Intel ME firmware update tools

[Hakon]

Hi,

I have a computer with an ASUS motherboard and a Linux operating system. Unfortunately, the Intel ME (Management Engine) firmware updates from ASUS require Windows to run. How can I update the Intel ME firmware on my system? ASUS customer support simply say that they don't support Linux.

I don't want to install Windows, boot a Windows PE image, or use any other such proprietary software om my otherwise open source system.

I know I can get the Intel ME firmware update tool FWUpdLcl for Linux and for EFI shell from the unofficial CSME System Tools package in the Win-Raid forum, but I don't want to run any software, especially with root privileges, if it comes from an unofficial source.

Would it be possible for Intel to provide the FWUpdLcl tool, and maybe related tools such as MEInfo, for Linux and/or EFI shell? An open source version would of course be preferable, but binaries from a trusted source would be a good start (I have to trust the binary ME firmware anyway).

In general, it is of course prudent to keep the Intel ME firmware up to date whenever security updates are released, but specifically right now, I need to update the UEFI firmware on my system in order to fix the serious LogoFAIL issue, and the instructions say that I need to update the Intel ME firmware before updating the UEFI firmware. This means I'm a bit stuck at the moment. I hope I will not just get referred back to ASUS again (as was the response in the related post 1516018), because then I will just keep bouncing back and forth without getting anywhere. Instead, I hope Intel can help provide a practical solution to this important security issue that surely affects a lot of non-Windows users out there.

Best regards,
Håkon

[Catulpos_Intel]

Hello Hakon,

Thank you for posting in Intel Communities.

I understand that your frustration as you were unable to implement certain updates on your system as you need to update your Intel ME firmware which in your case has no other version intended Linux operating system from your board manufacturer. Rest assured that we will try to do our best to assist you.

For us to effectively assist you, please provide the following information.

• Make and model of your processor.
• Make and model of your motherboard.
• Operating system version.

Thank you and have a nice day!

Best regards,

Catulpos_Intel

Intel Customer Support Technician

[Hakon]

Thanks! Here is the requested information:

• Processor: Intel Core 13900
• Motherboard: ASUS Pro WS W680-ACE (firmware page)
• Operating system: Ubuntu 23.10

Best regards,
Håkon

[Catulpos_Intel]

Hello Hakon,

Thank you for your detailed response. Please allow us to coordinate with our management to check for any workaround. You can be assured that we will keep you posted on any updates available.

Thank you for understanding and have a nice day!

Best regards,

Catulpos_Intel

Intel Customer Support Technician

[Catulpos_Intel]

Hello Hakon,

I appreciate the patience you've shown and for actively engaging with us with regards to your concern.

I understand that you have exerted a lot of effort in contacting both us and ASUS; however, upon thoroughly checking this case with our management, we would like to inform you that the Intel ME drivers are specific to the CPU, chipset, and motherboard design; hence, it would be best if you continue coordinating with your board manufacturer for your concern since you can only get the driver from the ASUS website. Also, we do not have the tool or the exact software that is compatible with your motherboard and operating system. You can check this article for your complete reference: Where to Find Intel® Management Engine (Intel® ME) Windows*...

We know that this is equally important to you and thus we are providing you the best option to take as you're in the best position to reach out to ASUS support as you have an acceptable request. We can't take you enough for your understanding and cooperation throughout this process and we greatly appreciate the patience you have provided to us.

As we do not have any scope of support or action, we can take on this case, we will proceed to close the case. You are always welcome to reach out to us and we will always do our best to find a resolution or alternatives that will best fit the situation. 

Thank you for understanding and have a nice day!

Best regards,

Catulpos_Intel

Intel Customer Support Technician

[Hakon]

Hi,

Thanks for your answer.

I am now again faced with a serious bug (Intel 13th/14th gen. CPUs incurring permanent damage) that needs a BIOS update to get fixed, and as before, the Intel ME firmware needs to be updated first. Unfortunately, the updater from ASUS is still for Windows only. Looking more closely at your answer, I see that you actually talk about Intel ME drivers, not Intel ME firmware update tools, which is what I actually need. I think the ME driver is working correctly out of the box on Linux, since I have the /dev/mei0 device node. What I need is just the FWUpdLcl utility compiled for Linux (or for UEFI shell). Is also this utility, like the ME drivers, specific to the motherboard design, or could Intel provide a generic version of it?

--
Best regards,
Håkon