01-09-2018 06:15 AM
After upgrading to the latest BIOS version FWKT86A provided here; https://support.lenovo.com/us/en/downloads/DS105487
I now recive the following error at every boot; (A7) Me FW Downgrade - Request MeSpiLock Failed
The boot process continues and Windows starts normally, but how do I fix this error message, I can not deploy this BIOS upgrade to all my systems with this error message present.
Please provide me with a fix or an updated BIOS that fix this as we are rolling out updates to mitigate the "Spectre" and "Meltdown" issue.
What I've tried so far;
01-09-2018 01:24 PM - edited 01-09-2018 01:31 PM
I don't really know, but the error message suggests it is related to the Intel Management Engine upgrade which was also published along with the upgraded BIOS. So your reverting to the prior BIOS version also needed the associated reversion to the prior ME version, in order for you to theoretically back out everything in order to get back to problem-free status.
In other words whatever is causing this might be due to the ME update, not to the BIOS update. Still is a problem that clearly should not be occurring, but if you wanted to point the finger at likely culprit, I'd be suspicious of the ME update based on the message.
But I honestly don't know.
On the other hand, I have applied the newly available FWKT86A to my own M800 SFF machine, along with the newly available ME update 11.8 build 3425 Hotfix 50, and have not experienced any problem at boot time. Everything's running fine. Yes, the M800 is not the M900, but I just wanted to inject that for me these upgrades caused no issues.
01-11-2018 05:28 AM
I see that a new BIOS version (FWKT87A) is released for the M900 today with the following changes;
But I still recive the error message at startup after applying this BIOS version, I've also tried with another system that didn't have the error message before applying this BIOS version, but same result, after applying BIOS update this system also recives the error message at every reboot.
All my M900 systems are already at the 220.127.116.1125 firmware version of Intel ME (downloaded from here https://pcsupport.lenovo.com/no/en/downloads/ds121676), this was applied in mid-december to mitigate the INTEL-SA-00086.
So looks like another BIOS release is needed to fix this problem or an updated Intel ME firmware? For me it looks like the BIOS is trying to downgrade Intel ME Firmware and that resulted in this problem (Error message says (A7) Me FW Downgrade - Request MeSpiLock Failed,
I've tried to re-apply the latest Intel ME firmware from the link above on one of the systems after the latest BIOS upgrade, but that does not work, the process hangs on Checking firmware parameters....
Any help to solve this will be appreciated, but I belive Lenovo has to release an update for this....
02-26-2018 05:10 PM
I had the same problem on my Lenovo T430. That is, after every reboot (not after cold start) system gave mespilock error. Powering off the portable and power-on worked well but not practical :-).
Tried, bios upgrade, secure booth on/off sequences, reset bios (removed cmos battery), reconfigure option AMT, ... no luck.
What did work was quite simple. Go in Bios setup, go to Config, Inter (R) AMT, Choose option "Permanently Disable" AMT. Simple disable did not work for me.
That did it for me. Hope this helps!