12-18-2018, 12:21 PM (This post was last modified: 12-18-2018, 12:26 PM by hamedcom.)
Hello
I tried all version you can find the result in attached zip , below summery for my steps and output :
- Version : 2.01.1029 - 32Bit - Stopped Without NVRAM Windows error msg
64Bit - Create NVRAM
ERROR:4 - Retrieving HII Database
ERROR:4 - Dumping HII Database to File
- Version : 5.00.1048 - Create NVRAM
ERROR:4 - Retrieving HII Database
ERROR:4 - Dumping HII Database to File
- Version : 5.03.1107 : 32Bit - Error NVRAM "Old driver v3.1 found - get version 2.00 or above."
64Bit - Error Platform identification failed.
- Version : 5.03.1111 - Error Platform identification failed.
Best Regards
Hamed
Posts: 1,776
Threads: 0
Joined: Aug 2018
Reputation:
42
Thanks for link to other HFC/Fingerprint system, I will check and compare and see if I can figure anything. I do see it uses same exact BIOS link to exe, so as suspected this BIOS is used on both systems. So what you want can be done, either by editing settings, or changing system ID and reflash. But, either of those may not be possible if this system has "HP Sure Start" or if Intel BootGuard is active.
Do you see anything that says Sure Start in the system info/specifics/overview online? How about in the BIOS, any settings/section for Sure Start, maybe in management or security? Can you please run MEinfoWin from the Intel ME Flash Tools package I linked you to earlier, and show bottom of report in image or text (Looking for info on Measure Boot and Verified Boot on the FPF (Left) Side)
And thanks for SCEWin attempts, it's only compatible with some chipsets/BIOS, when it works it's great easy way to change some things, but doesn't always work for OEM type systems.
Posts: 16
Threads: 1
Joined: Dec 2018
Reputation:
0
(12-18-2018, 11:32 PM)Lost_N_BIOS Wrote: Thanks for link to other HFC/Fingerprint system, I will check and compare and see if I can figure anything. I do see it uses same exact BIOS link to exe, so as suspected this BIOS is used on both systems. So what you want can be done, either by editing settings, or changing system ID and reflash. But, either of those may not be possible if this system has "HP Sure Start" or if Intel BootGuard is active.
Do you see anything that says Sure Start in the system info/specifics/overview online? How about in the BIOS, any settings/section for Sure Start, maybe in management or security? Can you please run MEinfoWin from the Intel ME Flash Tools package I linked you to earlier, and show bottom of report in image or text (Looking for info on Measure Boot and Verified Boot on the FPF (Left) Side)
And thanks for SCEWin attempts, it's only compatible with some chipsets/BIOS, when it works it's great easy way to change some things, but doesn't always work for OEM type systems.
Thanks for replay ...
It looks my device have BootGuard : active , and i see HP sure start in boot
Here the Intel ME info
[ME Host Status] ME Current Working State: Normal Manufacturing Mode: Not Active ME Current Operation Mode:Normal Boot Guard Status: Enabled Boot Guard Verified Boot Policy: Disabled Boot Guard Measured Boot Policy: Disabled [Intel Manageability Engine Features] Intel ME Version: 12.0, Build 1122, Hot Fix 7 Intel ME Recovery Image Version: 12.0, Build 1122, Hot Fix 7 Intel ME FITC Version: 12.0, Build 1087, Hot Fix 2 Intel AMT Version: 12.0.7, Build 1122 Intel AMT Applications Version: 12.0.7 Flash Version: 12.0.7 Netstack Version:12.0.7 Recovery Version: 12.0.7, Build 1122 BIOS Version: Not available
[ME Firmware Capabilities] Full Network Manageability: Not Capable Standard Network Manageability: Not Capable Manageability (AMT): Not Capable Small Business Advantage: Not Capable Intel Integrated Touch: Not Capable Intel Anti-Theft: Not Capable Capability Licensing Service: Capable Virtualization Engine: Not Capable Intel Sensor Hub (ISH): Capable ICC Over Clocking: Not Capable Protected Audio Video Path (PAVP): Capable Network Frame Forwarder (NFF): Not Capable Remote PC Assist (RPAT): Capable IPV6: Not Capable KVM Remote Control:Not Capable Outbreak Containment Heuristic (OCH): Not Capable Dynamic Application Loader (DAL): Capable Cipher Transport Layer (TLS): Capable Wireless LAN (WLAN): Not Capable Platform Trust Technology (PTT): Not Capable Near Field Communication (NFC): Not Capable
[ME Firmware Feature State]
Full Network Manageability:Disabled Standard Network Manageability:Disabled Manageability (AMT): Disabled Small Business Advantage:Not Capable MEI3:Not Capable Intel Anti-Theft:Disabled Capability Licensing Service:Enabled Virtualization Engine:Disabled Intel Sensor Hub (ISH): Enabled ICC Over Clocking:Disabled Protected Audio Video Path (PAVP): Enabled Network Frame Forwarder (NFF):Not Capable Remote PC Assist (RPAT): Enabled IPV6:Disabled KVM Remote Control:Disabled Outbreak Containment Heuristic (OCH):Disabled Dynamic Application Loader (DAL):Capable Cipher Transport Layer (TLS):Enabled Wireless LAN (WLAN):Disabled Platform Trust Technology (PTT):Disabled Near Field Communication (NFC):Disabled
[ME Firmware Platform Type] Platform Target Usage Type:Mobile SKU:Regular SKU ME Firmware Image Type:Corporate SKU Firmware Platform Brand:None Host ME Region Flash Protection Override (HMRFPO) Status:Locked
Posts: 1,776
Threads: 0
Joined: Aug 2018
Reputation:
42
Bootguard cannot be active if Measured Boot and Verified Boot are not enabled properly at the FPF (Burned into chipset). Check with MEInfoWin as I mentioned (Unless that is what is above, and you just reformatted the output)?, if you do not see Measure/Verified enabled on the left then bootguard cannot be active. Manufacturers often get this wrong, either forget to burn keys to FPF or forget to enable in the ME side, this one is enabled at ME Side, but not FPF it looks like. Both sides must be active and set properly for it to function.
However, your biggest issue is Sure Start, you cannot modify many of the BIOS modules/regions when this is on the system, when you do on reboot it auto-recovers, even if BIOS programmed on with flash programmer. And the settings you want to change are within the protected ranges usually. We can test with any single setting change, then you will see it auto-recover.
Posts: 16
Threads: 1
Joined: Dec 2018
Reputation:
0
(12-19-2018, 10:45 PM)Lost_N_BIOS Wrote: Bootguard cannot be active if Measured Boot and Verified Boot are not enabled properly at the FPF (Burned into chipset). Check with MEInfoWin as I mentioned (Unless that is what is above, and you just reformatted the output)?, if you do not see Measure/Verified enabled on the left then bootguard cannot be active. Manufacturers often get this wrong, either forget to burn keys to FPF or forget to enable in the ME side, this one is enabled at ME Side, but not FPF it looks like. Both sides must be active and set properly for it to function.
However, your biggest issue is Sure Start, you cannot modify many of the BIOS modules/regions when this is on the system, when you do on reboot it auto-recovers, even if BIOS programmed on with flash programmer. And the settings you want to change are within the protected ranges usually. We can test with any single setting change, then you will see it auto-recover.
Thanks for reply ...
I get from HWiNFO64 not MEINFOWin
i will check today again to sure and feedback you about .
But can we change auto-recovers to manual , so it will not recover or this not help ?
Posts: 1,776
Threads: 0
Joined: Aug 2018
Reputation:
42
Yes, please check MEinfoWin at bottom of report you will see the Measure/Verified boot and a right/left side for enabled./disabled settings. IF disabled on left at FPF then it's not possible to be active, no matter what is set on ME/Right side.
No, HP Sure Start is a major pain in the rear! There is a few versions of it, so it all depends on what is protected in your BIOS, something's you can change like CPU microcodes, or other small detail modules, but usually and BIOS region is protected. As I said, we can make a simple test file if you want, I edit one setting you have visible in BIOS already, whatever it's default value is I will change to other value, then you test and see if BIOS auto recovers after flashing.
Posts: 16
Threads: 1
Joined: Dec 2018
Reputation:
0
No BootGuard active then, thanks. If you want, we can test a single change in setup module, and see if Sure Start auto recovers the BIOS, if it doesn't then we can make as many changes as we need. If you want to try that, pick some BIOS setting, make a note of it's default value and let me know, I will change it and then you can flash and see if changes applied and or auto recovery happens.
Posts: 16
Threads: 1
Joined: Dec 2018
Reputation:
0
Boot order is not ideal, since it changes depending on other settings.
GPU memory, what is exact settings name and what do you see as default (to verify what I see as default, once I find the correct module)
![[-]](https://www.bios-mods.com/forum/images/black/collapse.png "[-]")
![[Valid RSS]](valid-rss.png "Validate my RSS feed")