corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.46k stars 277 forks source link

Z370m itx/ac BIOS v3.10 #220

Open Futureknows opened 6 years ago

Futureknows commented 6 years ago

I used ME_cleaner on the latest BIOS (v3.10) for a Asrock 370m ITX/AC. All of the steps works as they should but on reboot BIOS still shows ME version 11.8.50.3470.

mei-amt-check returns Error: Management Engine refused connection. This probably means you don't have AMT

intelmetool' -m returns Can't find ME PCI device

I download the Intel me detection tool intel_sa00086 which returns the following data:

INTEL-SA-00086 Detection Tool
Copyright(C) 2017-2018, Intel Corporation, All rights reserved.

Application Version: 1.1.169.0
Scan date: 2018-07-29 06:03:53 GMT

*** Host Computer Information ***
Name: localhost.localdomain
Manufacturer: To Be Filled By O.E.M.
Model: To Be Filled By O.E.M.
Processor Name: Intel(R) Core(TM) i7-8700K CPU @ 3.70GHz
OS Version: Fedora 28 Twenty Eight (4.17.9-200.fc28.x86_64)

*** Intel(R) ME Information ***
Engine: Intel(R) Management Engine
Version: 11.8.50.3470
SVN: 3

*** Risk Assessment ***
Based on the analysis performed by this tool: This system is not vulnerable. It has already been patched.

It seems like the newer firmwares prevent the routine detection of ME. Grimeton reported success with v1.9 BIOS, I may roll back to that and try it.