Intel Management Engine Issue INTEL-SA-00086 Fix

I am using an Intel Core i7-7800X

Intel(R) ME Firmware ICC Tools User Guide.pdf:

Intel® Management Engine Firmware Integrated Clock Controller (ICC) Tool   Tools User Guide January 2017 Revision 0.5   Intel Confidential

lol. whoops. In fact, I'm not even sure that whole /Tools folder should even be in there :)

In any case, this download isn't just for Kaby Lake. It's also applicable to my Skylake system on Z170 Gaming K6+ but I've already been running these ME drivers for the last week: http://forum.asrock.com/forum_posts.asp%3FTID=6667&PID=40181&title=intel-management-engine-vulnerability-sa00086#40181

To install new device drivers (not firmware!) just run any of the setup apps in the Installers folder. They're all the same and you end up with driver v11.7.0.1045 running Intel Management Engine Interface under System devices (Device Manager).

parsec wrote: apoisonedgift wrote: I've just been getting the error: Error 8771: Invalid File.  Intel's tool says my system is vulnerable... not really sure what else to do now? Edit: I have a B150M-Pro4 If you received an error message, the IME firmware update did not happen. Which update tool are you using? For a B150 chipset board, you should be using the ME2 firmware update package. The error message of Invalid File seems to indicate that is the case. https://www.asrock.com/microsite/2017IntelFirmware/

apoisonedgift wrote: I've just been getting the error: Error 8771: Invalid File.  Intel's tool says my system is vulnerable... not really sure what else to do now? Edit: I have a B150M-Pro4

If you received an error message, the IME firmware update did not happen.

Which update tool are you using? For a B150 chipset board, you should be using the ME2 firmware update package. The error message of Invalid File seems to indicate that is the case.

https://www.asrock.com/microsite/2017IntelFirmware/

Truman wrote: I have an Asrock Taichi x299. I ran the detection tool from intel before applying the fix from Asrock, and it returned that my system is vulnerable. I ran the ME1 package from Asrock and restarted my machine. I then re-ran the detection tool from Intel. It returned that my system is still vulnerable. Have I done something incorrectly?

You are may not doing anything wrong. Some information I received, second hand, is that the X299 system is not yet included in the IME firmware update fix.

If you check the folder where the ME1 update program is, after you run the program you may find an error log file with an entry about why the update failed. It may be the same as other X299 users have seen, an SKU mismatch error. That means the SKU code of your processor is not included in the list of processors/systems that the IME update tool currently supports.

The "fix from ASRock" contains programs given to ASRock by Intel. ASRock or any other mother board manufacture does not create the programs that apply the IME fix. They also do not determine which processors/systems the fix applies to.

Only Intel can supply the IME firmware updates, either with the tool they gave to ASRock, or with an IME firmware update that is included in a UEFI/BIOS update. ASRock and the other mother board manufactures are just the middle man, the messenger of the fix. All they can do is give us what Intel gives to them. When will X299 be supported by the IME update program? I wish I could tell you.