Hlavně si, například přes HWInfo64, zjisti, jaká verze/generace MEI tam je teď. Podle ní se stahují nástroje a patche (+ bacha na 1,5 MiB = desktop; 5 MiB = corporate). Lenovo pro některé svoje počítače a pracovní stanice dělá předpřipravený dávkový soubor.Pravděpodobně se tě týkají tato varování (a budeš vybírat z šesti firmwarů):Warning for all CSME v11 systems: All systems which initially come with CSME v11.0, v11.5, v11.6 or v11.7 are upgradable to v11.8 firmware. All systems which initially come with CSME v11.10 or v11.11 are upgradable to v11.12 firmware. All systems which initially come with CSME v11.20 or v11.21 are upgradable to v11.22 firmware. Only v11.8, v11.12 & v11.22 updates are provided below.Warning for PCH-LP 100-series systems: Make sure to mind the firmware Power Down Mitigation (PDM) status which is distinguished between YPDM (Yes) and NPDM (No). PDM is some sort of erratum, which is only relevant to 100-series PCH-LP systems. Thus, it is an attribute of every CSME v11.0 - v11.8 firmware which supports 100-series PCH-LP systems. It is suggested to update from YPDM to YPDM and from NPDM to NPDM. The PDM status of a firmware can be detected by ME Analyzer by loading either your SPI/BIOS image or an Engine Firmware Recovery image which can be generated via FWUpdate tool parameter "-save recovery.bin". The CSME v11.8 PCH-LP archives below include only the latest firmware regardless of their PDM status. If the latest found firmware is not PDM-suitable for your system, you can find the last equivalent compatible version at Intel Engine: Firmware Repositories. In cases where we have YPDM and NPDM variants of that latest version, both are included+ vytvoření klíče:Notice for CSME v11 INTEL-SA-00086 vulnerabilities: After the CSME v11.8, v11.11/v11.12 or v11.21/v11.22 firmware update, run MEInfo tool and verify that "Re-key needed" is False. Re-Keying is… the process of renewing the Intel Enhanced Privacy ID (EPID) and Intel PTT’s TPM 2.0 Endorsement Key, CSME’s remote attestation keys. It requires software running on the host OS to communicate with Intel servers. If "Re-key needed" is True, download the latest Drivers & Software (section A1) and execute command "SetupME.exe -tcs -nodrv -s" via a command line prompt. Ukázat celý příspěvek