search

corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.46k stars 277 forks source link

Intel ME manufacturing mode? #195

Open jjurkus opened 6 years ago

jjurkus commented 6 years ago

With the Supermicro X11 and X10 motherboards you have to set a jumper on the motherboard to flash the ME region via the AFU* utilities. This is called the manufacturing mode, sometimes recovery mode.

When this jumper is selected I can flash the ME firmware, but, also in the BIOS the ME firmware says it has version 0.0.0.0, and in windows the device manager shows the Intel Management Engine Interface device as not connected.

What would the implications of this jumper be? Switch to manufacturing mode and forget?

BTW, I previously used the -S flag with these motherboards. If you ever need to enable ME again, it might not be as simple as flashing the BIOS again, because there is of course no FW update module in the ME region.

jjurkus commented 6 years ago

The X11SSA-F I had an issue with before has two ME jumpers: JPME1 ME Recovery Pins 1-2 (Normal) JPME2 Manufacturing Mode Select Pins 1-2 (Normal)

Now I'm not sure what either of those do, and if any of them put the ME in a special mode. I have replaced this mainboard with a X11SAE, because I had more issues with it, and I'm not going to build it up again.

yhaenggi commented 6 years ago

with the jumper set, do you get the 30 min issue?

jjurkus commented 6 years ago

No, I've turned one on to try, and luckily it stays on. (otherwise I'd have to go back to work)

corna commented 6 years ago

It's probably the HDA_SDO pin (or something similar for the server platforms), see #135.

If you want a safe way to disable ME you can use this (but of course you're still trusting that ME fulfills your request).

jjurkus commented 6 years ago

I think I will flash BIOS files that are treated with the -s flag, and set this jumper. I think that will give me the most options.

chewy212 commented 3 years ago

The X11SRM-F exhibits this behavior and the BIOS shows 0.0.0.0 for the ME version and nonfunctional ME with the JPME2 jumper switched to pins 2-3.

from the X11SRM-F manual: "ME Manufacturing Mode Close pins 2-3 of jumper JPME2 to bypass SPI flash security and force the system to operate in the manufacturing mode, which will allow the user to flash the system firmware from a host server for system setting modifications. Refer to the table below for jumper settings. The default setting is Normal."

However, on other boards such as the A2SDV-16C-TLN5F and X11SPL-F, I have found that the ME still displays a version number and active ME function when the JPME2 is closed on pins 2-3 of these boards. However, the documentation for these boards manuals have an identical description for the JPME2 jumper.

vbooka1 commented 2 years ago

On X11SSH-F with the JPME2 jumper on pins 2-3 BIOS still shows ME and SPS versions, but its "State" is "Recovery". When the JPME2 jumper is on pins 1-2 the "State" is "SPS ME FW Active".

Fun fact: when ME is in "Recovery" state the IPMI could not read the CPU and PCH temperatures (both web panel and ipmitool show "n/a"), but simple sensors with coretemp module does show CPU temperature.