ASRock.com Homepage
Forum Home Forum Home > Technical Support > Intel Motherboards
  New Posts New Posts RSS Feed - Intel Management Engine Issue INTEL-SA-00086 Fix
  FAQ FAQ  Forum Search Search  Events   Register Register  Login Login

Intel Management Engine Issue INTEL-SA-00086 Fix
 Post Reply Post Reply Page  <1 10111213>
Author
Message
  Topic Search Topic Search  Topic Options Topic Options
Milkman View Drop Down
Newbie
Newbie


Joined: 24 Feb 2018
Location: Norcal
Status: Offline
Points: 60 		Post Options Post Options   Thanks (0) Thanks(0)   Quote Milkman Quote  Post ReplyReply Direct Link To This Post Posted: 08 Mar 2018 at 8:47am
lol, I dunno. Old network guy, sysadmin here. I tend to have 15 tabs, a chat or 2, some PMs, some emails going at any given time. My VMs are also rolling. Got to have lots of infrastructure for all that, ermm, management of DRM features and bugs. Im a researcher, Wardog. =P 
Back to Top
jclausius View Drop Down
Newbie
Newbie


Joined: 02 Jan 2018
Location: USA
Status: Offline
Points: 37 		Post Options Post Options   Thanks (0) Thanks(0)   Quote jclausius Quote  Post ReplyReply Direct Link To This Post Posted: 08 Mar 2018 at 10:42pm
Originally posted by Milkman Milkman wrote:

I've noticed the new (2.00) firmware is posted in the BIOS section for the x299 boards.
Has anyone.... done any testing on this code? Is there any feedback from bench testing?
The x299e-itx/ac had BIOS 1.50 released on Mar 2nd.

I flashed as it contained fixes for Skylake CPU. I've done zero benchmarking, so I can't give you any hard numbers, but if there's been a performance drop off, I haven't noticed.

Also, my system was stable before... No reboots or crashes.

This microcode for skylake CPUs lowered their VCore settings. My idle temps on the CPU were in the 42-46C range, and VCore was at 1.126V. Much too hot for my liking. I was even considering a repaste last weekend. After the flash, idling at 32-34C with 1.066VCore on the CPU

What a difference a flash makes!
x299e-itx/ac | i7-7820X@3.60GHz | 32GB - 4x8GB Quad Channel@3000MHz GSkill DDR4 | nVidia GTX 1060M w/ 6GB GDDR5 | Samsung 960 Pro 512GB | Samsung 960 Pro 1TB | 160GB Seagate Momentus | Panasonic UJ265
Back to Top
Milkman View Drop Down
Newbie
Newbie


Joined: 24 Feb 2018
Location: Norcal
Status: Offline
Points: 60 		Post Options Post Options   Thanks (0) Thanks(0)   Quote Milkman Quote  Post ReplyReply Direct Link To This Post Posted: 09 Mar 2018 at 3:36am
Thank you for that. 

My 7800x idles at 23-29c, and when I (factory) OC a tad (from base 3.5 to 4.1), I idle at almost identical numbers. 25-30c. 

Under full load (I crunch for SETI using BOINC every night), this CPU hits around 49-50c. Under full load WITH OC to 4.1, it hits about 65c. 

Is the x299e-itx/ac board using the same microcode as the base x299 chipset? ie my x299 TaiChi will receive the same base code as your x299? Do you happen to know? I still have not flashed to 2.00, and am still sitting on the fence about RMA'ing this board for one without the 4k BluRay playback limitation. 
Back to Top
jclausius View Drop Down
Newbie
Newbie


Joined: 02 Jan 2018
Location: USA
Status: Offline
Points: 37 		Post Options Post Options   Thanks (0) Thanks(0)   Quote jclausius Quote  Post ReplyReply Direct Link To This Post Posted: 10 Mar 2018 at 12:50am
Originally posted by Milkman Milkman wrote:

Thank you for that.?

Is the x299e-itx/ac board using the same microcode as the base x299 chipset? ie my x299 TaiChi will receive the same base code as your x299? Do you happen to know?
Unfortunately, I'm not an expert, but here's what we do know:


X299 Taichi - version 2.00, release 2018/3/2, size 11.58MB
"Update Skylake-X CPU Microcode to revision 43 and Kabylake-X CPU Microcode revision to 84. (For CPU security update)"


X299E-ITX/ac - version 1.50, release 2018/3/2, size 11.16MB
"Update Skylake-X CPU Microcode to revision 43. (For CPU security update)"

----------------

They were released same day, and have same Skylake-X Microcode for revision 43. Does that help any with the decision to flash?
x299e-itx/ac | i7-7820X@3.60GHz | 32GB - 4x8GB Quad Channel@3000MHz GSkill DDR4 | nVidia GTX 1060M w/ 6GB GDDR5 | Samsung 960 Pro 512GB | Samsung 960 Pro 1TB | 160GB Seagate Momentus | Panasonic UJ265
Back to Top
Milkman View Drop Down
Newbie
Newbie


Joined: 24 Feb 2018
Location: Norcal
Status: Offline
Points: 60 		Post Options Post Options   Thanks (0) Thanks(0)   Quote Milkman Quote  Post ReplyReply Direct Link To This Post Posted: 10 Mar 2018 at 4:59am
Well, I haven't heard any screams of pain just yet. I dont see people panicking anywhere, so maybe I'll just flip a coin. ;) 
Back to Top
jclausius View Drop Down
Newbie
Newbie


Joined: 02 Jan 2018
Location: USA
Status: Offline
Points: 37 		Post Options Post Options   Thanks (0) Thanks(0)   Quote jclausius Quote  Post ReplyReply Direct Link To This Post Posted: 10 Mar 2018 at 5:51am
Originally posted by Milkman Milkman wrote:

so maybe I'll just flip a coin. ;)?
Flip!

LOL! What did it say?
x299e-itx/ac | i7-7820X@3.60GHz | 32GB - 4x8GB Quad Channel@3000MHz GSkill DDR4 | nVidia GTX 1060M w/ 6GB GDDR5 | Samsung 960 Pro 512GB | Samsung 960 Pro 1TB | 160GB Seagate Momentus | Panasonic UJ265
Back to Top
2ndLastJedi View Drop Down
Newbie
Newbie
Avatar

Joined: 09 Jan 2018
Location: Australia
Status: Offline
Points: 19 		Post Options Post Options   Thanks (0) Thanks(0)   Quote 2ndLastJedi Quote  Post ReplyReply Direct Link To This Post Posted: 01 Apr 2018 at 8:26am
[URL=][/URL]I don't get what im supposed to do !
I'm on z170 extreme 4 with 6600k ,should I be installing ME1 or the 7.50 ?
This seems like such a mess !

Edited by 2ndLastJedi - 01 Apr 2018 at 8:26am
Back to Top
jclausius View Drop Down
Newbie
Newbie


Joined: 02 Jan 2018
Location: USA
Status: Offline
Points: 37 		Post Options Post Options   Thanks (0) Thanks(0)   Quote jclausius Quote  Post ReplyReply Direct Link To This Post Posted: 02 Apr 2018 at 10:00pm
It's a two pronged fix for Spectre and Meltdown.

1) You'll want to run a BIOS/UEFI update which will update a bug found in Intel Management Engine. See more info here - https://www.bleepingcomputer.com/news/security/intel-fixes-critical-bugs-in-management-engine-its-secret-cpu-on-chip/

2) Next, you'll need OS level patches from your operating systems provider which tackles some of the Meltdown/Spectre related bugs. See here for more info - https://www.extremetech.com/computing/265676-microsoft-now-distributing-intel-microcode-updates-spectre-meltdown-improves-antivirus-compatibility

I also think the Intel ME drivers have been updated too, but not sure if that comes in the OS level patches or if you need to do that extra.

Some internet searching on Spectre/Meltdown protection ( for example on windows https://support.microsoft.com/en-gb/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in or https://www.howtogeek.com/338801/how-to-check-if-your-pc-is-protected-against-meltdown-and-spectre/ ) will let you know if the system has been patched.

Edited by jclausius - 02 Apr 2018 at 10:04pm
x299e-itx/ac | i7-7820X@3.60GHz | 32GB - 4x8GB Quad Channel@3000MHz GSkill DDR4 | nVidia GTX 1060M w/ 6GB GDDR5 | Samsung 960 Pro 512GB | Samsung 960 Pro 1TB | 160GB Seagate Momentus | Panasonic UJ265
Back to Top
Hackerpcs View Drop Down
Newbie
Newbie


Joined: 06 Jan 2018
Status: Offline
Points: 8 		Post Options Post Options   Thanks (1) Thanks(1)   Quote Hackerpcs Quote  Post ReplyReply Direct Link To This Post Posted: 28 Jun 2018 at 12:34pm
AsRock released a beta BIOS update on 30th of May for old MBs like my P67 Pro3 (2nd/3rd gen) fixing this issue along with Spectre/Meltdown (CVE-2017-XXXX),
http://forum.asrock.com/forum_posts.asp?TID=7175&PID=53093&#53093
dated on MB as 2018-03-17

Updated normally, working alright

Intel-SA-00086-console.exe
INTEL-SA-00086 Detection Tool
Application Version: 1.1.169.0
Computer Name:
Scan date: 2018-06-28 07:32:15

*** Host Computer Information ***
Manufacturer:
Model:
Processor Name: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
OS Version: Microsoft Windows 7 Ultimate 

*** Intel(R) ME Information ***
Engine: Intel(R) Management Engine
Version: 8.0.3.1427
SVN: 0

*** Risk Assessment ***
Based on the analysis performed by this tool: This system is not vulnerable.

For
 more information refer to the SA-00086 Detection Tool Guide or the 
Intel security advisory Intel-SA-00086 at the following link: 
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr
Copyright(C) 2017-2018, Intel Corporation, All rights reserved.
Saving results in: .xml



Latest SpeculationControl Module v1.0.8:
Get-SpeculationControlSettings
Speculation control settings for CVE-2017-5715 [branch target injection]
For more information about the output below, please refer to https://support.microsoft.com/en-in/help/4074629

Hardware support for branch target injection mitigation is present: True
Windows OS support for branch target injection mitigation is present: True
Windows OS support for branch target injection mitigation is enabled: True

Speculation control settings for CVE-2017-5754 [rogue data cache load]

Hardware requires kernel VA shadowing: True
Windows OS support for kernel VA shadow is present: True
Windows OS support for kernel VA shadow is enabled: True
Windows OS support for PCID performance optimization is enabled: False [not required for security]

Speculation control settings for CVE-2018-3639 [speculative store bypass]

Hardware is vulnerable to speculative store bypass: True
Hardware support for speculative store bypass mitigation is present: False
Windows OS support for speculative store bypass mitigation is present: True
Windows OS support for speculative store bypass mitigation is enabled system-wide: False


BTIHardwarePresent                  : True
BTIWindowsSupportPresent            : True
BTIWindowsSupportEnabled            : True
BTIDisabledBySystemPolicy           : False
BTIDisabledByNoHardwareSupport      : False
KVAShadowRequired                   : True
KVAShadowWindowsSupportPresent      : True
KVAShadowWindowsSupportEnabled      : True
KVAShadowPcidEnabled                : False
SSBDWindowsSupportPresent           : True
SSBDHardwareVulnerable              : True
SSBDHardwarePresent                 : False
SSBDWindowsSupportEnabledSystemWide : False


Edited by Hackerpcs - 05 Jul 2018 at 5:48pm
Back to Top
billcrps32 View Drop Down
Newbie
Newbie


Joined: 28 Jan 2022
Status: Offline
Points: 30 		Post Options Post Options   Thanks (0) Thanks(0)   Quote billcrps32 Quote  Post ReplyReply Direct Link To This Post Posted: 31 Jan 2022 at 7:11pm
thank you for sharing this information
Back to Top
 Post Reply Post Reply Page  <1 10111213>
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.04
Copyright ©2001-2021 Web Wiz Ltd.

This page was generated in 0.109 seconds.