boucher_leo2

updated

7 years ago

B

boucher_leo2

1 Rookie

5 Posts

0

49909

March 2nd, 2020 14:00

Disabling Intel Active Management Technology

We have a number of different models of Optiplex desktops, all out of warranty.  All if them have Intel Active Management technology and they are all enabled and in pre-provisioning state.  They can easily be enabled for remote management, but that is not what we want to do. 

The firmware versions for Intel ME on these machines is old and probably have not been updated since the machines were installed, as there was no knowledge of this technology existing or that it was enabled.  After reading the various warnings from Intel and Dell (and others) about the danger of out of date firmware on the Intel ME and also that it can be leveraged to take over a system, we decided the safest course we could take was to disabled Intel ME on these systems. 

To that end, I have looked for a setting in the Bios to do this (no luck) and used the Dell Configuration Utility (CCTK) to find a way to do that, but that was also a bust. 

Does anyone have any idea how to disable Intel ME on these desktops?

Thanks,

Leo