Intel Management Engine vulnerability SA-00086

rico wrote: Driver, not firmware. v11.7.0.1045 is the version of the "Intel Management Engine Interface" I have installed in Device Manager - System devices.

Thanks for the suggestion. Didn't help.

Hello. As a fair warning to all out there, if your board is a Gaming-ITX/ac board (Z170, Z270, or Z370), you should consider not flashing the ME firmware that was mentioned by ASRock tech support. Long story short, if you care about anything that uses HDCP 2.2 (just Ultra HD Blu-Rays and possibly 4K Netflix for now), there's something generic about the firmware that breaks HDCP 2.2. ASRock just posted v1.40 of my board's BIOS (Z370), which updates the ME firmware and possibly reflashes the LSPCON (MegaChips MDCP2800) firmware. Finally, HDCP 2.2 functionality was restored on my system. This post points to some potential info if you're curious about what might be happening deep in the motherboard.

Good luck!

rico wrote: Looks like today's your lucky day, flashback8.

Indeed it is! :) That said, please note that SGX was never the problem (AFAIK). It was something far deeper. The Cyberlink advisor never complained about SGX. I'm assuming that ASRock made some sort of change in the BIOS that made SGX detection and such a bit smarter. It could be that the "Auto" SGX enabling now works instead of having to keep it turned on all the time ("Enabled"). I'll play with it and see what comes up.


Edited by flashback8 - 06 Dec 2017 at 2:01am

rico wrote: flashback8 wrote: Hello. As a fair warning to all out there, if your board is a Gaming-ITX/ac board (Z170, Z270, or Z370), you should consider not flashing the ME firmware that was mentioned by ASRock tech support. Long story short, if you care about anything that uses HDCP 2.2 (just Ultra HD Blu-Rays and possibly 4K Netflix for now), there's something generic about the firmware that breaks HDCP 2.2. ASRock just posted v1.40 of my board's BIOS (Z370), which updates the ME firmware and possibly reflashes the LSPCON (MegaChips MDCP2800) firmware. Finally, HDCP 2.2 functionality was restored on my system. Maybe your issue only applies to 300 series but not 100 & 200? ASRock have changed the wording of the ME patch download page to be no longer applicable to 300 series motherboards: https://www.asrock.com/microsite/2017IntelFirmware/

Interesting. That definitely wasn't present yesterday. (I happened to look.) I suppose the only way to find out would be if somebody with a functioning 4K setup and a Z170 or Z270 Gaming-ITX/ac board took one for the team and upgraded. I think I might know somebody who can check. Come to think of it, I think he was upgrading his ME firmware willy nilly (11.6 -> 11.7) and HDCP 2.2 never broke. Strange, but who knows, maybe the Z370s do have something specific in the background.

arturk wrote: Unfortunately I can confirm that on Z270 Gaming-ITX/ac after ME update HDCP 2.2 is not working anymore. Before update everything was OK... For me this is very problematic since Netflix in 4K and BR UHD support is very important part of my setup. I've tried newest Intel Graphic drivers (15.60.01.4877), different versions of ME software - no luck... Does anybody found fix for HDCP support?  Motherboards with Z370 receiverd Bios update fixing this issue, but for Z270 there is nothing...

arturk wrote: I've made contact with Asrock support. Hope they will realize that with Z270 itx there is same problem as with Z370 before BIOS update...

The interesting thing is that I've been in touch with a guy who has a Z170 board. He doesn't have HDR on his setup but he has updated ME and the LSPCON chip firmware willy-nilly in the hopes of enabling HDR. Apparently, HDCP 2.2 has worked fine the entire time. Makes me think that ASRock added something starting with Z270 that can only be kept in place with a BIOS update. If so, that's really unfortunate if more problems come up down the road after Z370 support is dropped.