me_cleaner icon indicating copy to clipboard operation
me_cleaner copied to clipboard

Intel ME manufacturing mode?

Open jjurkus opened this issue 7 years ago • 7 comments

With the Supermicro X11 and X10 motherboards you have to set a jumper on the motherboard to flash the ME region via the AFU* utilities. This is called the manufacturing mode, sometimes recovery mode.

When this jumper is selected I can flash the ME firmware, but, also in the BIOS the ME firmware says it has version 0.0.0.0, and in windows the device manager shows the Intel Management Engine Interface device as not connected.

What would the implications of this jumper be? Switch to manufacturing mode and forget?

BTW, I previously used the -S flag with these motherboards. If you ever need to enable ME again, it might not be as simple as flashing the BIOS again, because there is of course no FW update module in the ME region.

jjurkus avatar Apr 19 '18 19:04 jjurkus

The X11SSA-F I had an issue with before has two ME jumpers: JPME1 ME Recovery Pins 1-2 (Normal) JPME2 Manufacturing Mode Select Pins 1-2 (Normal)

Now I'm not sure what either of those do, and if any of them put the ME in a special mode. I have replaced this mainboard with a X11SAE, because I had more issues with it, and I'm not going to build it up again.

jjurkus avatar Apr 19 '18 19:04 jjurkus

with the jumper set, do you get the 30 min issue?

yhaenggi avatar Apr 19 '18 20:04 yhaenggi

No, I've turned one on to try, and luckily it stays on. (otherwise I'd have to go back to work)

jjurkus avatar Apr 19 '18 21:04 jjurkus

It's probably the HDA_SDO pin (or something similar for the server platforms), see #135.

If you want a safe way to disable ME you can use this (but of course you're still trusting that ME fulfills your request).

corna avatar Apr 20 '18 06:04 corna

I think I will flash BIOS files that are treated with the -s flag, and set this jumper. I think that will give me the most options.

jjurkus avatar Apr 20 '18 11:04 jjurkus

The X11SRM-F exhibits this behavior and the BIOS shows 0.0.0.0 for the ME version and nonfunctional ME with the JPME2 jumper switched to pins 2-3.

from the X11SRM-F manual: "ME Manufacturing Mode Close pins 2-3 of jumper JPME2 to bypass SPI flash security and force the system to operate in the manufacturing mode, which will allow the user to flash the system firmware from a host server for system setting modifications. Refer to the table below for jumper settings. The default setting is Normal."

However, on other boards such as the A2SDV-16C-TLN5F and X11SPL-F, I have found that the ME still displays a version number and active ME function when the JPME2 is closed on pins 2-3 of these boards. However, the documentation for these boards manuals have an identical description for the JPME2 jumper.

chewy212 avatar Feb 17 '21 13:02 chewy212

On X11SSH-F with the JPME2 jumper on pins 2-3 BIOS still shows ME and SPS versions, but its "State" is "Recovery". When the JPME2 jumper is on pins 1-2 the "State" is "SPS ME FW Active".

Fun fact: when ME is in "Recovery" state the IPMI could not read the CPU and PCH temperatures (both web panel and ipmitool show "n/a"), but simple sensors with coretemp module does show CPU temperature.

vbooka1 avatar Mar 21 '22 17:03 vbooka1