pppaster.blogg.se - What is intel management engine firmware

#WHAT IS INTEL MANAGEMENT ENGINE FIRMWARE DRIVERS#
#WHAT IS INTEL MANAGEMENT ENGINE FIRMWARE UPDATE#
#WHAT IS INTEL MANAGEMENT ENGINE FIRMWARE UPGRADE#

However, the ME itself is built into all Intel chipsets since 2008, not only those with AMT. AMT gives device owners remote administration of their computer, such as powering it on or off, and reinstalling the operating system. AMT runs on the ME, but is only available on processors with vPro. The Management Engine is often confused with Intel AMT (Intel Active Management Technology).

5.3 Effectiveness against vulnerabilities.

Intel's main competitor AMD has incorporated the equivalent AMD Secure Technology (formally called Platform Security Processor) in virtually all of its post-2013 CPUs. The Electronic Frontier Foundation has voiced concern about Intel ME and some security researchers have voiced concern that it is a backdoor. The Intel ME is an attractive target for hackers, since it has top level access to all devices and completely bypasses the operating system. This issue can be mitigated with deployment of a hardware device, which is able to disconnect mains power. The Intel Management Engine always runs as long as the motherboard is receiving power, even when the computer is turned off. It is located in the Platform Controller Hub of modern Intel motherboards. The Intel Management Engine ( ME), also known as the Intel Manageability Engine, is an autonomous subsystem that has been incorporated in virtually all of Intel's processor chipsets since 2008. The ME is colloquially categorized as ring −3, below System Management Mode (ring −2) and the hypervisor (ring −1), all running at a higher privilege level than the kernel (ring 0) Otherwise, keep the existing version as long as wrote:Privilege rings for the x86 architecture.

#WHAT IS INTEL MANAGEMENT ENGINE FIRMWARE DRIVERS#

Same applies for Windows Updates, OS update, drivers updates, etc - upgrade/update IF you have issues which you know are fixed in the newer version or for some severe security issues.

#WHAT IS INTEL MANAGEMENT ENGINE FIRMWARE UPDATE#

Any kind of update (no matter for what and who relesed it) can fix 2 issues but may introduce 10 more issues. Additionally, upgrading the BIOS (for any vendor) poses more risks because BIOS recovery is not that easy as compared to typical software updates IF something goes wrong. Updating just for the "noble cause" of updaing and just for using the latest verson is not solution.

#WHAT IS INTEL MANAGEMENT ENGINE FIRMWARE UPGRADE#

General recommendation I provide to users/customers is NOT to upgrade BIOS/UEFI unless they experience any kind of specific BIOS/UEFI issue. You may also see if this tool will work on W10 > īut considering you already have experience with BIOS things, I am wondering why do you want to do it again. If you search for it in C:\Program files or C:\Program files (x86) and search inside the folder, it should show the version somewhere.

When you find it there click on it and it should show a version Perhaps in the Control Panel > Programs and features. Thank you for posting in the HP Support forum. Heck, if anything, the outrage should be that we owners of these systems have no way to shut off this insecure closed source security processor within a processor that has access to everything (even when the system is powered down). Thinking of not updating what works without an understanding of what broken thing was fixed with the update is simple a dangerous view to have these days.Īs such, either do some research or take the Intel or your OEM's advice and update these critical ME vulnerabilities according to the Intel/OEM critical advisories. The reality is that just because one can't see or understand a problem doesn't mean that all is well. Those ring -3 exploits on your system at that level can do anything - even place a root kit containing key loggers that is then invisable to the OS virus scanner and thus steal passwords to your banking apps and send them off to some scum that empties you account of your hard earned $$ - that was one demonstrated use of an older ME vulnerability and this years vulnerabilities are worse according to some. Just keep in mind that an flawed ME implementation can be silently compromised at -3 ring level (that's before BIOS/EFI starts). The fact that OEM's actually released updates on out of warranty systems probably highlights the severity of this issue.īut if some people don't care about the security of their system That's their choice. As a result, twice in 2017 Intel has pushed out fixes to ME that OEMs have picked up and released for their systems, many of which are no longer supported or under warranty.

And there have been others reported in previous years. ME has had some serious security issues discovered and reported to Intel this year. It's an old post but as others can find this thread via google search, as i did, the above flawed comment needs an answer.

If I were you, I would ignore this if my BIOS worked fine.