4 ms·

I have a Lenovo T440s. My BIOS has an "activate/deactivate/permanently deactivate" setting for AMT. I set it to "deactivate" for now. Any idea what this buys m

I have a Lenovo T440s. My BIOS has an "activate/deactivate/permanently deactivate" setting for AMT. I set it to "deactivate" for now. Any idea what this buys me? Their last BIOS update was March 14. I'm hoping their next one has the new firmware.

gaia 10y ago
Deactivation merely resets the AMT settings. You can only turn it off by following these instructions.
- orblivion 10y ago
  So that means it's still exploitable over the network? (I thought it would cut it down to local-only). Lenovo is lying to me when it says "disable AMT"? Then again, maybe it's not actually enabled, since I didn't use the software to do so.
  - gaia 10y ago
    That is a good question. Lenovo's advisory (https://pcsupport.lenovo.com/us/en/product_security/ps500104 https://pcsupport.lenovo.com/us/en/product_security/ps500104) does not explicitly states which AMT status make it vulnerable, but given that Intel ME runs no matter what, I'd go for the disable guide.
    - orblivion 10y ago
      I did not know about the advisory. Thank you!