Intel Management Engine Issue INTEL-SA-00086 Fix

My bios is already on the newest version (7.20), did you flash the newest version again or did you update from an older version?

Edited by hoisdom - 25 Dec 2017 at 11:32pm

Hi there... I'm a bit confused after reading the posts in this thread.

Can anyone confirm if you're on x299 based mobos with Gen 8 CPUs, has anyone seen a patch from ASRock? I get the 'mismatch SKU' error with the ME1 download. However, the intel bulletin says my config is susceptible - https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

Also, can anyone with X299 platform based boards confirm the version of ME on their system? For example, for me:

System Board: x299e-itx/ac
CPU:          i7-7820x
ME Version:   11.10.0.1287

I'm getting the same error ("Error 8704: Firmware update operation not initiated due to a SKU mismatch") running the "ME1" patch on my ASRock X299 Taichi board with an Intel i9-7900X CPU.  I see this issue was first reported six weeks ago in another thread, so I'm surprised there is still no fix for it.  As I understand it, the error means that the firmware patch does not apply to my CPU (???).


I've updated my Windows build to 16299.192 via the Microsoft security patch, but the Intel detection tool for INTEL-SA-00086 still shows my system as vulnerable since the Intel ME firmware patch won't install on my system.  I opened a support ticket with ASRock about it, so I'll report back if and when I get more information.


Edited by dbeachy1 - 05 Jan 2018 at 1:12am

Some interesting news here -- I heard back from ASRock support tonight, and here is the message:

 ============================================

From: Support [mailto:<redacted>]
Sent: Thursday, January 04, 2018 7:51 PM
To: <redacted>
Subject: RE: $X299 TAICHI/A/ASRK$ Unable to update to Intel ME 11.8.50.3425 (United States)

 check the information below if your motherboard chipset is effected

 

Intel released the newer ME version to fix the security bug recently.

The models 100/200/300 could be updated ME firmware by ME tool directly.

Please be noted that there are two different ME type for our models.

 

1. Consumer ME

Chipset: Z170, Z270, H110, B250, H270, Z370

Consumer ME link: http://asrock.pc.cdn.bitgravity.com/TSD/ME-consumer_11.8.50.3425.zip

 

2. Corporate ME

Chipset: H170, B150, Q170

Corporate ME link: http://asrock.pc.cdn.bitgravity.com/TSD/ME-corporate_11.8.50.3425.zip

 

Microsite link:

Reference: http://www.asrock.com/microsite/2017IntelFirmware/

 ============================================

I replied and said that I had already tried running that Consumer ME patch version per my original message.  What is interesting, however, is that support said that the consumer ME patch only supports these chipsets:

1. Consumer ME

Chipset: Z170, Z270, H110, B250, H270, Z370

I replied and asked if they know if and when a version of the patch for the X299 chipset, which is what my motherboard uses, will be available. 

So this explains why the patch doesn't work with our X299 boards: the patch doesn't support that chipset.    Hopefully ASRock will make an X299 version of the ME firmware patch available soon.

EDIT:

Also, according to the INTEL-SA-00086 Detection Tool, my Intel Management Engine version is 11.10.0.1287, so clearly the ME version for X299 boards is separate from the ME versions that the ASRock ME patch is supposed to update.

 

Edited by dbeachy1 - 05 Jan 2018 at 11:39pm

just did http://asrock.pc.cdn.bitgravity.com/TSD/ME-consumer_11.8.50.3425.zip
on my z170 extreme 4 it now says i am patched but also goes on about some intel license client is obsolete


http://www.guru3d.com/news-story/new-hardware-vulnerability-found-in-intel-processors.html

how much of this Spectre??and ?�Meltdown??br>does this  apply too or am i gona need another fw update update?

Im still using bios update 3.20 i only did this update for the   above, I am assuming if I did the bios update to 7.20 I would have reaplly thew above fix?  i am also assuming asrock is gona release new bios for all this


Edited by tsunami2311 - 06 Jan 2018 at 3:42am