Intel Management Engine Interface, is it needed?

[Octopuss]

Re: Intel Management Engine Interface, is it needed?

What confuses me even more is the "full" package that contains the driver. It has ton of files, apparently several different components, installs ten tons of files, and there is not a single entry either in Start menu or Control panel. I mean, what the heck is that? There's not even any readme or explanation or anything. It just says "Intel Managemement components", and noone knows what it does.
I wouldn't mind to be able to have access to hardware info and some basic management functions on the computers in the house, but this thing by Intel smells of scratching behind your left ear with your right leg.

[profJim]

Re: Intel Management Engine Interface, is it needed?

Octopuss,

Your forum profile is set up so that you can't receive private messages.

Your location "in the ass" is offensive and not permitted in the forum.

You are now banned from the forum for 30 days.

If you use offensive language in the future, you will be permanently banned from the forum.

Flaming, spamming and inappropriate language is not permitted.

Forum Moderator

[odiebugs]

Re: Intel Management Engine Interface, is it needed?

Hello,

I noticed on my new motherboard there is a device in device manager with an exclamation mark and obviously this is related to the "Intel Management Engine Interface" drivers gigabyte offers.

I researched about this a lot, and it's of no use to me, my question is, is it needed? What is the recommendation on this? There is no option to disable this in bios, so I reckon it's necessary?

Thanks,

*Short - The only time you need to install the ME driver is when you want *ANY* remote data communication to the PC.

Long -- The basic use of this hardware is for remote, the use of it's software is say a network MGR who has computers ( workstations ) that he wants to communicate with, instead of having to be physically be there. The MGR can do anything with the new versions of software. The software designed for IME ( intel management engine ) Inetl has changed, First Intel came out with MEI, started out with older chipsets. MEI has evolved, now there is AMT, which is now part of the VPro system.

AMT- ACTIVE MANAGEMENT TECHNOLOGY- Key AMT features include the ability to: remotely turn on, off, or power cycle the machine,, remotely mount an image to load on the machine,, remotely access hardware asset information,, provide serial-over-LAN (SoL) console redirection,, provide out-of-band alerts to administrators,, provide a secure TLS tunnel between the administrator and the vPro PC .

VPro Tech- An added layer of security for businesses and intelligent systems,, Threat management, including protection from rootkits, viruses, and malware,, Identity and website access point protection,, Confidential personal and business data protection,, Remote and local monitoring, remediation, and repair of PCs and workstations.

*** Remember, any remote communication, like Icloud remote, Orbweb ME, several others. If you don't use any of the remote software, then you don't need the driver. If you don't use USB, you don't need the driver, even though Windows will usually install it's generic.

Intel's software is more for networking machines (workstations ) who are supervised by say IT dept, and the others are for regular users.
Don't let the wording in the Intel active MGT fool you, only when using remote tech does the BIOS /UEFI come into play and the driver needed.

I don't believe there has been a case where the driver was installed but not software and a hacker used the ME. You normally look at any software as having a flaw, then patched when found by Designer, and not always found before millions are using it.

I hope this was a basic brief simple terms for anyone not understanding it.

[vick1000]

Re: Intel Management Engine Interface, is it needed?

Is it not needed for realtime clock and voltage changes of Intel CPUs, in an OS environment?

[twetow]

Re: Intel Management Engine Interface, is it needed?

For those asking for practical use cases, here is one in detail with step-by-step guide: (even for home users)




By the way, I would agree with odiebugs that, [in]

*Short - The only time you need to install the ME driver is when you want *ANY* remote data communication to the PC.

[from a remote location]

Otherwise, there is no expressed need for ME / (I)MEI / AMT drivers if you do not plan to use it and the device can be safely disabled via device manager, since the OS (well, what OS? Windows) does not need to communicate through this interface. In this case it is also recommended to turn it off in the BIOS if there is such an option for this. It can still be re-enabled and re-installed at a later time, should the demand rise.

I have read that on some systems an option to re-enable the remote management always remains even while the computer is in the off state (but is not unplugged from mains and network) That's how it goes: the secret agencies by themselves would not give us a chance to opt-out from 'their' hidden remote surveillance feature (in this case, developed by Intel) For those who are paranoid: remote control is based on communication over the network and therefore (in theory, at least) it can be filtered. However, not only Intel developed and incorporated such remote access tools and features into their machines but other companies (IBM, for example) did it as well, long time ago. Primary use was server administration and now the technology arrived to workstations and desktops.

Regarding computer security and vulnerabilities, odiebugs has it right again:

You normally look at any software as having a flaw, then patched when found by Designer, and not always found before millions are using it.

Vulnerabilities in these management engines have already been discovered and demonstrated by security specialists that can even effect the windows operating system being used on the target machine. If the bad guys find their way they will surely exploit this.

I think, normally Helpdesk folks and Admins benefit most from these kind of Management Engines: they do not have to walk around all their office building to service pc client computers to do some routine maintenance. There are quite a few cases when such remote manageability makes life easier. I also read that some microcode (firmware) updates are being distributed by Intel via their management engine, so there is no need for user interaction or os-based updater client software.

[klepp0906]

Re: Intel Management Engine Interface, is it needed?

Please give me ONE example of what it does.
Except for these copypastes from Intel site, part of vpro blabla, remote access blabla, numerous things that use it blabla... I have NEVER EVER seen anyone explain what it actually does and what functionality does it add to a desktop board that's needed.

the "copy/paste" you refer to tells you exactly what it does... straight from intel. Or are you asking for the idiot proof version?

[urbanman2004]

Re: Intel Management Engine Interface, is it needed?

Thanks. This helped me figure out what drivers were missing from a Windows Vista install I was updating

[Dr.Lexus]

Re: Intel Management Engine Interface, is it needed?

Octopuss,

Your forum profile is set up so that you can't receive private messages.

Your location "in the ass" is offensive and not permitted in the forum.

You are now banned from the forum for 30 days.

If you use offensive language in the future, you will be permanently banned from the forum.

Flaming, spamming and inappropriate language is not permitted.

Forum Moderator

This was unnecessary and petty.

the "copy/paste" you refer to tells you exactly what it does... straight from intel. Or are you asking for the idiot proof version?

I think what he's asking for is specifics, which is the one thing everyone seems to be avoiding. In other words, lets say I want to take advantage of the remote access capabilities of the IME, exactly what software would I need to get in order to do that? More specifically, give me a name of the software package. Not just "any this or that" or other vague responses. Because lets face it, the information on intel's site speaks in abstractions. It tells you general conceptual tasks that could be accomplished, but not real roadmap as to how to accomplish those tasks. Granted, such a roadmap is probably beyond the scope of intel's focus when advertising their product, but on this forum it shouldn't be.

So how about those specifics. Let's say I want to remote manage my PC in the other room that has intel's ME on it, what software package should I go download to do it? Or if the software is already built in to Windows 7/8, how do I access that software from the start menu?

[plonk420]

Re: Intel Management Engine Interface, is it needed?

about the only thing of interest (but not for my newest desktop build... i'm OCing) is the alleged increased energy efficiency. good for a Haswell+ laptop with Win 8, it would seem.

the rest seems pointless (for my current build) unless there's a free VNC-like functionality, which it doesn't seem to indiciate there is.

edit: it appears if you have AMT (vPRO needed?), Intel has a proprietary VNC server that'll even run Out Of Band. one negative is that it enables/allows Protected Audio/Video Pathway to be used.

VNC would have been nice, tho the need for what sounds like a paid client doesn't. however, i only have a Haswell Pentium

https://en.wikipedia.org/wiki/Intel_Active_Management_Technology

[plonk420]

Re: Intel Management Engine Interface, is it needed?

I think what he's asking for is specifics, which is the one thing everyone seems to be avoiding. In other words, lets say I want to take advantage of the remote access capabilities of the IME, exactly what software would I need to get in order to do that? More specifically, give me a name of the software package. Not just "any this or that" or other vague responses. Because lets face it, the information on intel's site speaks in abstractions. It tells you general conceptual tasks that could be accomplished, but not real roadmap as to how to accomplish those tasks. Granted, such a roadmap is probably beyond the scope of intel's focus when advertising their product, but on this forum it shouldn't be.

So how about those specifics. Let's say I want to remote manage my PC in the other room that has intel's ME on it, what software package should I go download to do it? Or if the software is already built in to Windows 7/8, how do I access that software from the start menu?

[lenix]

Re: Intel Management Engine Interface, is it needed?

I've never installed the driver for this and I'm all good and stable.

[Al Breeck]

Re: Intel Management Engine Interface, is it needed?

Here is the simple reason Intel MEI is offered.
That intel vPro sticker on the front of the PC, needed to help sell the computer.

It was installed as a Dell download, one of 3 chipset drivers, named Intel AMT HECI
The huge unwanted program is actually a 2MB download for 32-bit, 64-bit Windows XP, Vista and Windows 7.
I could set up Remote Management between my P4 server and C2D desktop, just to use one monitor for both.

[gijoe50000]

Re: Intel Management Engine Interface, is it needed?

Posted by Tom Carpenter

What exactly is IMEI?
Most of the people still remain confused with the term Intel Management Engine Interface as they have little knowledge of the computer hardware. So, here is a short definition of IMEI. Basically, it is an interface that uses the Intel ME hardware features to enable an interaction between high- and low-level hardware systems in a system. With this Intel feature, the administrators can now handle the tasks without intervention of the human beings. This has simplified various tasks in a computer system.
Is IMEI required in all systems?

Intel Management Engine Interface allows you to work in both low as well as high level hardware environments. You can carry out various configuration tasks using this interface system. Also, some applications like remote access require connection between low and high levels of hardware in the board. For this IMEI is must.

Setting up the Management Engine (ME)Tasks performed by the Management Engine
The main component of Management Engine interface, ME performs a number of tasks in conditions when the system is running or in sleep mode. It also supports several tasks during the boot process. This sub-system is required for proper functioning and maximum efficiency of the PC. The interface checks whether the system is working properly or not while communicating with the operating system of PC.

Use of IMEI drivers
It is well known that the Intel Management Engine Interface enables effectual communication between the Intel Management Engine firmware and the host operating system. The Driver installs the hardware required for proper functioning of interface. Intel Management Engine interface driver support is different for different operating systems.

Wow! That's the most amount of words with the least amount of information I've ever seen.. Thanks for the info though..

[Lasersoft]

Re: Intel Management Engine Interface, is it needed?

Interesting thread here. A lot of dancing around and not a lot of information.

Here is all you should really need to know about this. I will let you find out how to use search engines to find the software for yourselves.

[Prizm]

Re: Intel Management Engine Interface, is it needed?

This was unnecessary and petty.

Tell me about it. The mod couldn't find anything else to pin him on, so picked him up on some lame technicality. All because he was trying to find out what this dubious software actually does.