Vpro, AMT, Intel ME

surferby · December 12, 2014

The cpu is a Core i5 4590 which is Vpro enabled. [ http://ark.intel.com/products/80815/Intel-Core-i5-4590-Processor-6M-Cache-up-to-3_70-GHz ]

The motherboard is a MSI B85M Gaming where Vpro is absent. [ http://ark.intel.com/products/75019 ] and [ http://us.msi.com/support/mb/B85M_GAMING.html ]

What this means to me as a desktop user at home who has no intereset of any kind of remote management of THAT KIND?

As the motherboard does NOT support Vpro, is it free from the risk of any kind of out-of-band remote connection including remote provisioning? Or is it still under the risk just because the processor has it?

If yes, how can I have the control or preferably disable that in all possible ways?

If no, then why there is Intel ME version listed in the Uefi [bIOS]?

Wise men are requested to shed light on the issues.

Faa · December 12, 2014

The B85 chipset doesn't have support for Vpro.

surferby · December 13, 2014

Ok. Thank you FAA. But please have look the information provided below that are produced by "Intel Management and Security Status" tool-

Item   Value
ME Control Mode   Not Provisioned
**Provisioning Mode   Pre Provisioning**
BIOS boot   NA
Last ME reset reason   Power Up
Local FWUpdate   NA
**Power Policy   Desktop: ON in S0, ME Wake in S3, S4-5**
Cryptography Support   NA

[FW Capabilities]

Item   Value
Intel® Small Business Technology   Enabled
**Intel® Anti-Theft Technology PC Protection   Enabled**
**Intel® Capability Licensing Service   Enabled**
**Intel® Dynamic Application Loader   Enabled**
**Protect Audio Video Path   Enabled**



[intel® Small Business Technology]

Item   Value
**Intel® SBT State   Enabled**
Intel® SBT Status   Not Configured

[intel® Anti-Theft Technology PC Protection]

Item   Value
**Intel® AT State   Enabled**
Intel® AT Status   NA

Item   Value
MEBx Version   NA
FW Version   9.0.30.1482
LMS Version   9.0.0.1323
MEI Driver Version   9.0.0.1287
SOL Driver Version   NA
SOL DeviceID   NA

[Network information]

Item   Value
LAN MAC Address   NA
LAN Configuration state   NA
LAN Link Status   NA
LAN IPv4 Address   NA
LAN IPv6 Enablement   NA
WLAN MAC Address   NA
WLAN Configuration state   NA
WLAN Link Status   NA
WLAN IPv4 Address   NA
WLAN IPv6 Enablement   NA

What this means to me as a desktop user at home who has no interest of remote management of THAT KIND and not subject to be managed by anyone else using those remote wake up on s0,s1,s2,s3... sleeping mode?

As the motherboard does NOT support Vpro, is it free from the risk of any kind of out-of-band remote connection including remote provisioning? Or is it still under the risk just because the processor has it or because of ME?

Can I have the control or preferably disable that in all possible ways?

If no, then why there is Intel ME version listed in the Uefi [bIOS]? How can "Intel management and Security Status" can show the below listed information including AT service? How can I disable any sort of remote connection attempt by or attempted to my pc which uses Vpro or ME or AT or AMT? The target is to element all sorts of provisioning or pre-os communication.