If I recall correctly, the command is "afuwinx64.exe backup.bin /O".

This will give you a backup.bin file, which you can open in FIT.

You can download AFUWIN here https://www.ami.com/download/aptio-v-ami...update-utility/

Got it I think, and FIT, where do I get that from?

Get it from the links posted in that topic : Intel (Converged Security) Management Engine: Drivers, Firmware and Tools

More specifically, you might need CSME System Tools v11 r41 - (2021-06-26), download it here : https://mega.nz/file/bB8WAQyS#8tXQB-82nK...r5McWQeG0kcoLgs

Once extracted, FIT is in the Flash Image Tool subfolder.

Zitat von MrXedac im Beitrag #63

---

Get it from the links posted in that topic : Intel (Converged Security) Management Engine: Drivers, Firmware and Tools

More specifically, you might need CSME System Tools v11 r41 - (2021-06-26), download it here : https://mega.nz/file/bB8WAQyS#8tXQB-82nK...r5McWQeG0kcoLgs

Once extracted, FIT is in the Flash Image Tool subfolder.

---

That's weird. I have no issues on my side.
I don't really have a clue on what's going wrong here. Maybe you're not supposed to open the BIOS backup directly in FIT, and the fact that it works on my side is pure luck?

Apologies... I have no idea what could be the problem here. I just tried to do the whole thing again on my side (afuwinx64 backup.bin /O then opening backup.bin in FIT) and I'm not encountering any error :/

I just checked in FIT both before and after updating the ME - options 2 & 3 are the same in both cases so updating the ME probably didn't create the issue
Interl(R) PTT Supported Yes This setting permanently disables Intel(R) PTT in the firmware image.
Intel(R) PTT Supported [FPF] Yes This setting will permanently disable Intel(R) PTT through platform FPFs. Caution: Using this option will permanently disable Intel(R) PTT on the platform hardware.

Not sure if this was like this from when the board came out or as part of one of the bios udpates (i have only used Asus provided Bios and am on the latest 3802 for my board). If i understood correctly short of having a programmer (and even then no sure that would work).

I guess the easiest route would be to simply buy a TPM ...

I would buy a TPM if M8Gene had a connector for it.
Couldn't find any :(

Zitat von MrXedac im Beitrag #67

---

I would buy a TPM if M8Gene had a connector for it.
Couldn't find any :(

---

Zitat von theWillow im Beitrag #47

---

You have also an option to enable the PTT itself maybe try also changing this one:

---

Zitat von maxdarksol im Beitrag #12

---

Adjusting UEFI hidden settings without flash mod_BIOS
1.get your BIOS(Download from the official website of the device or back up your current BIOS with AFUWIN64)
2.Using AMI setup IFR extractor in UBU to get configuration file offset
3.Find the "setup_extr.txt" of your motherboard from the ubu directory,open it.
4.ctrl+F Search the key words"TPM Device Selection" for Intel motherboard
5.get the VarStoreInfo (VarOffset/VarName) and Option,
such as “One Of: TPM Device Selection, VarStoreInfo (VarOffset/VarName): 0x6A6, VarStore: 0x1, QuestionId: 0x279D, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 5E 10 5F 10 9D 27 01 00 A6 06 14 10 00 01 00}
Default: DefaultId: 0x0, Value (8 bit): 0x0 {5B 06 00 00 00 00}
One Of Option: dTPM, Value (8 bit): 0x0 {09 07 61 10 00 00 00}
One Of Option: PTT, Value (8 bit): 0x1 {09 07 60 10 00 00 01}”
6.Make a support setup_var command grub boot disk:a FAT32 Udisk,make dir /efi/boot/bootx64.efi
7.disable secure boot,and boot to the Udisk
8.use the command "setup_var 0x6A6",output the result "0x0",it means dTPM.You can type"setup_var 0x6A6 0x1" to transfer PTT.
9.Shut down your coumuter,boot to windows10, run tpm.msc,Check TPP start or not.
10.go to UEFI enable the secure boot.
download: wwi.lanzoui.com/i8SLtqs1o9i

---

So a little update from me, Maximus8Gene:

meinfowin64:
Intel(R) MEInfo Version: 11.8.86.3909
Copyright(C) 2005 - 2020, Intel Corporation. All rights reserved.

Intel(R) ME code versions:

BIOS Version 3801
MEBx Version 0.0.0.0000
GbE Version 0.7
Vendor ID 8086
PCH Version 31
FW Version 11.8.50.3399 H
Security Version (SVN) 3
LMS Version 1907.12.0.1224
MEI Driver Version 1904.12.0.1208
Wireless Hardware Version Not Available
Wireless Driver Version Not Available

FW Capabilities 0x31111540

Intel(R) Capability Licensing Service - PRESENT/ENABLED
Protect Audio Video Path - PRESENT/ENABLED
Intel(R) Dynamic Application Loader - PRESENT/ENABLED
Intel(R) Platform Trust Technology - PRESENT/ENABLED

Re-key needed False
Platform is re-key capable True
TLS Disabled
Last ME reset reason Power up
Local FWUpdate Enabled
BIOS Config Lock Enabled
GbE Config Lock Enabled
Host Read Access to ME Enabled
Host Write Access to ME Disabled
Host Read Access to EC Disabled
Host Write Access to EC Disabled
SPI Flash ID 1 EF4018
SPI Flash ID 2 Unknown
BIOS boot State Post Boot
OEM ID 00000000-0000-0000-0000-000000000000
Capability Licensing Service Enabled
OEM Tag 0x00000000
Slot 1 Board Manufacturer 0x00000000
Slot 2 System Assembler 0x00000000
Slot 3 Reserved 0x00000000
M3 Autotest Disabled
C-link Status Disabled
Independent Firmware Recovery Disabled
EPID Group ID 0x1F90
LSPCON Ports None
5K Ports None
OEM Public Key Hash FPF 0000000000000000000000000000000000000000000000000000000000000000
OEM Public Key Hash ME 0000000000000000000000000000000000000000000000000000000000000000
ACM SVN FPF 0x0
KM SVN FPF 0x0
BSMM SVN FPF 0x0
GuC Encryption Key FPF 0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME 0000000000000000000000000000000000000000000000000000000000000000

FPF ME
--- --
Force Boot Guard ACM Disabled Disabled
Protect BIOS Environment Disabled Disabled
CPU Debugging Enabled Enabled
BSP Initialization Enabled Enabled
Measured Boot Disabled Disabled
Verified Boot Disabled Disabled
Key Manifest ID 0x0 0x0
Enforcement Policy 0x0 0x0
PTT Enabled Enabled
PTT Lockout Override Counter 0x0
EK Revoke State Revoked
PTT RTC Clear Detection FPF Not set

edit:
meinfowin64 -fwsts
Intel(R) MEInfo Version: 11.8.86.3909
Copyright(C) 2005 - 2020, Intel Corporation. All rights reserved.



FW Status Register1: 0x90000245
FW Status Register2: 0x83100106
FW Status Register3: 0x00000420
FW Status Register4: 0x00084004
FW Status Register5: 0x00000000
FW Status Register6: 0x40000000

CurrentState: Normal
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with UMA
InitComplete: Complete
BUPLoadState: Success
ErrorCode: No Error
ModeOfOperation: Normal
SPI Flash Log: Present
FPF HW Source value: Not Applicable
ME FPF Fusing Patch Status: ME FPF Fusing patch NOT applicable
Phase: Maestro
ICC: Valid OEM data, ICC programmed
ME File System Corrupted: No
FPF and ME Config Status: Match


Any ideas anyone? The MEInfo says PTT is enabled, windows says its not available at all, BIOS has no new option... WTH?

Can I do something if there's no TPM Device Selection? Asus H81M-A

Zitat von orsentic im Beitrag #72

---

Can I do something if there's no TPM Device Selection? Asus H81M-A

---

Zitat von Gus.Ghanem im Beitrag #73

---

Your chipset doesn't seem to support firmware TPM, but your manual says under internal I/O "1 x TPM connector (H81M-A model only)", if that stands for Trust Platform Module, it still doesn't mean you'll be able to find one for your motherboard.

---

Zitat von maxdarksol im Beitrag #68

---

Zitat von MrXedac im Beitrag #67

---

I would buy a TPM if M8Gene had a connector for it.
Couldn't find any :(

---

checking the state of the Intel ME Manufacturing Mode,there may also be an opportunity to modify the FPF settings
https://github.com/ptresearch/mmdetect
http://blog.ptsecurity.com/2018/10/intel...de-macbook.html

---

Zitat

---

CurrentState: Normal
ManufacturingMode: Disabled
FlashPartition: Valid
OperationalState: CM0 with UMA
InitComplete: Complete
BUPLoadState: Success
ErrorCode: No Error
ModeOfOperation: Normal
SPI Flash Log: Present
FPF HW Source value: Not Applicable
ME FPF Fusing Patch Status: ME FPF Fusing patch NOT applicable
Phase: ROM/Preboot
ICC: Valid OEM data, ICC programmed
ME File System Corrupted: No
PhaseStatus: AFTER_SRAM_INIT
FPF and ME Config Status: No match

---

I checked the output of FPTW64 -FPFs :

Zitat

---

Intel (R) Flash Programming Tool. Version: 11.8.86.3877
Copyright (c) 2007 - 2020, Intel Corporation. All rights reserved.

FPF Name
---------------------------------
"Boot Guard Profile Configuration" ("BootGuard")
"Force Boot Guard ACM Enabled"
"CPU Debugging"
"BSP Initialization"
"Protect BIOS Environment Enabled"
"Measured Boot Enabled"
"Verified Boot Enabled"
"Key Manifest ID"
"Error Enforcement Policy"
"Error Enforcement Policy 0"
"Error Enforcement Policy 1"
"Enable Intel (R) Platform Trusted Technology" ("PTT")
"Boot Guard Module SVN"
"Key Manifest SVN"
"BIOS Startup Module SVN"
"OEM Credential"
"GuC Encryption Key"
"PTT Override Enforcement" ("PTTOvrEnforcement")

---

So actually there is that PTT enable fuse. Checking CVARS, we also have this "Intel PTT Supported" (PTTEnable). I don't know what I should do with these information though... if I understand things correctly, ME needs to be in Manufacturing Mode in order to set CVars or FPFs, but Manufacturing Mode is disabled on my board so...