cancel
Showing results for 
Search instead for 
Did you mean: 

Intel ME and BIOS Updates - General Advice

iBruceypoo
Level 16
Thread created for JohnAb

Take it away John. 🙂
Z790 Epiphenomenal Raptor Bench

ROG Z790 Apex / Intel 13900KS SP111 P121 E93 MC83
Gskill 8000 kit - TM5 stable at 8200MT/s 38 48 48 121 VDD and VDDQ 1.5v
WD_Black SN850X 1TB 7300MB/s Reads 6300MB/s Writes
LG 32in 4K IPS 32UP83A-W
746 Views
79 REPLIES 79

JohnAb wrote:
Hi drop4205, yes, that's the way forward. The only thing I would advise is to flash a later BIOS from the start, 2204 is pretty good. Bear in mind that for any BIOS later than, and including 2004, you cannot flash back to an earlier version. Some people had various problems with 1702, so I think you'll be better off with a more recent version from the start to be honest. Normally, it's recommended to flash ME firmware before the BIOS, but in your situation you have no choice. So all I'm really saying is that you might as well go straight to 2204 and save yourself a step. In the very unlikely event that you get an issue, you can always flash the BIOS again or try other versions back to 2004. You should have ME firmware v16.1.25.2020 for BIOS 2204. If you do go back to an earlier BIOS for any reason, you can leave the ME firmware on the latest version.

Obviously, be sure to install all of the drivers from the support pages and after that, you can optionally install MoKIChU's drivers which will be the latest. His threads are available on this forum. Up to you of course, the official ASUS drivers will do the job as well, just use the 'show more' option for some of the driver sections so you don't miss any. Personally, I like Armoury Crate, which will install all of the most important drivers for you automatically. That should give you a great starting point. Enjoy your new build!


Thanks for the input. When I get to it I will start with 2004 bios and then install windows and all drivers then firmware update then to bios 2204. Ill have to look into MokIChu drivers in the forums. I take it his drivers are more up to date then the motherboard page? How is Armory Crate now? It use to be a crap load of stuff I didnt like running in background but that was back when I did my z390 board.
Maximus XI Formula, I9-9900k, Phantex Evolove X, Seasonic Titanium 850W, Custom loop PE360+SE360 Rad, G.Skill Trident Z F4-3200C14 32g, Nvidia Reference RTX 2080 TI, Samsung 970 EVO Plus 1Tb, Windows 11

I followed the steps outlined and intel csme check tool still says I am vulnerable. I had the latest bios already (2004) and i reflashed 2004 again. Why am I still vulnerable? Thanks so much

militiagoat wrote:
I followed the steps outlined and intel csme check tool still says I am vulnerable. I had the latest bios already (2004) and i reflashed 2004 again. Why am I still vulnerable? Thanks so much


I would assume it is probably related to your version of ME firmware, what version are you on? Also what motherboard do you have? It sounds like you probably have an older BIOS version as well. Please advise and I'll try to offer some ideas. I assume that you updated Windows MEI drivers, ME firmware and the BIOS?
Z690 Hero, BIOS 3401, MEI 2345.5.3.0, ME Firmware 16.1.30.2361, 7000X Case, RM1000x PSU, i9 12900K, ASUS TUF OC 3090TI, 2 x 16GB Corsair RAM @ 5200MHz, Windows 11 Pro 23H2, Corsair H150i Elite AIO, 4x Corsair RGB fans, 3x M.2 NVME drives, 2x SATA SSDs, 2x SATA HDs.

JohnAb wrote:
I would assume it is probably related to your version of ME firmware, what version are you on? Also what motherboard do you have? It sounds like you probably have an older BIOS version as well. Please advise and I'll try to offer some ideas. I assume that you updated Windows MEI drivers, ME firmware and the BIOS?


Bios says me ver. is 12.0.81.1753
Maximus XI Hero wifi
Bios is 2004

Yes I updated all 3 exactly as it was outlined in this thread
Thanks for help.

militiagoat wrote:
Bios says me ver. is 12.0.81.1753
Maximus XI Hero wifi
Bios is 2004

Yes I updated all 3 exactly as it was outlined in this thread
Thanks for help.


That makes sense then. I didn't realise you were on Z390. If you have a look at MoKiChU's thread here:

https://rog.asus.com/forum/showthread.php?119020-FIRMWARE-Intel-ME-(H310-B360-H370-Z390)

You will see that ME firmware 12.0.92.2145 is available. I'd be tempted to try that and then see if the Intel vulnerability tool is happier. You could always ask in that thread, just be sure, or find the 390 forums and ask there as well. I don't want to give bad advice, but I think that's likely the reason that the Intel tool is flagging an issue. Hope that's helpful.
Z690 Hero, BIOS 3401, MEI 2345.5.3.0, ME Firmware 16.1.30.2361, 7000X Case, RM1000x PSU, i9 12900K, ASUS TUF OC 3090TI, 2 x 16GB Corsair RAM @ 5200MHz, Windows 11 Pro 23H2, Corsair H150i Elite AIO, 4x Corsair RGB fans, 3x M.2 NVME drives, 2x SATA SSDs, 2x SATA HDs.

JohnAb wrote:
That makes sense then. I didn't realise you were on Z390. If you have a look at MoKiChU's thread here:

https://rog.asus.com/forum/showthread.php?119020-FIRMWARE-Intel-ME-(H310-B360-H370-Z390)

You will see that ME firmware 12.0.92.2145 is available. I'd be tempted to try that and then see if the Intel vulnerability tool is happier. You could always ask in that thread, just be sure, or find the 390 forums and ask there as well. I don't want to give bad advice, but I think that's likely the reason that the Intel tool is flagging an issue. Hope that's helpful.


Thank You so much JohnAb, I passed! This system is not vulnerable. It has already been patched.
Tool Stopped

drop4205 wrote:
Thanks for the input. When I get to it I will start with 2004 bios and then install windows and all drivers then firmware update then to bios 2204. Ill have to look into MokIChu drivers in the forums. I take it his drivers are more up to date then the motherboard page? How is Armory Crate now? It use to be a crap load of stuff I didnt like running in background but that was back when I did my z390 board.


Sounds like a plan. A lot of people don't like Armoury Crate and I respect that, but I can honestly say that it has worked like a charm for me since I started using this PC nearly 12 months ago. Yes, MoKiChU's drivers are always bang up to date and he often issues updates every few days. I have all of his drivers installed. They are all 'real' drivers, he does not modify them. They are just far more recent than those on the support pages and he does an amazing job. They might be packaged differently, but that's nothing to worry about. Just ask him directly if you get stuck. He's always willing to help and I'll try too if I can.
Z690 Hero, BIOS 3401, MEI 2345.5.3.0, ME Firmware 16.1.30.2361, 7000X Case, RM1000x PSU, i9 12900K, ASUS TUF OC 3090TI, 2 x 16GB Corsair RAM @ 5200MHz, Windows 11 Pro 23H2, Corsair H150i Elite AIO, 4x Corsair RGB fans, 3x M.2 NVME drives, 2x SATA SSDs, 2x SATA HDs.

JohnAb
Level 17
Excellent, that's good news. Pleased that you got it all sorted 🙂
Z690 Hero, BIOS 3401, MEI 2345.5.3.0, ME Firmware 16.1.30.2361, 7000X Case, RM1000x PSU, i9 12900K, ASUS TUF OC 3090TI, 2 x 16GB Corsair RAM @ 5200MHz, Windows 11 Pro 23H2, Corsair H150i Elite AIO, 4x Corsair RGB fans, 3x M.2 NVME drives, 2x SATA SSDs, 2x SATA HDs.

D-an-W
Level 8

Hi folks, I have the ASUS TUF GAMING Z790-PLUS WIFI D4 which says to use ME Version 16.1.25.2020v2_S_Z.

The BIOS reports the ME FW Version as "16.1.25.2020", can I just check these are the same version or I need to update to "16.1.25.2020v2_S_Z" please?

If you want to upgrade to 0805, then it's always best to update the ME firmware first as advised on the support pages. Before doing that though, also update to Intel Management Engine (MEI) Interface drivers (v2229.3.2.0) if you have an older version. You can find your version in Armoury Crate if you have it installed. 

Z690 Hero, BIOS 3401, MEI 2345.5.3.0, ME Firmware 16.1.30.2361, 7000X Case, RM1000x PSU, i9 12900K, ASUS TUF OC 3090TI, 2 x 16GB Corsair RAM @ 5200MHz, Windows 11 Pro 23H2, Corsair H150i Elite AIO, 4x Corsair RGB fans, 3x M.2 NVME drives, 2x SATA SSDs, 2x SATA HDs.