Zitat von khanmein im Beitrag #3724

---

Zitat von denaba im Beitrag #3716

---

Scrolling down to the chart that lists the generations, mine is a 4th gen. It states that the recommended ME firmie is 9.1.42.3002 and 9.5.61.3012. Digging around (and I may be wrong) but I think the 3012 is for laptops. The 3002 are for desktops. I came here looking for the firmware and all I see is 9.1.37.1002. Am I wrong that I (or we) should stay at 9.1.37.1002 for us 9-series folks or is the 9.1.42.3002 the newest? Just wondering.

---

+1 I'd like to know too. I've the same thing like you.

---

Hello

sorry if it's not the right topic for my question

Following the update of the firmware ME for my motherboard, the vulnerability has been corrected
But Capability Licensing Service Client software is not up to date according to Intel detection tool



Asus has released a new bios with the new firmware (the same one that I had put) but the software is still not updated
How can I do ?
it's up to Asus to update if I understood correctly

Thanks

Zitat von tistou77 im Beitrag #3728

---

Hello

sorry if it's not the right topic for my question

Following the update of the firmware ME for my motherboard, the vulnerability has been corrected
But Capability Licensing Service Client software is not up to date according to Intel detection tool

---

Zitat von igorsk im Beitrag #3729

---

This one is included in the ME drivers. Just grab the latest ones (full package, section A3) from the first page.

---

I am on Asus Rampage VI Extreme, and i have updated the IME Firmware through FWUpdLcl64.exe tool, when testing for HDCP 2.2 and old HDCP compatibility through Cyberlink Advisor I am getting most of it to be false.

Here is my Meinfo :

Intel(R) MEInfo Version: 11.8.50.3425
Copyright(C) 2005 - 2017, Intel Corporation. All rights reserved.
 

 
Intel(R) ME code versions:
 
BIOS Version                                 1102
MEBx Version                                 0.0.0.0000
GbE Version                                  0.2
Vendor ID                                    8086
PCH Version                                  0
FW Version                                   11.11.50.1436 H
Security Version (SVN)                       3
LMS Version                                  11.7.0.1060
MEI Driver Version                           11.7.0.1057
 
FW Capabilities                              0x20110540
 
        Intel(R) Capability Licensing Service - PRESENT/ENABLED
        Intel(R) Dynamic Application Loader - PRESENT/ENABLED
        Intel(R) Platform Trust Technology - PRESENT/DISABLED
 
Re-key needed                                False
Platform is re-key capable                   True
TLS                                          Disabled
Last ME reset reason                         Global system reset
Local FWUpdate                               Enabled
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Host Read Access to ME                       Enabled
Host Write Access to ME                      Disabled
Host Read Access to EC                       Disabled
Host Write Access to EC                      Disabled
SPI Flash ID 1                               C22018
SPI Flash ID 2                               Unknown
BIOS boot State                              Post Boot
OEM ID                                       00000000-0000-0000-0000-000000000000
Capability Licensing Service                 Enabled
OEM Tag                                      0x00000000
Slot 1 Board Manufacturer                    0x00000000
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Disabled
C-link Status                                Disabled
Independent Firmware Recovery                Disabled
EPID Group ID                                0x1FF6
LSPCON Ports                                 None
5K Ports                                     None
OEM Public Key Hash FPF                      0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME                       0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF                                  0x0
KM SVN FPF                                   0x0
BSMM SVN FPF                                 0x0
 
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Disabled                 Disabled
Protect BIOS Environment                     Disabled                 Disabled
CPU Debugging                                Enabled                  Enabled
BSP Initialization                           Enabled                  Enabled
Measured Boot                                Disabled                 Disabled
Verified Boot                                Disabled                 Disabled
Key Manifest ID                              0x0                      0x0
Enforcement Policy                           0x0                      0x0
PTT                                          Enabled                  Enabled
PTT Lockout Override Counter                 0x0
EK Revoke State                              Not Revoked
PTT RTC Clear Detection FPF                  0x0
 
 

From cyberlink advisor :


Luckily i have backup the original firmware through the FWUpdLcl64.exe tool, did i have just screwed up?, when trying to flashing the old backup firmware i am getting unable to downgrade error from the fwupdate tool.

Zitat von keats im Beitrag #3727

---

Zitat von khanmein im Beitrag #3724

---

Zitat von denaba im Beitrag #3716

---

Scrolling down to the chart that lists the generations, mine is a 4th gen. It states that the recommended ME firmie is 9.1.42.3002 and 9.5.61.3012. Digging around (and I may be wrong) but I think the 3012 is for laptops. The 3002 are for desktops. I came here looking for the firmware and all I see is 9.1.37.1002. Am I wrong that I (or we) should stay at 9.1.37.1002 for us 9-series folks or is the 9.1.42.3002 the newest? Just wondering.

---

+1 I'd like to know too. I've the same thing like you.

---

9.5.60.1952 and 9.1.37.1002 are the latest 1.5 MB consumer versions. 9.5.62.3002 and 9.1.42.3002 are the latest 5 MB corporate versions.

---

Zitat von tistou77 im Beitrag #3730

---

Thanks
But I install the MEI drivers by the device manager (.inf)
It is mandatory to use the setup ?

---

Hi,

I have Dell XPS 9550 laptop, and after . updating to latest bios (1.6.1) that had update for ME (to 11.8.50.3426 version). After updating BIOS now i have to ME interface device visible in OS.
This is output of MEInfo


https://flic.kr/p/JCLXop

There is archive with: full MEInfo output, BIOS update package (Dell exe format) and full BIOS dump made with hardware programmer

https://drive.google.com/open?id=1r89y0O...6H1KDWejwYuqAbj

Any idea what happened and how to fix this?

Hi all,

This is a really great and resourceful thread, thank you all for contributing such detailed information. Over the last 3-4 hours I've been trying to wrap my head around an issue I believe is related to my Intel Management Engine. I've posted over on /r/techsupport initially so to save spamming this thread with a huge post I figure it's easier if I just link the thread. I'll check back here to see if anyone has any ideas.


https://www.reddit.com/r/techsupport/com...e_causing_bsod/


Many thanks again in advanced and for all the information in this thread thus far.

Dan

Zitat von plutomaniac im Beitrag #3736

---

@ tistou77:
Install the latest Drivers & Software and additionally execute "SetupME.exe -tcs -nodrv -s".

@ khanmein:
It's not vulnerable. Intel-SA-00086 applies to 5MB ME 6-10 SKUs only, not 1.5MB.

---

@plutomaniac v1.0.0.128 shown "This system is not vulnerable." but how come v1.0.0.152 show "This system is vulnerable." This doesn't make any sense at all. May I know why it shows my system is vulnerable? False alarm or?

I've emailed ASRock for more than one week & no response from them yet.


v1.0.0.128 ---> [img=http://www119.zippyshare.com/thumb/FcF0wy49/file.html][/img] "This system is not vulnerable."

v1.0.0.152 --->[img=http://www119.zippyshare.com/thumb/32zpZlpq/file.html][/img] "This system is vulnerable."

Intel said: Versions of the INTEL-SA-00086 Detection Tool earlier than 1.0.0.146 did not check for CVE-2017-5711 and CVE-2017-5712.
So v1.0.0.152 is a more severe than v1.0.0.138 may explain the test results differences.