NUC 7i7BNH Intel Management Engine not present

[MikeM25]

Hi all, I'm hoping someone has come across this before.

I have 2 identical NUCs (both 7i7BNH models). One has the Intel Management Engine in Device Manager and the other does not. On the affected machine, CTRL+P at boot does not work (must have tried a hundred times). I also tried CTRL+I and CTRL+M.

I updated all Windows drivers for the NUC.

I had an issue trying to update the BIOS to the latest version. I tried through the Windows app, the F7 method, the Visual BIOS method and the Uefi method (command line). I was able to update the BIOS using the security jumper method.

The BIOS update kept failing at Intel Management Engine. When I tried installing the drivers for it in Windows, it says "Platform not supported". The Security Jumper BIOS update method said it updated the IME and flashed the BIOS, but the IME is still not present.

My end goal is to re-enable IME (I don't know who disabled it, I bought it used and didn't know about this until now). I would like a clean BIOS update as well to fix the LEDs and any possible compatibility issues.

I was at version B0042 and now it reads B0088. The issue is that now the LEDs on the front panel of the NUC don't work after the update and it takes forever to get to the Intel POST screen before booting. 

If the IME can be disabled, then the BIOS update should be prepared for that, not just break things if it can't update the IME.

I have included screen grabs of the Device Manager on the affected NUC as well as pictures of the BIOS screen showing that there are no settings in there for the IME.

I've exhausted every option that I can find, I've even talked to Intel support (unfortunately support for this unit ended with the last BIOS update in Feb 2022). There are no previous versions of the BIOS available on the Intel site, so I can't even roll back to see if that restores the lost functionality.

Thanks in advance for the help!

[LeonWaksman]

1. If you succeeded update BIOS to version 0088, using BIOS Recovery by Secure Jumper Removed method, continue to the next paragraph.  If not, do it now. This method unlocks the ME.

2. Once the BIOS is updated BIOS Recovery by Secure Jumper Removed method, update it again, but this time using F7 method. This will update the ME firmware as well.

3. Install the Intel® Chipset Device Software and reboot your NUC.

4. Install the Intel® Management Engine Consumer Driver and the all other drivers. The sequence of installation is not important. Now, you may reboot your NUC only once, when the last driver is installed.

Leon

[MikeM25]

I just tried again and no luck. Here is a pic of the BIOS Update failure. Also, there's a pic of the original issue of trying to go to B0088 from B0042 (before I did the security jumper method).

[n_scott_pearson]

Were these update attempts with the jumper removed? This is a must to recover the ME operation.

...S

[MikeM25]

These attempts above are using the F7 method. This is after the jumper recovery method. I have done the jumper method twice both with B0088.

[LeonWaksman]

Was the Security Jumper replaced on pins 1-2, rather than 2-3?

Leon

[MikeM25]

According to the manual, that locks out the BIOS, I'll give it a shot at this point though. Thanks!

[LeonWaksman]

 

[MikeM25]

Sorry, had my numbers backwards. Yes, I flashed the BIOS to B0088 while the jumper was removed, replaced the jumper back to 1 and 2, tried the F7 method again and it failed. I have not put the jumper across pins 2&3.

[MikeM25]

Sorry, I don't mean to sound like I'm just shooting down ideas. I appreciate all the input!

From what I've read, you can enable "HAP" which disables the ME. Problem is that it's a flag in code somewhere and I really don't want to brick this PC. I really wish Intel had some sort of loader that can restore this PC to factory defaults. You'd think a BIOS update would do that, but I guess disabling the ME is more involved than just flashing the BIOS.

Thank you all! I hope I haven't stumped the community!

[LeonWaksman]

One thing more you may try - after you power on your NUC with the BIOS Security Jumper removed and without the USB stick with the BIOS file inserted, you will boot into Configuration Menu. In this menu you after clicking on [3] you will clear the TPM and by clicking on [2] you will clear User and Supervisor passwords. 

Leon

[MikeM25]

I think this thing is BIOS bricked. I booted without the jumper, came on, stayed on for about a minute then just shut down and won't let me power back on until I replace the jumper and unplug the power for a minute. Still no ME in device manager.

Thanks for all the help, but it feels like there's no way back to normal from whatever happened to this machine.

[n_scott_pearson]

Sadly, this kind of bricking can happen when you make this big a jump in the BIOS releases. There will never be a tool that allows recovery to factory defaults as this would be a violation of Intel's security protocols (i.e., would open the BIOS to simple attacks).

My personal opinion? Even for Discontinued products, Intel should accept their responsibility for having bricked the BIOS and provide support for refurbishment (factory reset of the BIOS).

...S