Forum - RE: Intel Management Engine: Drivers, Firmware & System Tools

Win-Raid Forum (Drivers - Firmware - Modding) � Special Topics � Intel Management Engine � Intel (Converged Security) Management Engine: Drivers, Firmware and Tools

Page 292 of 380 � Page 1 ... 287 288 289 290 291 292 293 294 295 296 ... 380 Page �

Topic settings

Print view

Jump to forum

General & Forum related Topics News / Announcements Forum-related Questions & Suggestions Off Topic Important Drivers (AHCI/RAID, NVMe, USB etc.) General: Storage Drivers (AHCI/RAID, NVMe and USB) Specific: Intel AHCI/RAID Drivers Specific: NVIDIA nForce Chipset Drivers (incl. AHCI/RAID) Specific: NVMe Drivers Other Drivers System Performance RAID Performance AHCI/NVMe Performance Solid State Drives BIOS Modding BIOS Modding Guides and Problems BIOS modules (PCI ROM, EFI and others) BIOS Modding Requests Reports: BIOS Modding Results Offers: Already modded special BIOSes Special Topics Intel Management Engine CPU Microcodes NVMe Support for old Systems Other Tools (not BIOS modding related) Interesting PC Hardware & Software OS related Topics Windows 11 Windows 8-10/Server 2012-2019 Windows 7/Vista/Server 2008 Windows XP/2000/Server 2003 DOS/Windows 3.X/9X/ME - Retro Gaming Other Operating Systems

#4366 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Thu Mar 07, 2019 9:39 pm (Last edited: Thu Mar 07, 2019 9:39 pm)

Something very strange happened to me. I noticed that my board, at full load used to make a noise, like a bzzzzz but as they come they dissapear. This weekend, doing some OS installs to find the best AHCI drivers, I noticed that MEI Device has gonne. I've tryed everything at Bios and with installers drivers but the device has definitively gonne. I thought that the noise bzzzz was the MEI Chip burning away.

Any advice to me ?

PS. I already tryed Gigabyte support and Im waiting his answer.

reply

#4367 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Thu Mar 07, 2019 11:07 pm

It's definitely not some chip burning. The Engine co-processor is within the PCH so if that died you would have other major issues as well. You are probably hearing coil whine from some component but that's not dangerous, only annoying. Run MEInfo tool with "-verbose" parameter and then with "-fwsts" parameter and show us the results.

reply

#4368 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Fri Mar 08, 2019 1:22 am (Last edited: Fri Mar 08, 2019 1:24 am)

Thanks for the answer @plutomaniac !

When I get at home I will try these commands and post result here... thank about coil wine... it's strange because I have my PC for about 5 years and never happen...these days these sound appear and MEI gonne...really weird.

My Computer -
GA-B75M-D3H, Xeon E3 1280 v2, 16 Gb Ram 1600 CL9, GTX 1060 6Gb (before was an GTX 960 and never got this sound), SSD Kingston 120 Gb, SSD Samsung 860 Evo 500 Gb, Seagate 1 Tb, Power Supply CoolerMaster 80plus 550w

PS. It only happen at full load, like 3dMark, Cinebench, Vray bench... normal use and games doesnt happen

reply

#4369 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Fri Mar 08, 2019 1:59 am (Last edited: Fri Mar 08, 2019 2:00 am)

It could be related since the Engine does control system clocks and power management so, if its firmware is corrupt, it could be that some power options are not working optimally causing the coil while side-effect.

reply

#4370 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Fri Mar 08, 2019 8:48 am (Last edited: Fri Mar 08, 2019 9:42 am)

this not help me @plutomaniac. I have read but my english is not so good. Arrogant answers can therefore be avoided. Latest v12 is intel_me_fw_12.0.30.1408_con_h(www.station-drivers.com). Whene i check this i get this message with ME Analyzer: File size exceeds firmware, unneeded padding! The file on station driver is compiled, dont need Flash Image Tool.

reply

#4371 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sat Mar 09, 2019 12:47 am

Hi.

I did the commands on my computer and got these values. I made an text file attached. I have a video with the supposed coil but the sound is different to me... I can upload if you want to check.

Thank you again

EagleOwn has attached files to this post

MEInfo.txt

reply

#4372 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sat Mar 09, 2019 3:31 am (Last edited: Sat Mar 09, 2019 3:33 am)

Zitat von EagleOwn im Beitrag #4376
I did the commands on my computer and got these values.

Yes the ME is not working properly. It's probably corrupted. Run Flash Programming Tool with "-greset" parameter to see if that helps at all. If not, you'll need to re-flash the ME firmware which requires read/write access to the ME region of the SPI/BIOS chip, meaning an unlocked Flash Descriptor as explained at [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing. It's a 7-series Gigabyte board so there is a very high chance that the FD is already unlocked as it was back then, speaking from personal experience. There should also exist a Backup BIOS chip and I think you can initiate a recovery process which copies the Backup to Main. But if the FD is unlocked on the Main, there is no need to mess with the Backup chip.

Zitat von EagleOwn im Beitrag #4376
I have a video with the supposed coil but the sound is different to me... I can upload if you want to check.

No need. Let's fix the ME firmware first and who knows, that side effect might go away.

reply

#4373 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sun Mar 10, 2019 12:53 am (Last edited: Sun Mar 10, 2019 6:03 am)

Hi @plutomaniac ! I've tried your first tip but I got no success, FWtool didn't recognize my chip or ME FW and stopped, before going to second procedure I was thinking if ME is on Bios region, maybe...if I got lucky, I could rewrite my Bios and with that repair it, but with a simples Bios update probably I will not get it, so I've tried Bios Recovery of MB, holded power button for about 3 seconds and a half ( just before it poweroff again) from a startup and the process of Backup started..and after system boot up... tãn tãn tãn tãn.... Intel ME was there and operational. Thank you for your help and to give me a light of hope.

Now a second question... using MEInfo I noticed I upgraded it with a 1.5Mb FW... I did the upgrade november 2018... there is a chance that I upgrade with a wrong FW ? Should my system be the 5Mb corporate ?

Edit: I extracted my current FW with FW tool and check it with MEA and it say it's 5Mb. but its an old version and vunerable to SA-000086. I'm affraid to update again and it get corrupted again.

PS. I dont have more coil whine. I remember it began to do sounds after I update it, did I something wrong ?

EagleOwn has attached files to this post

reply

#4374 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sun Mar 10, 2019 3:44 pm (Last edited: Sun Mar 10, 2019 3:45 pm)

The SPI/BIOS image from Gigabyte includes 5MB firmware so you must update to that only. You can apply the latest from this thread which also covers SA-00086. There shouldn't be any problems but then again, you can recover very easily no matter what. Not hearing the coil whine is a good thing of course and it indeed had to do with power management issues while the ME was not operational.

reply

#4375 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sun Mar 10, 2019 7:14 pm (Last edited: Sun Mar 10, 2019 7:14 pm)

Intel CSME 11.8 Consumer PCH-LP C Firmware v11.8.60.3561 (NPDM + YPDM)

Note: ME Analyzer v1.82.3 or newer is required to properly detect the PDM status of the above firmware.

reply

#4376 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sun Mar 10, 2019 7:54 pm

Hi! I've been catching up with the whole affair today looking to bring a system I have up to date.

Although it was several months ago I read you wanted some info on systems shipping with CSME 12, so here there are some outputs (MEI Analyzer comes in another post because of the character limit :S):

MEInfoWin64.exe -verbose:

Intel (R) MEInfo Version: 12.0.22.1310
Copyright (C) 2005 - 2018, Intel Corporation. All rights reserved.

LPC Device Id: 9D84.
Platform: Cannonlake Platform

Windows OS Version : 10.0

FW Status Register1: 0xA4000255
FW Status Register2: 0x860B0106
FW Status Register3: 0x00000020
FW Status Register4: 0x00004004
FW Status Register5: 0x00001F01
FW Status Register6: 0x07C00BC9
    CurrentState:                            Normal
    ManufacturingMode:                       Enabled
    FlashPartition:                          Valid
    OperationalState:                        CM0 with UMA
    InitComplete:                            Complete
    BUPLoadState:                            Success
    ErrorCode:                               No Error
    ModeOfOperation:                         Normal
    SPI Flash Log:                           Present
    Phase:                                   Maestro
    ME File System Corrupted:                No
    PhaseStatus:                             UNKNOWN
    FPF and ME Config Status:                Not committed
FW Capabilities value is 0x31109240
Feature enablement is 0x31109240
Platform type is 0x41000391
Intel(R) ME code versions:

    Table Type 255 ( 0x FF ) found, size of   0 (0x 00 ) bytes
BIOS Version                                 1.3.0
    Table Type 255 ( 0x FF ) found, size of   0 (0x 00 ) bytes
    Table Type   0 ( 0x 00 ) found, size of  54 (0x 36 ) bytes
    Table Type   1 ( 0x 01 ) found, size of  74 (0x 4A ) bytes
    Table Type   2 ( 0x 02 ) found, size of  62 (0x 3E ) bytes
    Table Type   3 ( 0x 03 ) found, size of  50 (0x 32 ) bytes
    Table Type   8 ( 0x 08 ) found, size of  25 (0x 19 ) bytes
    Table Type   9 ( 0x 09 ) found, size of  23 (0x 17 ) bytes
    Table Type  10 ( 0x 0A ) found, size of  27 (0x 1B ) bytes
    Table Type  11 ( 0x 0B ) found, size of  79 (0x 4F ) bytes
    Table Type  12 ( 0x 0C ) found, size of  21 (0x 15 ) bytes
    Table Type  15 ( 0x 0F ) found, size of  37 (0x 25 ) bytes
    Table Type  21 ( 0x 15 ) found, size of   9 (0x 09 ) bytes
    Table Type  25 ( 0x 19 ) found, size of  11 (0x 0B ) bytes
    Table Type  32 ( 0x 20 ) found, size of  22 (0x 16 ) bytes
    Table Type  34 ( 0x 22 ) found, size of  19 (0x 13 ) bytes
    Table Type  36 ( 0x 24 ) found, size of  18 (0x 12 ) bytes
    Table Type  35 ( 0x 23 ) found, size of  27 (0x 1B ) bytes
    Table Type  36 ( 0x 24 ) found, size of  18 (0x 12 ) bytes
    Table Type  35 ( 0x 23 ) found, size of  27 (0x 1B ) bytes
    Table Type  36 ( 0x 24 ) found, size of  18 (0x 12 ) bytes
    Table Type  35 ( 0x 23 ) found, size of  27 (0x 1B ) bytes
    Table Type  36 ( 0x 24 ) found, size of  18 (0x 12 ) bytes
    Table Type  35 ( 0x 23 ) found, size of  27 (0x 1B ) bytes
    Table Type  36 ( 0x 24 ) found, size of  18 (0x 12 ) bytes
    Table Type  35 ( 0x 23 ) found, size of  27 (0x 1B ) bytes
    Table Type  16 ( 0x 10 ) found, size of  25 (0x 19 ) bytes
    Table Type  17 ( 0x 11 ) found, size of  66 (0x 42 ) bytes
    Table Type  19 ( 0x 13 ) found, size of  33 (0x 21 ) bytes
    Table Type 205 ( 0x CD ) found, size of  24 (0x 18 ) bytes
    Table Type 205 ( 0x CD ) found, size of  93 (0x 5D ) bytes
    Table Type 205 ( 0x CD ) found, size of 388 (0x 184 ) bytes
    Table Type 205 ( 0x CD ) found, size of 208 (0x D0 ) bytes
    Table Type   7 ( 0x 07 ) found, size of  37 (0x 25 ) bytes
    Table Type   4 ( 0x 04 ) found, size of 185 (0x B9 ) bytes
    Table Type  20 ( 0x 14 ) found, size of  37 (0x 25 ) bytes
    Table Type 126 ( 0x 7E ) found, size of  57 (0x 39 ) bytes
    Table Type  22 ( 0x 16 ) found, size of 121 (0x 79 ) bytes
    Table Type  27 ( 0x 1B ) found, size of  24 (0x 18 ) bytes
    Table Type  28 ( 0x 1C ) found, size of  35 (0x 23 ) bytes
    Table Type 177 ( 0x B1 ) found, size of  14 (0x 0E ) bytes
    Table Type 178 ( 0x B2 ) found, size of 126 (0x 7E ) bytes
    Table Type 208 ( 0x D0 ) found, size of  35 (0x 23 ) bytes
    Table Type 216 ( 0x D8 ) found, size of  31 (0x 1F ) bytes
    Table Type 217 ( 0x D9 ) found, size of  28 (0x 1C ) bytes
    Table Type 218 ( 0x DA ) found, size of 253 (0x FD ) bytes
    Table Type 218 ( 0x DA ) found, size of 187 (0x BB ) bytes
    Table Type 220 ( 0x DC ) found, size of  24 (0x 18 ) bytes
    Table Type 221 ( 0x DD ) found, size of  21 (0x 15 ) bytes
    Table Type 222 ( 0x DE ) found, size of  18 (0x 12 ) bytes
    Table Type 218 ( 0x DA ) found, size of  79 (0x 4F ) bytes
MEBx Version                                 0.0.0.0000
GbE Version                                  Unknown
Descriptor Version                           1.0
Vendor ID                                    8086
FW Version                                   12.0.5.1117 LP Consumer
LMS Version                                  1846.12.0.1173
MEI Driver Version                           1904.12.0.1208

PMC FW Version                               300.1.20.1016
OEM FW Version                               0.0.0.0000

PCH Information
    PCH Version                              30
    PCH Device ID                            9D84
    PCH Step Data                            D0
    PCH SKU Type                             Production Pre-QS Revenue
    PCH Replacement Counter                  0
    PCH Replacement State                    Disabled
    PCH Unlocked State                       Disabled

FW Capabilities                              0x31109240

    Protect Audio Video Path - PRESENT/ENABLED
    Intel(R) Dynamic Application Loader - PRESENT/ENABLED
    Service Advertisement & Discovery - NOT PRESENT
    Intel(R) Platform Trust Technology - PRESENT/ENABLED
    Persistent RTC and Memory - PRESENT/ENABLED


Capability Licensing Service                 Enabled
End of Manufacturing Enable                  No
Local FWUpdate                               Enabled
OEM ID                                       00000000-0000-0000-0000-000000000000
Integrated Sensor Hub Initial Power State    Disabled
Intel(R) PTT Supported                       Yes
Intel(R) PTT initial power-up state          Enabled
OEM Tag                                      0x00
PAVP Supported                               Yes
Post Manufacturing NVAR Config Enabled       Yes
TLS                                          Disabled

FW Type                                      Production
Last ME reset reason                         Unknown
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Host Read Access to ME                       Enabled
Host Write Access to ME                      Enabled
Host Read Access to EC                       Enabled
Host Write Access to EC                      Enabled
Protected Range Register Base #0 0x0
Protected Range Register Limit #0 0x0
Protected Range Register Base #1 0x0
Protected Range Register Limit #1 0x0
Protected Range Register Base #2 0x0
Protected Range Register Limit #2 0x0
Protected Range Register Base #3 0x0
Protected Range Register Limit #3 0x0
Protected Range Register Base #4 0x0
Protected Range Register Limit #4 0x0
SPI Flash ID 1                               C22018
SPI Flash ID 2                               Not Available
BIOS boot State                              Post Boot
Slot 1 Board Manufacturer                    0x00001028
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Disabled
Minimum Allowed Anti Rollback SVN            1
Image Anti Rollback SVN                      3
Trusted Computing Base SVN                   0
Re-key needed                                False
HW Binding                                   Enabled


                                             FPF         UEP         ME FW
                                                       *In Use
                                             ---         ---         -----
Enforcement Policy                           Not set     0x03        0x03
EK Revoke State                              Not set     Not Revoke  Not Revoke      # Not Revoke=0, Revoke=1
PTT                                          Not set     Enabled     Enabled         # Disabled=0, Enabled=1
OEM ID                                       Not set     0x00        0x00
OEM Key Manifest Present                     Not set     Present     Present         # Not Present=0, Present=1
OEM Platform ID                              Not set     0x00        0x00
OEM Secure Boot Policy                       Not set     0x3F9       0x3F9
CPU Debugging                                Not set     Enabled     Enabled         # Enabled=0, Disabled=1
BSP Initialization                           Not set     Enabled     Enabled         # Enabled=0, Disabled=1
Protect BIOS Environment                     Not set     Enabled     Enabled         # Disabled=0, Enabled=1
Measured Boot                                Not set     Enabled     Enabled         # Disabled=0, Enabled=1
Verified Boot                                Not set     Enabled     Enabled         # Disabled=0, Enabled=1
Key Manifest ID                              Not set     0x0F        0x0F
Persistent PRTC Backup Power                 Not set     Enabled     Enabled         # Enabled=0, Disabled=1
RPMB Migration Done                          Not set     Disabled    Disabled        # Disabled=0, Enabled=1
SOC Config Lock                              Not set     Not Done    Not Done        # Not Done=0, Done=1
SPI Boot Source                              Not set     Enabled     Enabled         # Enabled=0, Disabled=1
TXT Supported                                Not set     Disabled    Disabled        # Disabled=0, Enabled=1

ACM SVN FPF                                  Not set
BSMM SVN FPF                                 Not set
KM SVN FPF                                   Not set
OEM Public Key Hash FPF                      Not set
OEM Public Key Hash UEP                      2A384C46A3E4442377D736FD5E2B91E7E8C9C0175D74A3A9A2463BB5023C9F57
OEM Public Key Hash ME FW                    2A384C46A3E4442377D736FD5E2B91E7E8C9C0175D74A3A9A2463BB5023C9F57
PTT Lockout Override Counter FPF             Not set

cctWin.exe gcc (No PCH stepping data, as expected I guess):

Intel (R) Clock Commander Tool Version: 12.0.22.1310
Copyright (C) 2009 - 2018 Intel Corporation. All rights reserved.

HW Product Family:CNP-LP
FW Version Major: 12
FW Version Minor: 0
FW Version Hotfix: 5
FW Version Build: 1117
ICC HW SKU = ENHANCED


HECI CMD Status = 0x00000000 (SUCCESS)

MEManufWin64.exe -verbose (probably uninteresting though):

Intel (R) MEManuf Version: 12.0.22.1310
Copyright (C) 2005 - 2018, Intel Corporation. All rights reserved.

LPC Device Id: 9D84.
Platform: Cannonlake Platform

Windows OS Version : 10.0

FW Status Register1: 0xA4000255
FW Status Register2: 0x860B0106
FW Status Register3: 0x00000020
FW Status Register4: 0x00004004
FW Status Register5: 0x00001F01
FW Status Register6: 0x07C00BC9
    CurrentState:                            Normal
    ManufacturingMode:                       Enabled
    FlashPartition:                          Valid
    OperationalState:                        CM0 with UMA
    InitComplete:                            Complete
    BUPLoadState:                            Success
    ErrorCode:                               No Error
    ModeOfOperation:                         Normal
    SPI Flash Log:                           Present
    Phase:                                   Maestro
    ME File System Corrupted:                No
    PhaseStatus:                             UNKNOWN
    FPF and ME Config Status:                Not committed
FW Capabilities value is 0x31109240
Feature enablement is 0x31109240
Platform type is 0x41000391
Feature enablement is 0x31109240
ME initialization state valid
ME operation mode valid
Current operation state valid
ME error state valid
MFS is not corrupted
PCH SKU Emulation is correct

MEManuf NextReboot option can only run when M3 Autotest is Enabled.
 done

Get Intel(R) ME test data command... done

Get Intel(R) ME test data command... done
Total of 4 Intel(R) ME test result retrieved



Policy Kernel - Boot Guard : Self Test - Passed

VDM - General : VDM engine - Passed

PAVP - General : Set Edp Port - Passed

Policy Kernel - ME Configuration : PROC_MISSING - Passed

Clear Intel(R) ME test data command... done


MEManuf Operation Passed

I see things have changed and a PMC firmware has to be stitched to the CSME one in order to use FWUpdate, easy thing to do in FIT with the details in the first post. Some other posts also explained that the rest of the configuration in FIT is not relevant for a firmware upgrade through FWUpdate, which was a doubt I had, when opening the ME section of the BIOS update file in FIT there were several settings that differed from the default.

But I wonder if the chipset stepping could be troubling, the official MEI info tool reports it as D0 but MEI Analyzer shows C (and there's no D0 firmware I could see... do they even refer to the same thing?). I was planning on using 12.0.23.1311_CON_LP_C_PRD_EXTR and CNP_300.1.20.1023_LP_C_PRD (the current latest) until I noticed that.

It's a newish machine (an Inspiron 7580) so it's bound to have more BIOS updates. The currently provided ME VCN for this model is at 9 and the latest at 14, FWUpdate prevents SVN and VCN rollbacks, but does anybody know if such restriction also applies to the way Dell BIOS updates are performed? Given that the BIOS update from January has an ME firmware from last June... chances are a new BIOS update would contain an ME firmware that violates that restriction.

That's about it! Thanks for all the useful and detailed info compiled over the years by the way!

reply

#4377 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sun Mar 10, 2019 7:54 pm

ME Analyzer 1.82.2 (-ver86, input being a dump of the running ME via FPTW64.exe -me -d me.bin):

╔══════════════════════════════════════════╗
║         ME Analyzer v1.82.2 r153         ║
╚══════════════════════════════════════════╝

╔══════════════════════════════════════════════════════════════╗
║                MFS 002 Anti-Replay Integrity                 ║
╟───────────────────────────┬──────────────────────────────────╢
║          HMAC MD5         │   redacted (seemed sensitive :P) ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 0      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Anti-Replay Protection  │                No                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 1      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Encryption Protection   │               Yes                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 2      │             0100111b             ║
╟───────────────────────────┼──────────────────────────────────╢
║     Anti-Replay Index     │                0                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 3      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Security Version Number  │                1                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 4      │               00b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Anti-Replay Random Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║ Anti-Replay Counter Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║          Unknown          │    0x7E62D1A6C6EDAFF7E4AF2ED4    ║
╚═══════════════════════════╧══════════════════════════════════╝

╔══════════════════════════════════════════════════════════════╗
║                MFS 003 Anti-Replay Integrity                 ║
╟───────────────────────────┬──────────────────────────────────╢
║          HMAC MD5         │   redacted (seemed sensitive :P) ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 0      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Anti-Replay Protection  │                No                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 1      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Encryption Protection   │               Yes                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 2      │             0100111b             ║
╟───────────────────────────┼──────────────────────────────────╢
║     Anti-Replay Index     │                0                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 3      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Security Version Number  │                1                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 4      │               00b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Anti-Replay Random Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║ Anti-Replay Counter Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║          Unknown          │    0x8C47D4135D767E7449019674    ║
╚═══════════════════════════╧══════════════════════════════════╝

╔══════════════════════════════════════════════════════════════╗
║               MFS 004 SVN Migration Integrity                ║
╟───────────────────────────┬──────────────────────────────────╢
║          HMAC MD5         │   redacted (seemed sensitive :P) ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 0      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Anti-Replay Protection  │                No                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 1      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Encryption Protection   │               Yes                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 2      │             0100111b             ║
╟───────────────────────────┼──────────────────────────────────╢
║     Anti-Replay Index     │                0                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 3      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Security Version Number  │                1                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 4      │               00b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Anti-Replay Random Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║ Anti-Replay Counter Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║          Unknown          │    0x5F4E542839BCD3D3DA6EDAA5    ║
╚═══════════════════════════╧══════════════════════════════════╝

╔══════════════════════════════════════════════════════════════╗
║               MFS 005 Quota Storage Integrity                ║
╟───────────────────────────┬──────────────────────────────────╢
║          HMAC MD5         │   redacted (seemed sensitive :P) ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 0      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Anti-Replay Protection  │                No                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 1      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║   Encryption Protection   │                No                ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 2      │             0010111b             ║
╟───────────────────────────┼──────────────────────────────────╢
║     Anti-Replay Index     │                0                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 3      │                0b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Security Version Number  │                0                 ║
╟───────────────────────────┼──────────────────────────────────╢
║      Flags Unknown 4      │               00b                ║
╟───────────────────────────┼──────────────────────────────────╢
║  Anti-Replay Random Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║ Anti-Replay Counter Value │            0x00000000            ║
╟───────────────────────────┼──────────────────────────────────╢
║          Unknown          │    0xF1449892177F604737BF5670    ║
╚═══════════════════════════╧══════════════════════════════════╝

╔═════════════════════════════════════════════╗
║                 me.bin (1/1)                ║
╟─────────────────────────┬───────────────────╢
║          Family         │       CSE ME      ║
╟─────────────────────────┼───────────────────╢
║         Version         │    12.0.5.1117    ║
╟─────────────────────────┼───────────────────╢
║         Release         │     Production    ║
╟─────────────────────────┼───────────────────╢
║           Type          │ Region, Extracted ║
╟─────────────────────────┼───────────────────╢
║           SKU           │    Consumer LP    ║
╟─────────────────────────┼───────────────────╢
║         Chipset         │      CNP-LP C     ║
╟─────────────────────────┼───────────────────╢
║ Security Version Number │         1         ║
╟─────────────────────────┼───────────────────╢
║  Version Control Number │         9         ║
╟─────────────────────────┼───────────────────╢
║    Production Version   │        Yes        ║
╟─────────────────────────┼───────────────────╢
║    OEM RSA Signature    │        Yes        ║
╟─────────────────────────┼───────────────────╢
║     OEM Unlock Token    │         No        ║
╟─────────────────────────┼───────────────────╢
║     FWUpdate Support    │         No        ║
╟─────────────────────────┼───────────────────╢
║           Date          │     2018-06-21    ║
╟─────────────────────────┼───────────────────╢
║    File System State    │    Initialized    ║
╟─────────────────────────┼───────────────────╢
║           Size          │      0x27A000     ║
╟─────────────────────────┼───────────────────╢
║     Flash Image Tool    │    12.0.5.1117    ║
╟─────────────────────────┼───────────────────╢
║          Latest         │         No        ║
╚═════════════════════════╧═══════════════════╝
╔═════════════════════════════════════════╗
║       Power Management Controller       ║
╟─────────────────────────┬───────────────╢
║          Family         │      PMC      ║
╟─────────────────────────┼───────────────╢
║         Version         │ 300.1.20.1016 ║
╟─────────────────────────┼───────────────╢
║         Release         │   Production  ║
╟─────────────────────────┼───────────────╢
║           Type          │  Independent  ║
╟─────────────────────────┼───────────────╢
║       Chipset SKU       │       LP      ║
╟─────────────────────────┼───────────────╢
║     Chipset Stepping    │       C       ║
╟─────────────────────────┼───────────────╢
║ Security Version Number │       2       ║
╟─────────────────────────┼───────────────╢
║           Date          │   2018-07-02  ║
╟─────────────────────────┼───────────────╢
║           Size          │    0x11000    ║
╟─────────────────────────┼───────────────╢
║     Chipset Support     │      CNP      ║
╟─────────────────────────┼───────────────╢
║          Latest         │       No      ║
╚═════════════════════════╧═══════════════╝

Note: File size exceeds firmware, unneeded padding!

ME Analyzer 1.82.2 (-ver86, input being the ME section extracted from the current BIOS update):

╔══════════════════════════════════════════╗
║         ME Analyzer v1.82.2 r153         ║
╚══════════════════════════════════════════╝

╔═════════════════════════════════════════════════════╗
║           section_2_12.0.5.1117.data (1/1)          ║
╟──────────────────────────────┬──────────────────────╢
║            Family            │        CSE ME        ║
╟──────────────────────────────┼──────────────────────╢
║           Version            │     12.0.5.1117      ║
╟──────────────────────────────┼──────────────────────╢
║           Release            │      Production      ║
╟──────────────────────────────┼──────────────────────╢
║             Type             │  Region, Extracted   ║
╟──────────────────────────────┼──────────────────────╢
║             SKU              │     Consumer LP      ║
╟──────────────────────────────┼──────────────────────╢
║           Chipset            │       CNP-LP C       ║
╟──────────────────────────────┼──────────────────────╢
║   Security Version Number    │          1           ║
╟──────────────────────────────┼──────────────────────╢
║    Version Control Number    │          9           ║
╟──────────────────────────────┼──────────────────────╢
║      Production Version      │         Yes          ║
╟──────────────────────────────┼──────────────────────╢
║      OEM RSA Signature       │          No          ║
╟──────────────────────────────┼──────────────────────╢
║       OEM Unlock Token       │          No          ║
╟──────────────────────────────┼──────────────────────╢
║       FWUpdate Support       │         Yes          ║
╟──────────────────────────────┼──────────────────────╢
║             Date             │      2018-06-21      ║
╟──────────────────────────────┼──────────────────────╢
║      File System State       │      Configured      ║
╟──────────────────────────────┼──────────────────────╢
║             Size             │       0x276000       ║
╟──────────────────────────────┼──────────────────────╢
║       Flash Image Tool       │     12.0.5.1117      ║
╟──────────────────────────────┼──────────────────────╢
║            Latest            │          No          ║
╚══════════════════════════════╧══════════════════════╝
╔═════════════════════════════════════════╗
║       Power Management Controller       ║
╟─────────────────────────┬───────────────╢
║          Family         │      PMC      ║
╟─────────────────────────┼───────────────╢
║         Version         │ 300.1.20.1016 ║
╟─────────────────────────┼───────────────╢
║         Release         │   Production  ║
╟─────────────────────────┼───────────────╢
║           Type          │  Independent  ║
╟─────────────────────────┼───────────────╢
║       Chipset SKU       │       LP      ║
╟─────────────────────────┼───────────────╢
║     Chipset Stepping    │       C       ║
╟─────────────────────────┼───────────────╢
║ Security Version Number │       2       ║
╟─────────────────────────┼───────────────╢
║           Date          │   2018-07-02  ║
╟─────────────────────────┼───────────────╢
║           Size          │    0x11000    ║
╟─────────────────────────┼───────────────╢
║     Chipset Support     │      CNP      ║
╟─────────────────────────┼───────────────╢
║          Latest         │       No      ║
╚═════════════════════════╧═══════════════╝

reply

#4378 | RE: Intel Management Engine: Drivers, Firmware & System Tools datum

Sun Mar 10, 2019 9:33 pm (Last edited: Sun Mar 10, 2019 9:45 pm)

Hi KaoDome, that's a pretty deep dive you've made there. Even checked the File System out, very impressive.

Zitat von KaoDome im Beitrag #4381
I see things have changed and a PMC firmware has to be stitched to the CSME one in order to use FWUpdate, easy thing to do in FIT with the details in the first post.

Indeed they have. That's why I was asking for those logs back then. They are no longer needed as I have sorted out how to distinguish the chipset steppings for each firmware now but it's always good to have them here for future reference.

Zitat von KaoDome im Beitrag #4381
Some other posts also explained that the rest of the configuration in FIT is not relevant for a firmware upgrade through FWUpdate, which was a doubt I had, when opening the ME section of the BIOS update file in FIT there were several settings that differed from the default.

Exactly, OEM FIT configuration (MFS File 7) is useless for FWUpdate use. Only the stock/static Intel configuration (MFS File 6) is needed. The rest of the MFS Files (1-5, 8+) are present at Initialized/dumped firmware so that's why you saw them. These can be removed by following [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization.

Zitat von KaoDome im Beitrag #4381
redacted (seemed sensitive :P)

Ha, interesting thought but it is not actually that sensitive. Each Chipset has its own key but HMAC is used for integrity and combines the hash of said key with a secret Intel private key which is known only to them. Since you cannot reverse a hash (MD5 in this case) to get the original content and the Intel private key is safeguarded, there is nothing to fear from those HMACs.

Zitat von KaoDome im Beitrag #4381
But I wonder if the chipset stepping could be troubling, the official MEI info tool reports it as D0 but MEI Analyzer shows C (and there's no D0 firmware I could see... do they even refer to the same thing?). I was planning on using 12.0.23.1311_CON_LP_C_PRD_EXTR and CNP_300.1.20.1023_LP_C_PRD (the current latest) until I noticed that.

Yes I have noticed that as well. It is Intel being weird as far as I can tell. I have seen CNP-LP systems which report at MEInfo C, others D and even some A (probably a MEInfo bug at older versions). Both CNP-LP C and CNP-LP D are the same firmware-wise. MEA detects them as CNP-LP C because that's what the firmware reports so go figure...

Basically, for all released/Production CNP-LP systems, users need PCH-LP C firmware. One small exception is that one (literally one) Lenovo 330-15ICN laptop (stepping B) which was released very early so that Intel could say/reassure that "hey, we managed to release 1 Cannon Lake CPU in 2018". Cannon Lake is dead now so we know how that turned out.

Zitat von KaoDome im Beitrag #4381
does anybody know if such restriction also applies to the way Dell BIOS updates are performed?

Yes it does. The Dell Updater basically uses a lite FWUpdate EFI variant called "FWUpdate Reduced Size (RS)" so it fully respects the FD locks and the SVN/VCN/PV-bit restrictions of CSME and PMC firmware upgrades/downgrades.

Zitat von KaoDome im Beitrag #4381
Given that the BIOS update from January has an ME firmware from last June... chances are a new BIOS update would contain an ME firmware that violates that restriction.

Technically yes. I think the Dell Updater automatically skips updating the Engine firmware when it detects that it is newer so it should continue to update the BIOS, EC or whatever else it wants to. I agree with you though, you can wait for Dell to release newer firmware and avoid any potential issues, even if nothing like that has been reported here, if I remember properly. Dell is generally decent to good when it comes to Engine firwmware updates so yeah you can wait for them.