Hello everyone,

I recently bought a laptop motherboard from ebay (lenovo edge e330 motherboard (with hm77 intel chipset)and CPU i5-3210m) to be used as a computer to connect to with RDP or other remote access apps (for browsing etc).

I would also like to connect to it remotely with using Intel ME to assess any problems (power up, access change bios settings, etc)
I mention I didn't previously use intel ME or configured but I read recently about it and would like to use it.

But the problem is I cannot access it from anywhere.

I guess the motherboard is a bit odd because in BIOS system board serial number is INVALID; system unit serial number is OK and I can check it on lenovo site (1 year warranty laptop bought in 2012)
(no msdm table is present in smbios acpi)
Intel AMT is Enabled but Not Activated.
At first I had the CTRL-P configure option present in boot menu. But then after a few windows boots its not present anymore.
Bios is latest version
no devices, drivers appear in Device Manager (related to intel ME, AMT etc).

As I said I don't know much about Intel ME , so I am just asking:
- could it be set up already by the previous owner (of the motherboard) and block any local client trying to access its settings
in other words could a local client be cut out (some opt out or something) to be able to access ME settings and set up to call home
should i be worried or am I to paranoid about this possibility.
- what could I do regain access to it and configure it (and be able to access the computer from WAN)

Thanks.

HM77 chipset doesn't offer intel vPro, that would be QM77. if this chipset comes with a 5 MB ME firmware it can maybe offer Intel SBA.

It wouldn't be a good idea to present a ME 8.x vPro interface to the internet (WAN?) anyway. This version is discontinued, has several unfixed security bugs, and can't be updated to a higher version.

Thanks for you answer, but that doesn't answer any of my questions

Lenovo e330 (intel hm77 chipset) has Intel ME support because there are drivers for this on it's support lenovo page.
(the drivers to manage it for windows, even an update to MBEX v8.1 (i didn' try it yet. I don't want to overwrite any data if AMT is configured already)

In short what I was asking is how can I access Intel AMT , MEBx and configure it because I can't.
Could this be because (access to the Intel AMT) is cut off by a previous ME configuration data (in bios chip)
and can the motherboard be configured to call home (IP from internet, wan)
There was CTRL+P option until I connected to internet, and booted a couple of times in windows

Zitat von corexlim im Beitrag #3

---

......Lenovo e330 (intel hm77 chipset) has Intel ME support because there are drivers for this on it's support lenovo page.
(the drivers to manage it for windows, even an update to MBEX v8.1 (i didn' try it yet. I don't want to overwrite any data if AMT is configured already)

In short what I was asking is how can I access Intel AMT , MEBx and configure it because I can't........

---

As I said I don't know that much about Intel AMT , ME etc. I could easily mix terms meaning etc.
And now from what you wrote and looking more carefully at the side descriptions in BIOS I reckon I confused Intel AT Module Activation with Intel AMT. Intel AT Module is enabled.

But there is a "CTRL-P to enter the Management Engine setup screen" option
When I first tried to enter this all I got was Entering MEBx ... and windows loads.

And on lenovo support page for this laptop (I used the serial so I am not mistaken; it's a Edge E330 (ThinkPad) - Type 3354) at Chipset Drivers there are:

Intel Management Engine Interface Driver for Windows 10 (32-bit, 64-bit), 8 (64-bit) - Notebook
This package installs the software (Intel Active Management Technology (AMT) Management Engine Interface Driver) to enable the following device. - Intel Management Engine Interface

Intel Management Engine 8.1 Firmware for Windows 8.1 (64-bit), 8 (64-bit), 7 (32-bit, 64-bit), XP (32-bit, 64-bit) - ThinkPad E330

Intel Chipset Support for Windows 10 (32-bit, 64-bit), 8.1 (64-bit), 8 (64-bit) - Notebook
This package installs the software (Intel Chipset driver) to enablethe following device. - Intel(R) 7 Series Chipset

Now, in Windows 10 in device manager there are no devices related to the Intel ME, Intel AMT, etc present.
If I try installing Intel Management Interface Drivers i get "this computer does not meet the minimum requirements for installing the software"
Chipset drivers is ok, it installs.

Firmware upgrade I didn't try it because I don't want to mess up BIOS ME data (I think it should be present) , but I guess it won't work even if I tried.

From MeInfoWin64.exe i get:
Error 9458: Communication error between application and Intel ME module (FW Update client)
Error 9459: Internal error (could not determine FW features information)

So what should I make of all this ?
It has to have Intel ME this board. Why can't I access it , configure it.

Intel ME then (and not Intel AMT) I ask you, can it be configured to not be able to access settings somehow, and the board to call home (WAN not LAN), remote control ? I mean by the previous owner). Or is this paranoic?

BIOS is latest version H3ET79WW v1.16

Thanks
------------------------------

I downloaded the pack you said

>cctWin.exe gl
HECI INITIALIZATION FAILED

>FPTW64.exe -I Intel (R) Flash Programming Tool. Version: 8.1.60.1561 Copyright (c) 2007 - 2014, Intel Corporation. All rights reserved. Platform: Intel(R) HM77 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid
--- Flash Devices Found ---
MX25L6405D ID:0xC22017 Size: 8192KB (65536Kb)
W25Q32BV ID:0xEF4016 Size: 4096KB (32768Kb)

Error 104: The 2 SPI flash devices do not have compatible command sets.

>MEInfoWin64.exe

the 2 errors I mentioned in my previous post

----------------------

Lenovo Thinkpad EDGE E330 Intel® 2500 MHz 4096 MB Portable HD Graphics 4000
www.amazon.co.uk/Lenovo-Thinkpad-Intel&r...s/dp/B00CSJ5MCM
Intel Small Business Advantage (SBA): Yes

so it should have Intel AMT SBA

...
also found later this

Lenovo Solutions for Small Business Powered by Intel Small Business Advantage for Windows 7 - Laptop and Desktop

Supported SystemsLaptops:
Lenovo B480, B580
Lenovo V480, V480c, V480u, V480s, V580
ThinkPad Edge E130, E330, E430, E530, S230u, S430
ThinkPad T430, T430i, T430s, T530
ThinkPad W530
ThinkPad X230, X230i, X230 tablet
Desktops:
ThinkCentre Edge 92, Edge 92z

NotesChipset requirement - The computer must be running one of the following chipsets:
Intel Q77 desktop chipset
Intel B75 desktop chipset
Intel QM77 notebook chipset
Intel HM77 notebook chipset
Intel QS77 notebook chipset

CPU requirement - The computer must be running one of the following CPUs:
Intel Core i7 processor with vPro
Intel Core i5 processor with vPro
Intel Core i7 processor without vPro - B75, QM77, HM77 chipsets only
Intel Core i5 processor without vPro - B75, QM77, HM77 chipsets only
Intel Core i3 processor - B75, QM77, HM77 chipsets only
(2nd and 3rd generation processors supported)
Exceptions - The following CPUs are not supported: i3-2308M, i3-2328M,
i3-2348M, i3-2368M, i3-2355M, i3-2365M, i3-2375M
/+ I have Core i3-3110M

Firmware requirement - The computer must support the Intel Management Engine with Small Business Technology (SBT). To check for SBT support:
Click START -> Intel -> Intel Management and Security Status ->Intel Management and Security Status.
Check for a tab called "Intel SBT".
Software requirement - The following software must be installed beforeLenovo Solutions for Small Business.
Microsoft .NET Framework 3.5 or later.
Intel Management Engine Interface driver (also called Intel AMT software)
But as I said I have no Intel MEI devices. and it gives me the error message I posted previously when I try and install it.
- This software is available on Lenovo's support site.
- The Intel Management Engine Interface driver will install the following components required by Lenovo Solutions for Small Business:
MEI driver
Intel Management and Security Status
Intel LMS
Intel UNS
This install package will install the prerequiste "Intel Small Business Advantage".

Zitat von corexlim im Beitrag #7

---

Lenovo Thinkpad EDGE E330 Intel® 2500 MHz 4096 MB Portable HD Graphics 4000
www.amazon.co.uk/Lenovo-Thinkpad-Intel&r...s/dp/B00CSJ5MCM
Intel Small Business Advantage (SBA): Yes

so it should have Intel AMT SBA...

---

Sorry, I ment the laptop should have Intel ME with SBA (not AMT with SBA)

I know my replys are a bit lenghty but please try and read them even if you skim. I wrote about what you asked to write in my 3rd post:

"Now, in Windows 10 in device manager there are no devices related to the Intel ME, Intel AMT, etc present.
/I am using Window 10 thus

If I try installing Intel Management Interface Drivers i get "this computer does not meet the minimum requirements for installing the software"
Chipset drivers is ok, it installs.

From MeInfoWin64.exe i get:
Error 9458: Communication error between application and Intel ME module (FW Update client)
Error 9459: Internal error (could not determine FW features information)

/it loads the driver smxdrv.sys, and launch it as Admin (i know pretty much about windows and computers, I don't know much about Intel ME tough; that's what I am trying to get better in)

Firmware upgrade I didn't try it because I don't want to mess up BIOS ME data (I think it should be present) , but I guess it won't work even if I tried.
"

You don't seem to understand the problem I have. (Do not take it in a negative way)

I know who to find the software and drivers fot Intel ME (with SBA) , or other needed software. Thanks anyway.

But I CANNOT USE IT
I cannot access Intel ME before windows
I cannot set a password in Intel ME MEBx settings.
I remember I had and worked on a Lenovo e330 5-10years ago and I know for sure I could access Intel MEBx config before loading OS. (That is why I wanted to buy this type of board again)
I set a password for it (diffrent from 'admin' the one with the requeirements)
I could access Intel ME settings etc (in the text GUI); but at that time it didn't interest me to access it with Intel ME

On this board I can't, and I am trying to find out why I can't
and if this settings access can be cut of from previous configuration

if you know about Intel ME and configuration please tell me this:
If it can be configured to call home in WAN, and deny access to settings
or is some other thing with this board
Intel ME corruption , problems in BIOS

Zitat von plutomaniac im Beitrag #8

---

Indeed SBA != AMT. Other than that, run MEInfo -fwsts and show us the result because the ME firmware is probably corrupted.

---

Zitat von plutomaniac im Beitrag #13

---

Yes, the ME and/or BIOS firmware are corrupted. You need to repair the corruption and for that you need read/write access to the SPI/BIOS chip. Check if the Flash Descriptor is unlocked, otherwise unlock it by following [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing. Once you have unlocked the FD, you'll re-flash the ME firmware first to see if that's the only corrupted part. I tracked down a SPI/BIOS dump from another E330 online, followed [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization on it so now the ME firmware it has is repaired and can be flashed on your system. Download the attachment and use Flash Programming Tool via "fptw -me -f Lenovo_ThinkPad_Edge_E330_Clean_ME.bin" followed by "fptw -greset". A hard reboot will occur and afterwards, you should have a working ME firmware. Check with "MEInfo -fwsts" again. The hardest part is usually unlocking the FD.

---

Zitat von corexlim im Beitrag #14

---

......Hope I can unlock the FD by software. If it doesn't I am able to reflash (with a programmer) the eeproms(I've done it in the past with other motherboards).....

---

Zitat von lfb6 im Beitrag #15

---

Zitat von corexlim im Beitrag #14

---

......Hope I can unlock the FD by software. If it doesn't I am able to reflash (with a programmer) the eeproms(I've done it in the past with other motherboards).....

---

Don't forget to make a complete dump / a complete backup of your bios before you try to flash the ME! As you already have a programmer this would possibly be the prefereed mode. Reading the chips with fpt(w[64]) shouldn't be a problem, too, but you'd possibly have to change fparts.txt. (Link to similar 2 chip configuration)

---

Zitat von plutomaniac im Beitrag #10

---

Yes, the ME and/or BIOS firmware are corrupted. You need to repair the corruption and for that you need read/write access to the SPI/BIOS chip. Check if the Flash Descriptor is unlocked, otherwise unlock it by following [Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing. Once you have unlocked the FD, you'll re-flash the ME firmware first to see if that's the only corrupted part. I tracked down a SPI/BIOS dump from another E330 online, followed [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization on it so now the ME firmware it has is repaired and can be flashed on your system. Download the attachment and use Flash Programming Tool via "fptw -me -f Lenovo_ThinkPad_Edge_E330_Clean_ME.bin" followed by "fptw -greset". A hard reboot will occur and afterwards, you should have a working ME firmware. Check with "MEInfo -fwsts" again. The hardest part is usually unlocking the FD.

---

Zitat von corexlim im Beitrag #5

---

.....
>FPTW64.exe -I Intel (R) Flash Programming Tool. Version: 8.1.60.1561 Copyright (c) 2007 - 2014, Intel Corporation. All rights reserved. Platform: Intel(R) HM77 Express Chipset
Reading HSFSTS register... Flash Descriptor: Valid
--- Flash Devices Found ---
MX25L6405D ID:0xC22017 Size: 8192KB (65536Kb)
W25Q32BV ID:0xEF4016 Size: 4096KB (32768Kb)

Error 104: The 2 SPI flash devices do not have compatible command sets.

---