File System Corrupted: No
PhaseStatus: AFTER_SRAM_INIT
FPF and ME Config Status: Match

FW Capabilities value is 0x31111540
Feature enablement is 0x11111140
Platform type is 0x71220322
No Intel Wireless device was found
Feature enablement is 0x11111140
ME initialization state valid
ME operation mode valid
Current operation state valid
ME error state valid
OEM ICC data valid and programmed correctly
MFS is not corrupted
PCH SKU Emulation is correct
FPF and ME Config values matched

Request Intel(R) ME BIST status command... done

Get Intel(R) ME test data command... done

Get Intel(R) ME test data command... done
Total of 10 Intel(R) ME test result retrieved


Policy Kernel - Boot Guard : Self Test - Passed
MCA - MCA Tests : Blob - Passed
MCA - MCA Tests : MCA Manuf - Passed
SMBus - SMBus : Read byte - Passed
VDM - General : VDM engine - Passed
PAVP - General : Verify Edp and Lspcon Configurations - Passed
PAVP - General : Set Lspcon Port - Passed
PAVP - General : Set Edp Port - Passed

Clear Intel(R) ME test data command... done




MEManuf Operation Passed

---

Zitat von plutomaniac im Beitrag #3709

---

Zitat von broheim im Beitrag #3708

---

So today ASUS released a new BIOS 3703 for Z170-A and I still get Error 8719 and can't update vulnerable ME firmware. Is there any way to enable Local Firmware update?

---

That option is controlled by a BIOS option. It might be hidden in your BIOS menu but it's definitely there. ASUS should have that set to Enable by default, not Disabled.

---

I have the Intel Core i7-6700K CPU @ 4.00GHz "unlocked" version, I don't know if that makes any difference. And yes I updated the ME Firmware to 11.8.50.3426 using FWUpdLcl64.exe, after the 3504 BIOS update. Today I only updated the BIOS; I can still see the latest ME Firmware version in the BIOS settings. I always use Default BIOS settings, and I've never modified any motherboard hardware/firmware other than straight flashing BIOS and Firmware (I play it "safe"). Why our mobos are different is beyond my knowledge.

I have a question and looking for an answer. On my Z97 board I was reading the Intel website specifically talking about the Intel ME issue. Here is the link

https://security-center.intel.com/adviso...anguageid=en-fr

Scrolling down to the chart that lists the generations, mine is a 4th gen. It states that the recommended ME firmie is 9.1.42.3002 and 9.5.61.3012. Digging around (and I may be wrong) but I think the 3012 is for laptops. The 3002 are for desktops. I came here looking for the firmware and all I see is 9.1.37.1002. Am I wrong that I (or we) should stay at 9.1.37.1002 for us 9-series folks or is the 9.1.42.3002 the newest? Just wondering.

Zitat von Gus.Ghanem im Beitrag #3715

---

I have the Intel Core i7-6700K CPU @ 4.00GHz "unlocked" version, I don't know if that makes any difference. And yes I updated the ME Firmware to 11.8.50.3426 using FWUpdLcl64.exe, after the 3504 BIOS update. Today I only updated the BIOS; I can still see the latest ME Firmware version in the BIOS settings. I always use Default BIOS settings, and I've never modified any motherboard hardware/firmware other than straight flashing BIOS and Firmware (I play it "safe"). Why our mobos are different is beyond my knowledge.

---

I have tried everything and can't upgrade my MB. Either I get a message that there is another upgrade in progress or SKU wrong, etc. Can anyone help?? Thanks.

My info

Intel(R) MEInfo Version: 9.1.42.3002
Copyright(C) 2005 - 2017, Intel Corporation. All rights reserved.

Intel(R) ME code versions:

BIOS Version: 3003
MEBx Version: 0.0.0.0000
Gbe Version: 0.1
VendorID: 8086
PCH Version: 0
FW Version: 9.1.25.1005 H
LMS Version: Not Available
MEI Driver Version: 11.0.0.1157
Wireless Hardware Version: Not Available
Wireless Driver Version: Not Available

FW Capabilities: 0x51101940

Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Service Advertisement & Discovery - PRESENT/ENABLED

TLS: Disabled
Last ME reset reason: Power up
Local FWUpdate: Enabled
BIOS Config Lock: Enabled
GbE Config Lock: Enabled
Host Read Access to ME: Disabled
Host Write Access to ME: Disabled
SPI Flash ID #1: EF4017
SPI Flash ID VSCC #1: 20252025
SPI Flash BIOS VSCC: 20252025
BIOS boot State: Post Boot
OEM Id: 00000000-0000-0000-0000-000000000000
Capability Licensing Service: Enabled
OEM Tag: 0x00000000
Localized Language: Unknown
Independent Firmware Recovery: Disabled
OEM Public Key Hash (FPF): 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash (ME):
ACM SVN FPF: 0x0
KM SVN FPF: 0x0
BSMM SVN FPF: 0x0

FPF ME
--- --
Force Boot Guard ACM: Disabled
Protect BIOS Environment: Disabled
CPU Debug Disabled: Disabled
BSP Initialization Disabled: Disabled
Measured Boot: Disabled
Verified Boot: Disabled
Key Manifest ID: 0x0
Enforcement Policy: 0x0

-------[ ME Analyzer v1.42.0 r110 ]-------

File: MAXIMUS-VII-FORMULA-ASUS-3003.CAP (1/1)

Family: ME
Version: 9.1.25.1005
Release: Production
Type: Region, Extracted
SKU: 1.5MB
SVN: 1
VCN: 11
PV: Yes
Date: 2014-12-01
FITC Ver: 9.1.10.1000
Size: 0x17D000
Platform: LPT/WPT
Latest: No

Update:

Nevermind. It worked after updating the drivers...

^
9.1.42.3002 is corporate (5MB) ME......you need 9.1.37.1002 (1.5MB) to be flashed.....

Intel(R) MEInfo Version: 9.1.42.3002 is the latest program from r4 version of the tools. I was trying to flash 9.1.37.1002 (1.5MB). Anyways it worked after first updating the Windows drivers...

Hi,

I have updated the ME on some systems in the past but on a Lenovo u330p meinfo says that the currently installed version is 9.5.13.1706 LP which leaves me a litte puzzled.

Since 9.5 doesn't seem to have different versions for H and LP is it safe to assume that it is okay to flash 9.5.60.1952?

Thank you!

I wasn't aware of that. Thank you very much!

Zitat von denaba im Beitrag #3716

---

I have a question and looking for an answer. On my Z97 board I was reading the Intel website specifically talking about the Intel ME issue. Here is the link

https://security-center.intel.com/adviso...anguageid=en-fr

Scrolling down to the chart that lists the generations, mine is a 4th gen. It states that the recommended ME firmie is 9.1.42.3002 and 9.5.61.3012. Digging around (and I may be wrong) but I think the 3012 is for laptops. The 3002 are for desktops. I came here looking for the firmware and all I see is 9.1.37.1002. Am I wrong that I (or we) should stay at 9.1.37.1002 for us 9-series folks or is the 9.1.42.3002 the newest? Just wondering.

---

Good afternoon. Dear plutomaniac tell me, do I understand correctly that firmware x_PRD_RGN "clean" it is flash from DOS using fwupdlcl an existing one. Do I need to migrate any settings or erase the old one ?
Thank you for your attention.