Dell model: xps 15 9560
Dell Stock bios exe file: https://www.dell.com/support/home/en-us/...-15-9560-laptop

ME bin file extracted from stock exe image(7MB size total) and Attached with this post as "exeME_extract.zip"
ME bin file dumped using intel ME FW Update tool(4MB size total) it also Attached with this post as "ME.zip"

I just want to activate(my goal) intel AMT firmware feature which is disabled by default, See the picture's blue pen mark(The pc is AMT capable, just it disabled in firmware)



For this, I need to enable AMT inside ME bin file and than flash it back to the ME region, am I right? Question is How do I enable AMT inside ME bin file? I already read this guide Intel Management Engine
I think I need fit.exe to modify ME bin file by activating AMT using this fit.exe tool but how safely I can do that, I am noob about this.

This pc's ME version is 11.8, is there any step by step proper guide about using fit.exe for version 11.8?

FULL DETAILS

Intel(R) MEInfo Version: 11.8.79.3722
Copyright(C) 2005 - 2019, Intel Corporation. All rights reserved.
 

 
Intel(R) ME code versions:
 
BIOS Version                                 1.19.2
MEBx Version                                 11.0.0.0010
GbE Version                                  0.8
Vendor ID                                    8086
PCH Version                                  31
FW Version                                   11.8.77.3664 H
Security Version (SVN)                       3
LMS Version                                  2026.14.0.1682
MEI Driver Version                           2013.14.0.1529
Wireless Hardware Version                    Not Available
Wireless Driver Version                      Not Available
 
FW Capabilities                              0x31111140
 
        Intel(R) Capability Licensing Service - PRESENT/ENABLED
        Protect Audio Video Path - PRESENT/ENABLED
        Intel(R) Dynamic Application Loader - PRESENT/ENABLED
        Intel(R) Platform Trust Technology - PRESENT/DISABLED
 
Re-key needed                                False
Platform is re-key capable                   True
TLS                                          Disabled
Last ME reset reason                         Global system reset
Local FWUpdate                               Enabled
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Host Read Access to ME                       Disabled
Host Write Access to ME                      Disabled
Host Read Access to EC                       Disabled
Host Write Access to EC                      Disabled
SPI Flash ID 1                               EF4019
SPI Flash ID 2                               Unknown
BIOS boot State                              Post Boot
OEM ID                                       68853622-eed3-4e83-8a86-6cde315f6b78
Capability Licensing Service                 Enabled
OEM Tag                                      0x00000000
Slot 1 Board Manufacturer                    0x00001028
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Enabled
C-link Status                                Enabled
Independent Firmware Recovery                Disabled
EPID Group ID                                0x1FE2
LSPCON Ports                                 None
5K Ports                                     None
OEM Public Key Hash FPF                      963847BF4FA55A02B326C561C56BCE68820041CAC285B43AE1F1B1FEB3FED4A4
OEM Public Key Hash ME                       963847BF4FA55A02B326C561C56BCE68820041CAC285B43AE1F1B1FEB3FED4A4
ACM SVN FPF                                  0x2
KM SVN FPF                                   0x0
BSMM SVN FPF                                 0x0
GuC Encryption Key FPF                       0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME                        0000000000000000000000000000000000000000000000000000000000000000
 
                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Enabled                  Enabled
Protect BIOS Environment                     Enabled                  Enabled
CPU Debugging                                Enabled                  Enabled
BSP Initialization                           Enabled                  Enabled
Measured Boot                                Enabled                  Enabled
Verified Boot                                Enabled                  Enabled
Key Manifest ID                              0xF                      0xF
Enforcement Policy                           0x3                      0x3
PTT                                          Enabled                  Enabled
PTT Lockout Override Counter                 0x0
EK Revoke State                              Not Revoked
PTT RTC Clear Detection FPF                  0x0
 
 

@superb123 All your MEs are unconfigured, that can easily be checked with ME analyzer. One would need a complete bios dump of the system where AMT should be enabled.

You might want to read [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization, main process is quite similar.

I doubt otherwise that it's just to enable AMT in ME for this machine. You'd need vpro capable chipset, processor, network card, too. What are the specs of this 'xps 15 9560'?

@lfb6 - He needs to dump onboard ME FW with FPT or programmer, edit with FITc to enable, then program that back.
This model may have service jumper that will allow this, otherwise Pinmod or programmer may be required. Or it may be possible to flash back in the edited ME FW with ME FW Update tool too, once directly dumped

@Lost_N_BIOS Thanks, I thought that was what I wrote? But anyway, lets check conditions first: Looked at 2 configurations for an xps 15 9650 and they were both chipset and processor 'Intel vPro® Platform Eligibility No". MEInfo does also look very much "no", by the way.

@Lost_N_BIOS
@lfb6

Thanks for the reply

Zitat von Lost_N_BIOS im Beitrag #3

---

@lfb6 - He needs to dump onboard ME FW with FPT or programmer, edit with FITc to enable, then program that back.
This model may have service jumper that will allow this, otherwise Pinmod or programmer may be required. Or it may be possible to flash back in the edited ME FW with ME FW Update tool too, once directly dumped

---

Zitat von lfb6 im Beitrag #4

---

@Lost_N_BIOS Thanks, I thought that was what I wrote? But anyway, lets check conditions first: Looked at 2 configurations for an xps 15 9650 and they were both chipset and processor 'Intel vPro® Platform Eligibility No". MEInfo does also look very much "no", by the way.

---

@lfb6 - Ahh yes, I did not notice about CPU/Chipset, assumed superb123 already checked all that before asking, because often some resold Dell's and others have AMT disabled directly via ME.

So yes, @superb123 - if CPU and or chipset does not support AMT nothing can be done here
If CPU and chipset supported it, you would dump your own BIOS ME FW to edit then flash back, not use stock since it's unconfigured

@superb123 You can get chipset in HwInfo, too. But I found HWInfo not to be very clear only few places where there's more than chipset family. Otherwise a 'fpt???.exe -I' will give you correct information:



HwInfo isn't too clear with what it's presenting, and the information that you displayed is just about the capabilities of the firmware itself, not of the system. So the info displayed there can be misleading- compare the vpro section:



(Only reference to chipset info in HwInfo I could find in the lowest part of picture)

@lfb6 - Chipset is shown in HWINFO at little CPU-z-like window, under Motherboard model name, and it shown same in Large window on Motherboard (Root) section

@Lost_N_BIOS
@lfb6
yes I am now 100% clear about cpu not supporting AMT. here is it's official specification under Advance Technologies
https://ark.intel.com/content/www/us/en/...o-3-80-ghz.html

Zitat von Lost_N_BIOS im Beitrag #6

---

@lfb6 - Ahh yes, I did not notice about CPU/Chipset, assumed superb123 already checked all that before asking, because often some resold Dell's and others have AMT disabled directly via ME.

So yes, @superb123 - if CPU and or chipset does not support AMT nothing can be done here
If CPU and chipset supported it, you would dump your own BIOS ME FW to edit then flash back, not use stock since it's unconfigured

---

Zitat von lfb6 im Beitrag #7

---

@superb123 You can get chipset in HwInfo, too. But I found HWInfo not to be very clear only few places where there's more than chipset family. Otherwise a 'fpt???.exe -I' will give you correct information:



HwInfo isn't too clear with what it's presenting, and the information that you displayed is just about the capabilities of the firmware itself, not of the system. So the info displayed there can be misleading- compare the vpro section:



(Only reference to chipset info in HwInfo I could find in the lowest part of picture)

---

@superb123 Afaik there's no bullet proof tool to check for AMT compatibility. Having a not AMT capable (socketed) CPU will also change MEInfo output in a way that would give you a hint what to change.

Earlier it were i5 and noch overclockable i7 processors and Q/ QM chipsets that were AMT compatible. Most systems where one simply could avtivate KVM did have standard manageability already. You'll have to check every item (chipset, processor, network and existing ME version). Machines where it easily can be changed in the configuration are mostly business machines, already configured for 'standard manageaibility'.

Why is it important for you to have AMT/ what would you need it for (on a notebook)?

(If you're addressing directly- as you already do- it's normally clear what content you're referring to and might not be necessary to quote the complete content. At least for me it's more difficult to read and the threads get 'blown up' since content is repeated twice, thrice... But that's just my 5 cent)

@lfb6

Zitat von lfb6 im Beitrag #10

---

You'll have to check every item (chipset, processor, network and existing ME version). Machines where it easily can be changed in the configuration are mostly business machines, already configured for 'standard manageaibility'.

---

Zitat von lfb6 im Beitrag #10

---

Why is it important for you to have AMT/ what would you need it for (on a notebook)?

---

@superb123 AMT capability in processor, chipset, network card is hardware. ME can be configured, if AMT is configured 'out' (and hardware is OK), but it's not possible to go from a 'consumer' ME that wouldn't be capable of AMT to a 'corporate' ME for example- but no one would build such a combination anyway. (Practically: Who would build a machine that one could sell as a business machine with that feature disabled. Only example I know is some HP/ Dell machines where they sell a downgrade to standard manageability for som $30 (?) difference)

For the hardware: ark.intel.com is your friend, check for "Intel vPro® Platform Eligibility".

@lfb6
@Lost_N_BIOS
I think this laptop ME is corporate lavel? as it shown in ME analyzer tool



Ok lets move to Fit.exe use(I know this laptop has no AMT hardware capability) but want to try by modify amt to enabled and let see what happen. In fit.exe there are several options, what option needs to enable or disable I am not clear about that(example: do I need to keep GBE and EC region enabled before modifying ME by fit.exe) need little bit guide.

Zitat von Lost_N_BIOS im Beitrag #6

---

So yes, @superb123 - if CPU and or chipset does not support AMT nothing can be done here
If CPU and chipset supported it, you would dump your own BIOS ME FW to edit then flash back, not use stock since it's unconfigured

---

okI following this guide now [Guide] Clean Dumped Intel Engine (CS)ME/(CS)TXE Regions with Data Initialization let see If I can learn something about "unconfigured" things.