Revision : 01 -------------------------------------------------------------------------------- Software name Intel AMT 2.6 Management Engine Firmware Support models ThinkPad X300 ThinkPad T61, T61p ThinkPad X61, X61s, X61 Tablet ThinkPad Reserve Edition Operating Systems Microsoft Windows 7 32-bit, 64-bit Microsoft Windows Vista 32-bit, 64-bit Microsoft Windows XP Home Edition, Professional Microsoft Windows XP Tablet PC Edition 2005 Refer to marketing materials to find out what computer models support which Operating Systems. Version 2.6.50.1056 2.6.50 (Recovery Version) 1056 (Recovery Build Number) -------------------------------------------------------------------------------- WHAT THIS PACKAGE DOES This package updates the following Intel Active Management Technology (AMT) software. - Management Engine Firmware Refer to marketing materials to find out what computer models support Intel AMT. Updating the software will fix problems, add new functions, or expand functions as noted below. -------------------------------------------------------------------------------- CHANGES IN THIS RELEASE Version 2.6.50.1056 Recovery Version 2.6.50 Recovery Build Number 1056 [Important updates] Nothing. [New functions or enhancements] Nothing. [Problem fixes] - Fixed an issue where Redirection did not work with Kerberos ticket larger than 4K in size (maximum ticket size has been increased to 10K). - Fixed an issue where Intel AMT returned inconsistent NAP posture hash results over SOAP/WS-MAN. - Fixed an issue where Intel AMT might not acquire an IP address in DHCP active mode wWhen using DHCP Relay Agent software configured with "seconds-since-boot threshold" > 0. - Fixed an issue where Intel AMT would accept DHCP ACK after DHCP transaction was complete. -------------------------------------------------------------------------------- DETERMINING WHICH VERSION IS INSTALLED 1. Make sure to be logged on with an administrator account. 2. Refer to the Manual Update section, and download and extract the file. 3. Open a Command Prompt with the following steps. [Windows 7/Vista] 1. Click Start, click All Programs, and then click Accessories. 2. Right-click Command Prompt, and select Run as administrator. 3. Click Yes (Windows 7) or Continue (Windows Vista). [Windows XP] 1. Click Start, and click All Programs, and then click Accessories. 2. Click Command Prompt. 4. In the Command Prompt, type the following command and press Enter. C:\DRIVERS\WIN\ME\MEInfoWin.exe The following information will be displayed. Example: Intel(R) MEInfo Win Version: 2.5.0.1052 BIOS Version: xxxxxxWW (x.xx ) Intel(R) AMT code versions: Flash: 2.6.50 Netstack: 2.6.50 Apps: 2.6.50 Intel(R) AMT: 2.6.50 Sku: 12 VendorID: 8086 Build Number: 1056 Recovery Version: 2.6.50 <--- Recovery Build Num: 1056 <--- Legacy Mode: False . . . 5. Note the "Recovery Version" and "Recovery Build Number", and refer to the Version Information section to check the installed version. If you see any errors, check Device Manager to see if the following devices exist. In the Ports (COM & LPT) category, Intel(R) Active Management Technology - SOL (COMx) In the System devices category, Intel(R) Management Engine Interface If not exists, install the following software: Intel AMT 2.6 - Management Engine Interface Intel AMT 2.6 - Local Manageability Service (LMS) and Serial Over LAN (SOL) Drivers -------------------------------------------------------------------------------- NOTES Nothing. -------------------------------------------------------------------------------- UPDATE INSTRUCTIONS Notes: - If your computer runs satisfactorily now, it may not be necessary to update the software. To determine if you should update the software, refer to the Version Information section. - You may need to confirm with your IT administrator if you need to update Management Engine Firmware. - If you are not using AMT, you don't need to update AMT Management Engine Firmware. - AMT devices are hidden by default and you cannot update the Management Engine Firmware. If you need to enable AMT, contact your IT administrator. - When you update Management Engine Firmware, you need the current Management Engine password. Consult with your IT administrator about the password. - Before updating Management Engine Firmware, make sure to connect an AC power and fully charged battery pack to your system. Manual Update Step 1. Enable Intel AMT in the BIOS setup 1. Turn off the computer. 2. Turn on the computer. 3. While the ThinkPad logo is displayed on the screen, press the F1 key. The BIOS Setup Utility menu will be displayed. If a password prompt appears, type the correct password. 4. Select Config. 5. Select Intel(R) AMT. 6. Select Enabled for the Intel AMT Control. 7. Press F10 to save and exit. 8. Select Yes. 9. Restart the computer. Step 2. Select Intel AMT for Manageability Feature Selection, and enable Intel Management Engine Firmware Local Update 1. Turn on the computer. 2. Press the Ctrl and P keys at the same time to enter Intel(R) ME Setup when prompted. 3. Enter the Intel(R) Current ME Password. 4. Select Intel(R) ME Configuration. You will be required to change the password before you proceed. The new password must be strong, i.e., it must include at least: - 8 characters - One upper case letter - One lower case letter - A number - A special character/non-alpha-numeric character (Ex: !,@,#,$,%,^,&,*). - The password cannot contain blanks or the characters '<' or '>'. 5. From the following message, press Y: [Caution] System resets after configuration changes Continue: (Y/N) 6. Select Intel(R) ME Features Control. 7. Select Manageability Feature Selection. 8. Select Intel(R) AMT. 9. Select Return to Previous Menu. 10. Select Intel(R) ME Firmware Local Update. 11. Select ENABLED. 12. Select Return to Previous Menu. 13. Select Exit. 14. From the following message, press Y: [ CONFIRM EXIT ] Are you sure you want to exit? (Y/N): Step 3. Update Intel Management Engine Firmware This section assumes to use Internet Explorer and Windows Explorer. Downloading file 1. Click once on the underlined file name. Once this is done, some pop-up windows will appear. 2. Follow the instructions on the screen. 3. In the window to choose Run or Save, click Save. 4. Choose the folder you would like to download the file to and click Save. A different window will appear and the download will begin and complete. Once the download has completed, there may or may not be a message stating that the download completed successfully. Extracting file 5. Make sure to be logged on with an administrator account. 6. Locate the folder where the file was downloaded. 7. Locate the file that was downloaded and double-click it. 8. Follow the instructions on the screen. 9. In the Ready to Install window, click Install. All the necessary files will be extracted to the C:\DRIVERS\WIN\ME folder. Installing files 10. Open a Command Prompt with the following steps. [Windows 7/Vista] 1. Click Start, click All Programs, and then click Accessories. 2. Right-click Command Prompt, and select Run as administrator. 3. Click Yes (Windows 7) or Continue (Windows Vista). [Windows XP] 1. Click Start, and click All Programs, and then click Accessories. 2. Click Command Prompt. 11. In the Command Prompt, type the following command and press Enter. C:\DRIVERS\WIN\ME\MEUPDATE.CMD 12. Wait for about 1 minute for completion. 13. Close the Command Prompt window, and then shut down the computer. Finally delete the file saved in the step 4. -------------------------------------------------------------------------------- VERSION INFORMATION The following versions have been released to date. Package version Recovery Version Recovery Build Number Rev. Issue Date --------------- ---------------- --------------------- ---- ----------- 2.6.50.1056 2.6.50 1056 01 2011/04/14 2.6.40.1054 2.6.40 1054 01 2010/11/02 2.6.30.1051 2.6.30 1051 01 2010/02/16 2.6.10.1043 2.6.10 1043 01 2009/05/18 2.6.6.1037 2.6.6 1037 02 2009/02/12 2.6.6.1037 2.6.6 1037 01 2009/02/06 2.6.4.1034 2.6.4 1034 4th release 2.6.3.1032 2.6.3 1032 3rd release 2.5.0.1094 2.5.0 1094 2nd release 2.5.0.1084 2.5.0 1084 1st release Note: Revision number (Rev.) is for administrative purpose of this README document and is not related to software version. There is no need to upgrade this software when the revision number changes. To check the version of software, refer to the Determining which version is installed section. Summary of Changes Where: < > Package version number [Important] Important update (New) New function or enhancement (Fix) Correction to existing function <2.6.50.1056> - (Fix) Fixed an issue where Redirection did not work with Kerberos ticket larger than 4K in size (maximum ticket size has been increased to 10K). - (Fix) Fixed an issue where Intel AMT returned inconsistent NAP posture hash results over SOAP/WS-MAN. - (Fix) Fixed an issue where Intel AMT might not acquire an IP address in DHCP active mode wWhen using DHCP Relay Agent software configured with "seconds-since-boot threshold" > 0. - (Fix) Fixed an issue where Intel AMT would accept DHCP ACK after DHCP transaction was complete. <2.6.40.1054> - (New) Added support for Windows 7. - (New) Added the updated VeriSign G1.5 and G5 Root Certificate hashes into the AMT 2.6. - (New) Added CyberTrust Root Certificate hashes (GTE CyberTrust Global Root, Baltimore CyberTrust Root and Cybertrust Global Root) into AMT 2.6. - (Fix) Changed the MEInfo error message to alert users of insufficient administrative rights when executing tool with non-administrative privileges on Windows 7. - (Fix) Fixed an issue where Wireless Intel AMT might fail to reconnect to the 802.11n Access Point with RSN-TLS profile in Hx after any link down/ link up cycle (SOL/IDER started/stopped in H0, wireless driver was disabled/enabled, Wireless Manageability disabled/enabled). - (Fix) Fixed an issue where it did not accept nor reject the connection, jamming LME's listening socket when HECI driver was disconnected and LME was requested to handle new connection (e.g., UNS event). - (Fix) Fixed an issue where AMT crashed when processing a malicious Kerberos token. - (Fix) Fixed an issue where SOL/IDER session might fail to open with 802.1x profile on some Access Points. Timeout was over before association process was completed. <2.6.30.1051> - (Fix) Fixed an issue where Intel AMT did not handle DHCP options correctly if the DHCP option 0 existed (padding). <2.6.10.1043> - (Fix) Fixed an issue that related Kerberos Authentication. When using Intel AMT with Kerberos Authentication, after 25 continuous days with the Intel Manageability Engine in the M0/M1 state, the IT console loses the ability to manage this system due to a Kerberos authentication failure. The exposure is limited to provisioned platforms using Intel AMT with Kerberos Authentication enabled. <2.6.6.1037> - [Important] Fixed security vulnerability issues that: 1. A vulnerability in which a malicious user with local machine access who had intimate Management Engine (ME)-knowledge could potentially exploit boundary errors in some ME application functions to gain control over those ME applications. 2. A remote Denial of Service (DOS) vulnerability which a malicious user could potentially exploit to cause the reboot of a system running susceptible versions of Intel Active Management Technology (AMT). <2.6.6.1037> - (New) Added support for some special characters in AMT host names, _ (underscore) and # (pound sign). (The first character must be an alpha character) - (Fix) Fixed an issue that disconnected from the network every 5 minutes unexpectedly. <2.6.4.1034> - [Important] Protection against premature SPI flash memory wear-out. <2.6.3.1032> - [Important] Mobile Intel(R) 965 Express Chipset Unexpected DDR RCOMP Update Erratum. - (New) Support for ThinkPad Reserve Edition,T61p,X300,X61,X61s,X61 Tablet. <2.5.0.1094> - (Fix) A possible battery life issue when AMT is configured. <2.5.0.1084> - (New) (Initial release) Support for ThinkPad T61. -------------------------------------------------------------------------------- LIMITATIONS Nothing. -------------------------------------------------------------------------------- TRADEMARKS * Lenovo and ThinkPad are registered trademarks of Lenovo. * Intel is a registered trademark of Intel Corporation. * Microsoft, Windows and Windows Vista are registered trademarks of Microsoft Corporation. Other company, product, and service names may be registered trademarks, trademarks or service marks of others.