Zitat von plutomaniac im Beitrag #3736

---

@ tistou77:

Install the latest Drivers & Software and additionally execute "SetupME.exe -tcs -nodrv -s".

@ echelon:

Contact ASUS support for HDCP issues.

@ khanmein:

It's not vulnerable. Intel-SA-00086 applies to 5MB ME 6-10 SKUs only, not 1.5MB.

@ goodwin_c:

Follow the CleanUp Guide on your SPI chip dump and use the programmer to flash back.

@ GLaDOSDan:

Run Flash Programming Tool with command "fptw64 -greset". After the reboot, run "MEInfo -verbose" tool under EFI or DOS (not Windows). Do you see any errors?

---

Zitat von plutomaniac im Beitrag #3739

---

@ tistou77:
Read the Intel-SA-00086 section of the first post, everything is there. X229 (CSME 11) has nothing to do with X99 (ME 9). Pay attention to what I said which is ME 6-10 5MB.

---

which firmware is correct for asus Z170-A ? PCH-H or PCH-LP ?

thanks

Hi @plutomaniac,

Thanks for your quick reply.

I've ran fptw64 -greset which succeded and then rebooted my PC straight into FreeDOS and ran MEInfo with the following output:

https://i.imgur.com/2W00Kyb.jpg

I'm still seeing "Error sending end of post message to ME: HECI disabled, proceeding with boot" every time I POST - is this HECI being disabled somehow relevant? I've had a look through my BIOS and motherboard's manual and can't find any mention of enabling/disabling HECI or ME or anything.

Many thanks,
Dan

Dear Mr. Mavropoulos @plutomaniac,

I'm using an hp 250 G4 laptop, with a 5th generation Intel(R) Core(TM) i5-5200U CPU. The system is running on Consumer/1.5M image.

For my system:
1. The Intel MEInfo tool reports:

Intel(R) MEInfo Version: 10.0.56.3002

GBE Region does not exist.

Intel(R) ME code versions:
BIOS Version: F.23
MEBx Version: Not available
Gbe Version: Unknown
VendorID: 8086
PCH Version: 3
FW Version: 10.0.45.1024 LP
LMS Version: Not Available
MEI Driver Version: 11.7.0.1045
Wireless Hardware Version: Not Available
Wireless Driver Version: Not Available

2. The Intel-SA-00086 Detection Tool 1.0.0.152 finds the system NOT vulnerable.

For this HP 250 G4 Notebook PC, on Dec 14, 2017, hp issued an Intel Platform ME Firmware Update (sp84244) designating it as "Critical"� - https://support.hp.com/us-en/drivers/sel...mId/ob-202855-1

I downloaded and extracted (without installing anything) the softpaq. Not being an expert, it seems that it includes 3 FW files. Checked them with ME Analyzer v1.42.0 and found that the FW included in the softpaq are:

CSE ME family
11.11.50.1422 / Consumer H,
11.8.50.3425 / Consumer LP
11.8.50.3425 / Consumer H

Having in mind that hp in general are relatively cautious with their updates, how come they are now recommending CSE ME firmware update for an ME 10.0.45.1024 LP.
Will it fail when I try to install it, or will it brick my pc. So before turning my laptop into a brick, would it be possible to get your expert opinion if I need to install this update?


Thanks in advance.

Dimitri

Zitat von plutomaniac im Beitrag #3746

---

@ ddelo:

You cannot use CSME 11 on a system with ME 10 firmware. That update does not concern your system.

---

@plutomaniac

Thanks again for your advice. "fptw -me -d me.bin" ran successfully the first time without needing to boot into the EFI environment: https://i.imgur.com/oBUKMlQ.png

@plutomaniac

Sorry for the delay in getting back to you on this. Here's meinfo -verbose when run under FreeDOS.

https://pastebin.com/sQtFjyzq

Cheers.

@plutomaniac

As you predicted, I get "Error 451: The host CPU does not have write access to the target flash area. To enable write access for this operation you must modify the descriptor settings to give host access to this region.
FPT Operation Failed." when trying to flash me.bin back. I'm heading off to work now, but I'll give your EFI method a go later tonight/tomorrow and let you know how that goes.

Thanks again for your help with this, it's very much appreciated.

Hi again @plutomaniac

Booted into the EFI/grub shell provided in your earlier post and ran "setup_var 0x6ED 0x01". The command seems to have run okay; "setting offset 0x6ed to 0x01" was the last line of output from the command (after a few errors complaining about non-matching GUIDs, if that's relevant?).

My system then refused to boot no matter what I did - the fans would spin up, but I'd get no video even from the onboard video card. After putting the latest BIOS onto a flash drive and using the BIOS flashback button on the board, that got me back into the BIOS and I was able to boot back into Windows once again. I was still getting the "HECI disabled" errors on POST.

I'm now still getting 'Error 451: Host CPU does not have write access to the target flash area.'

Out of frustration when my board wouldn't POST at all after running the setup_var command, I decided to contact Amazon and they've agreed to send me a replacement board, so I guess this is the end of this saga.

Many thanks for your help, @plutomaniac - it's been much appreciated.



------------------------------------
Just as a follow up to all of this - I figured before I go and swap out my motherboard I'd try re-seating my RAM one DIMM at a time. Turns out I have one faulty DIMM. The system wouldn't POST at all with just the faulty DIMM. Removing the faulty DIMM now gets rid of the HECI disabled error and allows me to update the Management Engine as expected.

Zitat von plutomaniac im Beitrag #3256

---

Although that guide by virtualfred is what helped me in the beginning as well, 3 years ago, it is outdated today with various mistakes and should not be followed anymore.

---