4 ms·

> If you reboot you should see a brief firmware splash mentioning the ME. Hitting ctrl+p at this point should get you into a menu which should let you disable A

by zkms 9y ago

> If you reboot you should see a brief firmware splash mentioning the ME. Hitting ctrl+p at this point should get you into a menu which should let you disable AMT. my Lenovo T450s's vPro/AMT setup menu (MEBx) requires a password from me. The default password ("admin") won't work -- which is wonderful, as I have no idea how to reset it. Yaey.

mjg59 9y ago
Try P@ssw0rd
- DiabloD3 9y ago
  I almost downvoted you until I realized you're you. It's seriously that?
  - desdiv 9y ago
    >Intel® Setup and Configuration Software (Intel® SCS) Deployment Guide [0] >5. Select Unconfigure this system using admin password, enter the admin password (P@ssw0rd) and click the Next button. I can just imagine the conversation that lead to this: "Johnson! This password doesn't meet our corporate password policy of having digits and symbols." "But... but this is the default password. It's publicly available and is not supposed to provide any security." "I don't care what your excuse is. Change it right now. [0] http://www.intel.com/content/www/us/en/software/scs-deployment-guide.html http://www.intel.com/content/www/us/en/software/scs-deployme...
    - Clownshoesms 9y ago
      Ah geez. Time to create a competent chip manufacturer. Anyone got a spare US sized military budget?
      - ethbro 9y ago
        To be fair, this thread wouldn't exist if it were absolutely trivial. ;)
deleted 9y ago
[deleted]
secretunicorn 9y ago
You could try removing any batteries on your board and drain the remaining current to ground. It should reset all bios settings.
- mjg59 9y ago
  Firmware settings are usually in flash these days, so they'll persist even if there's no charge.
- ChairmanPao 9y ago
  There's usually a jumper block on the motherboard to accomplish this in a more controlled way.
vbernat 9y ago
On mine, there is an option to permanently disable AMT in the BIOS. I have enabled it a long time ago. Is it enough?
ajdlinux 9y ago
Also, you may need to go into BIOS/UEFI setup and enable an option along the lines of "Enable Intel ME Setup Hotkey" - at least this was needed on my Toshiba Tecra before I could use the Ctrl+P menu.
mtgx 9y ago
I don't trust Lenovo anymore. Far too many shenanigans like these from them. It wouldn't surprise me if they do it on purpose for the Chinese government. Also, the last Lenovo I bought, kind of fell apart in 2 years, so there's that, too.
- posguy 9y ago
  What model? I've been buying used Thinkpads as of late (all Lenovo) and while I do see a slow quality down-ramp, even the newest are more robust than a similar Asus. When it comes to x86-64, everything is back-doored, make no bones about it. If you want something less insecure, go get a T400 and libreboot it, or buy an SBC that can run with no blobs.
- imglorp 9y ago
  Right, they've been caught several times now. How many didn't get publicized? http://thehackernews.com/2015/08/lenovo-rootkit-malware.html http://thehackernews.com/2015/08/lenovo-rootkit-malware.html https://www.us-cert.gov/ncas/alerts/TA15-051A https://www.us-cert.gov/ncas/alerts/TA15-051A etc.

by zkms 9y ago

mjg59 9y ago

Try P@ssw0rd

DiabloD3 9y ago
I almost downvoted you until I realized you're you. It's seriously that?
- desdiv 9y ago
  >Intel® Setup and Configuration Software (Intel® SCS) Deployment Guide [0] >5. Select Unconfigure this system using admin password, enter the admin password (P@ssw0rd) and click the Next button. I can just imagine the conversation that lead to this: "Johnson! This password doesn't meet our corporate password policy of having digits and symbols." "But... but this is the default password. It's publicly available and is not supposed to provide any security." "I don't care what your excuse is. Change it right now. [0] http://www.intel.com/content/www/us/en/software/scs-deployment-guide.html http://www.intel.com/content/www/us/en/software/scs-deployme...
  - Clownshoesms 9y ago
    Ah geez. Time to create a competent chip manufacturer. Anyone got a spare US sized military budget?
    - ethbro 9y ago
      To be fair, this thread wouldn't exist if it were absolutely trivial. ;)

deleted 9y ago

[deleted]

secretunicorn 9y ago

You could try removing any batteries on your board and drain the remaining current to ground. It should reset all bios settings.

mjg59 9y ago
Firmware settings are usually in flash these days, so they'll persist even if there's no charge.
ChairmanPao 9y ago
There's usually a jumper block on the motherboard to accomplish this in a more controlled way.

vbernat 9y ago

On mine, there is an option to permanently disable AMT in the BIOS. I have enabled it a long time ago. Is it enough?

ajdlinux 9y ago

Also, you may need to go into BIOS/UEFI setup and enable an option along the lines of "Enable Intel ME Setup Hotkey" - at least this was needed on my Toshiba Tecra before I could use the Ctrl+P menu.

mtgx 9y ago

I don't trust Lenovo anymore. Far too many shenanigans like these from them. It wouldn't surprise me if they do it on purpose for the Chinese government. Also, the last Lenovo I bought, kind of fell apart in 2 years, so there's that, too.

posguy 9y ago
What model? I've been buying used Thinkpads as of late (all Lenovo) and while I do see a slow quality down-ramp, even the newest are more robust than a similar Asus. When it comes to x86-64, everything is back-doored, make no bones about it. If you want something less insecure, go get a T400 and libreboot it, or buy an SBC that can run with no blobs.
imglorp 9y ago
Right, they've been caught several times now. How many didn't get publicized? http://thehackernews.com/2015/08/lenovo-rootkit-malware.html http://thehackernews.com/2015/08/lenovo-rootkit-malware.html https://www.us-cert.gov/ncas/alerts/TA15-051A https://www.us-cert.gov/ncas/alerts/TA15-051A etc.