Welcome to our peer-to-peer forums, where owners help owners. Need help now? Visit eSupport here.

English Community

ThinkStationThinkStation Workstations
All Forum Topics
Options

75 Posts

02-09-2017

United States of America

105 Signins

711 Page Views

  • Posts: 75
  • Registered: ‎02-09-2017
  • Location: United States of America
  • Views: 711
  • Message 1 of 10

P710: Can the Intel Management Engine be disabled?

2017-09-22, 20:00 PM

I use my P710 at home, so Intel ME/AMT serve no useful function for me while introducing potential security vulnerabilities. Is there a way to completely shut it off in firmware? Such a switch is in the BIOS on some other machines, but I've found no sign of such a switch on the P710. Thanks.

Reply
Options

12318 Posts

01-02-2010

United States of America

40509 Signins

427434 Page Views

  • Posts: 12318
  • Registered: ‎01-02-2010
  • Location: United States of America
  • Views: 427434
  • Message 2 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-22, 20:13 PM

I don't have a machine to look at - only documentation.  Look under the advanced tab/AMT configuration


Rich


I do not respond to requests for private, one-on-one help. Your questions should be posted in the appropriate forum where they may help others as well.

If a response answers your question, please mark it as the accepted solution.

I am not an employee or agent of Lenovo.
Reply
Options

75 Posts

02-09-2017

United States of America

105 Signins

711 Page Views

  • Posts: 75
  • Registered: ‎02-09-2017
  • Location: United States of America
  • Views: 711
  • Message 3 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-22, 20:29 PM

Sadly, none of the options there are to shut off the ME.

Reply
Options

5884 Posts

11-24-2007

United States of America

12810 Signins

291275 Page Views

  • Posts: 5884
  • Registered: ‎11-24-2007
  • Location: United States of America
  • Views: 291275
  • Message 4 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-22, 22:25 PM

I'm not familiar with the GUI style menu but on the Main tab there should be an option for "Setup mode select". Change it to "[Text]", reboot into BIOS setup and you'll get a more traditional menu system.

 

From there you should see the option that mentioned above. Once in the AMT Configuration menu you should see an option to disable it.

 

 

Edit: Added second photo

ThinkStation P700      ThinkPad X1C7

Reply
Options

75 Posts

02-09-2017

United States of America

105 Signins

711 Page Views

  • Posts: 75
  • Registered: ‎02-09-2017
  • Location: United States of America
  • Views: 711
  • Message 5 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-22, 23:43 PM

Unfortunately, the options are identical in text mode.

 

 

 

Reply
Options

75 Posts

02-09-2017

United States of America

105 Signins

711 Page Views

  • Posts: 75
  • Registered: ‎02-09-2017
  • Location: United States of America
  • Views: 711
  • Message 6 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-22, 23:45 PM
Ah, sorry, I missed your second post. "Unconfigure" resets AMT back to its default, shipping configuration without disabling it.
Reply
Options

5196 Posts

02-22-2010

United States of America

3672 Signins

51385 Page Views

  • Posts: 5196
  • Registered: ‎02-22-2010
  • Location: United States of America
  • Views: 51385
  • Message 7 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-23, 0:30 AM

Try checking the MEBx settings to see if there is a toggle in there to disable AMT.

 

 

I think the ME ships as disabled by default.  I believe AMT code is embedded in BIOS and required for CPU support, so the code will always be in BIOS to some extent.  




If we've helped resolve your issue, please be sure to mark your topic as solved!
Reply
Options

75 Posts

02-09-2017

United States of America

105 Signins

711 Page Views

  • Posts: 75
  • Registered: ‎02-09-2017
  • Location: United States of America
  • Views: 711
  • Message 8 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-23, 0:55 AM

IIRC there were some settings to lock it down a bit and set an admin password in the MEBx settings, but nothing that made the ME stop showing up in Windows. If you install the AMT driver, the Status app says "Intel Active Management Technology (Intel AMT): Enabled;" the Advanxed tab says "Status: Unconfigured" for the ME.

For what it's worth, I find much of Intel's documentation around this rather opaque, so perhaps I'm misunderstanding something.

Reply
Options

75 Posts

02-09-2017

United States of America

105 Signins

711 Page Views

  • Posts: 75
  • Registered: ‎02-09-2017
  • Location: United States of America
  • Views: 711
  • Message 9 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-23, 1:15 AM

Past machines I've seen have also had an explicit toggle in the BIOS. Here's one I found for a ThinkPad: https://www.lenovo.com/shop/americas/content/user_guides/t430s_ug_en.pdf

 

EDIT: Should've read further. This claims the toggle on that ThinkPad merely removes access to AMT configuration instead of disabling it, which isn't how the manual read to me. Not sure what's true other than that AMT is horribly confusing. https://www.reddit.com/r/thinkpad/comments/4w3sr3/t430s_accidentally_permanently_disabled_access_to/

Reply
Options

5884 Posts

11-24-2007

United States of America

12810 Signins

291275 Page Views

  • Posts: 5884
  • Registered: ‎11-24-2007
  • Location: United States of America
  • Views: 291275
  • Message 10 of 10

Re: P710: Can the Intel Management Engine be disabled?

2017-09-23, 1:34 AM

If I reboot my P700 this weekend I'll check how mine is set in BIOS. I know I'm not using any IME features. The only AMT component in my devmgmt.msc is the SOL driver. I installed the driver just to kill the yellow bang. And, by either not installing the driver or disabling the device in devmgmt it would be rendered useless.

ThinkStation P700      ThinkPad X1C7

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete

X

No, I don’t want to share ideas Yes, I agree to these terms