Compaq dc7700 - Convertible Minitower PC, vPro Technology AMT 2.1 Firmware Update
HP Compaq Business PC with vPro Technology AMT 2.1
Firmware Update
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
AMT 2.1 Specific Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
What is changing in the system upgrade process for AMT 2.1? . . . . . . . . . . . . . . . . . . . . . 2
What files and directories are in a BIOS dc7700 softpaq? . . . . . . . . . . . . . . . . . . . . . . . .3
In what operating systems can I update the PC BIOS and Management Engine Firmware? . . . 4
Updating ME Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
How do I update the ME firmware in DOS locally? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
How do I update the ME firmware in Windows locally? . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
How do I configure the ME Idle Timeout? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Will I lose my AMT setup configurations when updating ME firmware? . . . . . . . . . . . . . . . .8
Updating PC BIOS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Will I lose my setup configurations when updating the BIOS? . . . . . . . . . . . . . . . . . . . . . . . 8
How do I update my PC BIOS in Windows XP or Vista? . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
How do I update the BIOS in a DOS environment? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
How do I update the BIOS when not running Windows XP, Vista, or DOS? . . . . . . . . . . . . . 9
What steps are necessary to execute the HPQFlash utility? . . . . . . . . . . . . . . . . . . . . . . . . 12
What are the steps necessary to execute the HPQPwsd utility? . . . . . . . . . . . . . . . . . . . . . 14
Updating - General Questions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
What steps are necessary to create the BIOS image CD for F10 ROM flash and recovery? . 15
What steps are necessary to create a bootable USB flash media for BIOS update? . . . . . . . 15
What steps are necessary to use SSM for BIOS update? . . . . . . . . . . . . . . . . . . . . . . . . . 17
What steps are necessary to use Altiris for BIOS update? . . . . . . . . . . . . . . . . . . . . . . . . . 17
What if the PC does not complete the BIOS or ME flash process? . . . . . . . . . . . . . . . . . . .19
What is a processor microcode update softpaq and how is it used? . . . . . . . . . . . . . . . . . 19
What does the BIOS binary image naming convention indicate? . . . . . . . . . . . . . . . . . . .20
Can I modify the BIOS POST splash screen? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
For More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
1
Introduction
Active Management Technology (AMT) allows for out of band management (OOB) of systems regardless
of their current power state. The initial version of AMT shipped with the HP Compaq dc7700 Business PC
with vPro technology systems is referred to as AMT version 2.0. Version 2.0 will keep the management
engine (ME) active executing the AMT firmware during sleep and power off states when OOB management is configured. With this configuration, the HP Compaq dc7700 Business PC with vPro technology
will draw power during these states to provide the OOB capabilities. In some business configurations,
power draw is a big concern. AMT 2.1 addresses this concern by allowing the ME to be placed into a
lower power state to greatly reduce the power draw during system sleep and power states when OOB
management actions are not taking place.
The procedure for updating system firmware is different than on past products. The ME firmware is a separate entity which can be updated independent of the system BIOS firmware. In the ME sections, the term
“provisioned” describes a vPro AMT system that has been configured by the customer (user or administrator). Please consult the HP white paper “vPro Setup and Configuration for the dc7700 Business PC with
Intel vPro Technology” (http://h20000.www2.hp.com/bizsupport/TechSupport/DocumentIn-
dex.jsp?contentType=SupportManual&lang=en&cc=us&docIndexId=179911&taskId=101&prodTypeId=12454&prodSeriesId=3232028#7) for information regarding the vPro provisioning process.
This white paper outlines Hewlett-Packard business PC BIOS flashing and ME update options for the
2006 vPro products. Users or administrators can choose the best method depending on the operating
environment of the computer(s). BIOS and ME updates are available in a downloadable softpaq containing the BIOS image and upgrade instructions for the various methods. Regardless of the BIOS flash
method, business PC products provide a high degree of upgrade reliability and offer failure safe recovery.
The remaining sections of this document answer frequently-asked questions concerning typical BIOS and
ME flash scenarios.
AMT 2.1 Specific Changes
What is changing in the system upgrade process for AMT 2.1?
To properly configure the HP Compaq dc7700 Business PC with vPro technology for the AMT 2.1 functionality, the system must be altered in the following order:
1. Update the ME firmware to 2.1.0.1029 or later.
2. Update the system BIOS firmware to version 2.0x or later.
3. Configure the ME firmware “Idle Timeout” to allow lower ME power states during OOB inactivity.
ME firmware “Idle Timeout” determines the minutes the ME will wait for management activity during OOB
situations (system in a sleep state) before the ME will transition to a lower power state. This feature allows
the ME to draw less power during inactive OOB situations. If a remote console requests management
information, the ME wakes the system, reconfigures the ME, and places the system back into the original
sleep state. After this operation, the ME will respond to any management query and begin the wait cycle
again before going back to a lower power state. The section “How do I configure the ME Idle Timeout?”
on page 6 provides a detailed description of how the feature is configured.
2
What files and directories are in a BIOS dc7700 softpaq?
BIOS and ME updates are delivered to customers through downloadable softpaqs. Softpaqs are self-executable programs which contain the BIOS image files and utilities to allow the BIOS to be updated in various manners. In cases like AMT 2.1 where ME and BIOS upgrades must be synchronized, the softpaq
will contain the files necessary for updating both entities. Regardless of the upgrade manner chosen by
the user or administrator, HP business PC BIOS provides flash recovery in the event of a BIOS flash failure.
The softpaq is executed by selecting the file SPXXXXX.exe where XXXXX is a unique identification number
assigned to each softpaq. The softpaq will present the user with information about the softpaq contents,
how to use the softpaq, and a brief explanation as to the PC enhancements offered.
After acknowledging the license agreement, the softpaq allows the user or administrator to extract the
contents to any directory. The following files and directories are an example of those extracted from a typical BIOS and ME softpaq; however, individual softpaqs may differ. Please see the softpaq documentation
files for exact contents.
• 786xx.cab - Compressed BIOS image that System Software Manager (SSM) can use to remotely
update a system.
• SPxxxxx.cva - Identification file used in SSM remote BIOS upgrade.
• BIOS Flash.htm - Web document describing the softpaq contents, ME, and BIOS upgrade methods.
• How to Use.txt - Text document describing the softpaq contents, ME, and BIOS upgrade methods.
• DOS Flash (directory):
• XXX_MMmm.bin - Binary BIOS image file required by Flashbin.exe.
• Assignpw.exe - DOS utility to assign administrative/setup password to flsh.cpu.
3
• Flashbin.exe - DOS utility to update and/or restore BIOS.
• Flsh.cpu - Hardware specific driver required by Flashbin.exe to update/restore the BIOS.
• BIOS CD (directory):
• BIOS.iso - CD image containing the binary BIOS file for F10 and flash recovery.
• Readme.txt - Text document describing the iso file image.
• HPQFlash (directory):
• HPQFlash.exe - Windows application to update and/or restore BIOS.
• HPQFlash.txt - Text document describing HPQFlash.exe use and syntax.
• HPQPswd.exe - Windows application that allows the user (typically a system administrator) to
create an encrypted password file that can be used with the /p option of the HPQFlash
application.
• HPQPswd.txt - Text document describing HPQFlash use and syntax.
• ROM.CAB - Compressed BIOS image file used by HPQFlash.
• ME Flash (directory):
• XXX_bbbb.bin - Binary ME firmware update image.
•Local-DOS (directory).
- FWUpdLcl.exe - Local DOS ME firmware update tool.
•Local-Win (directory).
- FWUpdLcl.exe - Local Windows ME firmware update tool.
In what operating systems can I update the PC BIOS and Management
Engine Firmware?
You can update or restore the BIOS in Windows XP and Vista using the HPQFlash application. DOS environments can use the Flashbin.exe utility. In situations with other Windows versions (NT, 95, ME), Linux,
or other operating systems, you can update the BIOS using F10 setup “Flash System ROM” feature.
You can update or restore the ME firmware locally in Windows XP using the FWUpdLcL.exe (Windows
version). DOS environments can use the DOS version of the FWUpdLcL.exe tool.
You can execute remote ME firmware updates through the Intel AMT WebGUI when configured in SMB
mode. You can remotely update enterprise configurations through ISV console applications. Consult the
“vPro Setup and Configuration for the dc7700 Business PC with Intel vPro Technology” white paper for
AMT setup and configuration details.
4
Updating ME Firmware
How do I update the ME firmware in DOS locally?
The DOS tool, FWUpdLcl.exe, is used locally by entering the tool name followed by ME firmware name.
In the following example, the command is entered fwupdlcl.exe 210_1028.bin. The tool begins
the updating process and displays “Performing Update …”. Once the process is complete, the tool displays “Update finished successfully”.
The DOS tool update will work regardless of whether the ME firmware has been provisioned. If the HP
Compaq dc7700 Business PC with vPro technology has not been provisioned, this method is best for
update ease.
How do I update the ME firmware in Windows locally?
The Windows tool (FWUpdLcl.exe) is used locally in a Command Window with the format fwup-
dlcl.exe <mefirmware.bin> -generic. The AMT configuration does not have to be provisioned
for this tool to function. In the following example, the command is entered fwupdlcl.exe
210_1028.bin -generic. The tool begins the updating process and displays “Performing Update
…”. Once the process is complete, the tool displays “Update finished successfully”.
5
How do I configure the ME Idle Timeout?
Once you have updated the ME firmware and system BIOS, you can configure the ME firmware Idle Timeout on provisioned systems to allow the ME to transition to lower power states during OOB sleep state
management. The Idle Timeout feature is operational only when the setting Intel ME ON in Host
sleep states is set to ON in the MEBx ME configuration menu. The default setting for this option is OFF.
The initial step to configuring the Idle Timeout is to enter the Management Engine BIOS Extension (MEBx)
setup menu by pressing CTRL+P during BIOS POST. If an administrator password has been established
in BIOS F10 setup, you must enter the administrator password to access the MEBx setup menu. If the HP
Compaq dc7700 Business PC with vPro technology has not been provisioned, you must change the ME
Password from the initial “admin” value to a strong password. The MEBx Password must be a strong password with the following requirements:
• Must be between 8 and 32 characters.
• Must contain both upper and lower case Latin characters (e.g. A, a, B, b).
• Must contain at least one digit character (e.g. 0, 1, 2, … 9).
• Must have at least one non-alphanumeric character from the following valid list:
• Valid characters:! @ # $ % ^ * _
• Invalid characters: “ ‘ , > < : & (space )
6
After you enter or establish the strong password, you can select Intel AMT Configuration > Idle
Timeout. ME firmware images that have been field upgraded to AMT 2.1 initially have this value set to
“0x0”, which disables the ME from entering a lower power state during OOB system management. To
enable this function, enter a non-zero value in either HEX or DECIMAL. In the following example, the Idle
Timeout value is set to “0x1”, which configures the ME to transition to a lower power state if AMT is
configured to provide OOB during system sleep states after 1 minute of idle time. All Idle Timeout val-
ues are in minutes. The lowest value of 1 minute offers the most energy savings.
7
Loading...