Intel Management Engine Issue INTEL-SA-00086 Fix

Fix for the Intel Management Engine Firmware Vulnerability Security Issue INTEL-SA-00086

Links to Intel's statement and description of the issue:

https://security-center.intel.com/

https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr

The link to ASRock's page for information on the affected Intel 100 and 200 series chipset boards, downloading the appropriate version of the tools, and instructions for using the IME Firmware update tools can be found below. Please read the instructions carefully and download only the correct version for your board's chipset.

UPDATE: If you have an ASRock Intel 300 series chipset board (Z370), the IME firmware update will be provided in a UEF/BIOS update. A link to a page with links to the ASRock Z370 chipset board's UEFI/BIOS download pages is provided on the page below.

https://www.asrock.com/microsite/2017IntelFirmware/

There are two versions of the IME Firmware update tools package, ME1 and ME2.

The ME1 version download package file is ME-consumer_11.8.50.3425.zip

The ME2 version download package file is ME-corporate_11.8.50.3425.zip

The ME-corporate version is only for use with the business-oriented chipsets. All the 'Z' series chipset boards use the ME1 version. The ASRock download page for the tools has a table with the chipsets that must use the ME2 version. All other affected chipsets use the ME1 version.

Within each version download are two tools, one to run in a Windows 64 bit OS installation, the other to run from a DOS bootable USB flash drive, for Windows 32 bit and other OS types.

You only need to run one of these tools, from one version. There is no need to run both tools, or use both versions of the tools.

The IME firmware update process has two steps. First the IME firmware update tool is run, and then the PC MUST be restarted to complete the process.

When complete, the IME firmware version is: 11.8 Build 3425 Hotfix 50.

I ran the ME1 version, Windows64\UPDATEME64 tool on my ASRock Z270 Gaming K6 board. It completed fine, restarted the PC, done within a few minutes.








Edited by parsec - 06 Dec 2017 at 11:43am

The ME1 Package doesn't work on the ASRock X299 Taichi. I get an SKU mismatch error.

Atma wrote: The ME1 Package doesn't work on the ASRock X299 Taichi. I get an SKU mismatch error. Error 8704: Firmware update operation not initiated due to a SKU mismatch

The SKU mismatch message is caused by your processor apparently not matching an affected processor. The SKU code of your processor was apparently not found.

What processor are you using?

The newest Intel High End Desktop (HEDT) processors, also called the X-Series, may not be included in this firmware update. I can't tell from Intel's information page if all of them are. Some definitely are.

Also while the list of affected chipsets includes the Intel 200 series, the X-series chipsets are many times excluded from the mainstream/performance chipsets. Usually Intel would specifically identify the X-series chipsets like the X299 as separate from the other 200 series chipsets. Intel's information is ambiguous about this.

It does not work on Z170 Gaming K4 with i7 7700K

Edited by Kloba12345 - 27 Nov 2017 at 12:24am

When i run the me1 program, i get the error message:

Edited by hoisdom - 27 Nov 2017 at 2:28am