(Fix) Fixed an issue where Intel AMT might not acquire an IP address in DHCP active mode wWhen using DHCP Relay Agent software configured with "seconds-since-boot threshold" > 0.
(Fix) Fixed an issue where Intel AMT would accept DHCP ACK after DHCP transaction was complete.
Version 2.6.30.1054
(New) Added support for Windows 7.
(New) Added the updated VeriSign G1.5 and G5 Root Certificate hashes into the AMT 2.6.
(New) Added CyberTrust Root Certificate hashes (GTE CyberTrust Global Root, Baltimore CyberTrust Root and Cybertrust Global Root) into AMT 2.6.
(Fix) Changed the MEInfo error message to alert users of insufficient administrative rights when executing tool with non-administrative privileges on Windows 7.
(Fix) Fixed an issue where Wireless Intel AMT might fail to reconnect to the 802.11n Access Point with RSN-TLS profile in Hx after any link down/ link up cycle (SOL/IDER started/stopped in H0, wireless driver was disabled/enabled, Wireless Manageability disabled/enabled).
(Fix) Fixed an issue where it did not accept nor reject the connection, jamming LME's listening socket when HECI driver was disconnected and LME was requested to handle new connection (e.g., UNS event).
(Fix) Fixed an issue where AMT crashed when processing a malicious Kerberos token.
(Fix) Fixed an issue where SOL/IDER session might fail to open with 802.1x profile on some Access Points. Timeout was over before association process was completed.
Version 2.6.30.1051
(Fix) Fixed an issue where Intel AMT did not handle DHCP options correctly if the DHCP option 0 existed (padding).
Version 2.6.10.1043
(Fix) Fixed an issue that related Kerberos Authentication. When using Intel AMT with Kerberos Authentication, after 25 continuous days with the Intel Manageability Engine in the M0/M1 state, the IT console loses the ability to manage this system due to a Kerberos authentication failure. The exposure is limited to provisioned platforms using Intel AMT with Kerberos Authentication enabled.
Version 2.6.6.1037
(New) Added support for some special characters in AMT host names, _ (underscore) and # (pound sign). (The first character must be an alpha character)
(Fix) Fixed an issue that disconnected from the network every 5 minutes unexpectedly.
[Important] Fixed security vulnerability issues that:
A vulnerability in which a malicious user with local machine access who had intimate Management Engine (ME)-knowledge could potentially exploit boundary errors in some ME application functions to gain control over those ME applications.
A remote Denial of Service (DOS) vulnerability which a malicious user could potentially exploit to cause the reboot of a system running susceptible versions of Intel Active Management Technology (AMT).
Version 2.6.4.1034
[Important] Protection against premature SPI flash memory wear-out.
Version 2.6.3.1032
[Important] Mobile Intel(R) 965 Express Chipset Unexpected DDR RCOMP Update Erratum.
(New) Support for ThinkPad Reserve Edition, T61p, X300, X61, X61s, X61 Tablet.
Version 2.5.0.1094
(Fix) A possible battery life issue when AMT is configured.
Version 2.5.0.1084
(New) Initial release for ThinkPad T61.
Update Instructions
Notes:
If your computer runs satisfactorily now, it may not be necessary to update the software. To determine if you should update the software, refer to the Version Information section.
You may need to confirm with your IT administrator if you need to update Management Engine Firmware.
If you are not using AMT, you don't need to update AMT Management Engine Firmware.
AMT devices are hidden by default and you cannot update the Management Engine Firmware. If you need to enable AMT, contact your IT administrator.
When you update Management Engine Firmware, you need the current Management Engine password. Consult with your IT administrator about the password.
Before updating Management Engine Firmware, make sure to connect an AC power and fully charged battery pack to your system.
Manual Update
Enable Intel AMT in the BIOS setup
Turn off the computer.
Turn on the computer.
While the ThinkPad logo is displayed on the screen, press the F1 key. The BIOS Setup Utility menu will be displayed. If a password prompt appears, type the correct password.
Select Config.
Select Intel(R) AMT.
Select Enabled for the Intel AMT Control.
Press F10 to save and exit.
Select Yes.
Restart the computer
Select Intel AMT for Manageability Feature Selection, and enable Intel Management Engine Firmware Local Update
Power on the system.
Press CTRL and P at the same time to enter Intel(R) ME Setup when prompted.
Enter the Intel(R) Current ME Password.
Select Intel(R) ME Configuration.You will be required to change the password before you proceedThe new password must be strong, i.e., it must include at least:- 8 characters- One upper case letter- One lower case letter- A number- A special character/non-alpha-numeric character (Ex: !,@,#,$,%,^,&,*).- The password cannot contain blanks or the character "<" or ">".
From the following message, press Y:[Caution] System resets after configuration changes Continue: (Y/N)
Select Intel(R) ME Features Control.
Select Manageability Feature Selection.
Select Intel(R) AMT.
Select Return to Previous Menu.
Select Intel(R) ME Firmware Local Update.
Select ENABLED.
Select Return to Previous Menu.
Select Exit.
From the following message, press Y:[ CONFIRM EXIT ] Are you sure you want to exit? (Y/N)
Update Intel Management Engine FirmwareThis section assumes to use Internet Explorer and Windows Explorer.[Downloading file]
Click once on the underlined file name. Once this is done, some pop-up windows will appear.
Follow the instructions on the screen.
In the window to choose Run or Save, click the Save button.
Choose the folder you would like to download the file to and click the Save button. A different window will appear and the download will begin and complete. Once the download has completed, there may or may not be a message stating that the download completed successfully.
[Extracting file]
Locate the directory where the file was downloaded.
Locate the file that was downloaded and double-click it.
Follow the instructions on the screen.
In the "Ready to Install" window, click Install. All the necessary files will be extracted to the C:DRIVERSWINME folder.
[Updating files]
Make sure to be logged on with an administrator account.
Open a Command Prompt with the following steps.[Windows 7/Vista]
Click Start, click All Programs, and then click Accessories.
Right-click Command Prompt, and select Run as administrator.
Click Yes (Windows 7) or Continue (Windows Vista).
[Windows XP]
Click Start, and click All Programs, and then click Accessories.
Click Command Prompt.
In the Command Prompt, type the following command and press Enter. C:DRIVERSWINMEMEUPDATE.CMD
Wait for about 1 minute for completion.
Close the Command Prompt window, and then shut down the computer
Finally delete the file saved in Step 4.
Determining which version is installed
Make sure to be logged on with an administrator account.
Refer to the "Manual Update" section, and download and extract the file.
Open a Command Prompt with the following steps.[Windows 7/Vista]
Click Start, click All Programs, and then click Accessories.
Right-click Command Prompt, and select Run as administrator.
Click Yes (Windows 7) or Continue (Windows Vista).
[Windows XP]
Click Start, and click All Programs, and then click Accessories.
Click Command Prompt.
In the Command Prompt, type the following command and press Enter.[Path where the files were extracted]MEInfoWin.exeExample: C:DRIVERSWINMEMEInfoWin.exe
The following information will be displayed (Example):
Intel(R) MEInfoWin Version: 2.5.0.1052
BIOS Version: xxxxxxWW (x.xx )
Intel(R) AMT code versions:
Flash: 2.6.50
Netstack: 2.6.50
Apps: 2.6.50
Intel(R) AMT: 2.6.50
Sku: 12
VendorID: 8086
Build Number: 1056
Recovery Version: 2.6.50 <---
Recovery Build Num: 1056 <---
Legacy Mode: False
Note the Recovery Version and Recovery Build Number, and refer to the Version Information section to check the installed version.
If you see any errors, check Device Manager to see if the following device drivers are installed on the system:
Ports (COM &LPT)Intel(R) Active Management Technology - SOL (COMx)
System devicesIntel(R) Management Engine Interface
If not installed, please install using the following packages:
Intel AMT 2.6 - Management Engine Interface Intel AMT 2.6
Intel AMT 2.6 - Local Manageability Service (LMS) and Serial Over LAN (SOL) Driver

Updating the software will fix problems, add new functions, or expand
functions as noted below.
--------------------------------------------------------------------------------
CHANGES IN THIS RELEASE
Version 2.6.50.1056
Recovery Version 2.6.50
Recovery Build Number 1056
[Important updates]
Nothing.
[New functions or enhancements]
Nothing.
[Problem fixes]
- Fixed an issue where Redirection did not work with Kerberos ticket larger than
4K in size (maximum ticket size has been increased to 10K).
- Fixed an issue where Intel AMT returned inconsistent NAP posture hash results
over SOAP/WS-MAN.
- Fixed an issue where Intel AMT might not acquire an IP address in DHCP active
mode wWhen using DHCP Relay Agent software configured with "seconds-since-boot
threshold" > 0.
- Fixed an issue where Intel AMT would accept DHCP ACK after DHCP transaction
was complete.
--------------------------------------------------------------------------------
DETERMINING WHICH VERSION IS INSTALLED
1. Make sure to be logged on with an administrator account.
2. Refer to the Manual Update section, and download and extract the file.
3. Open a Command Prompt with the following steps.
[Windows 7/Vista]
1. Click Start, click All Programs, and then click Accessories.
2. Right-click Command Prompt, and select Run as administrator.
3. Click Yes (Windows 7) or Continue (Windows Vista).
[Windows XP]
1. Click Start, and click All Programs, and then click Accessories.
2. Click Command Prompt.
4. In the Command Prompt, type the following command and press Enter.
C:DRIVERSWINMEMEInfoWin.exe
The following information will be displayed.
Example:
Intel(R) MEInfo Win Version: 2.5.0.1052
BIOS Version: xxxxxxWW (x.xx )
Intel(R) AMT code versions:
Flash: 2.6.50
Netstack: 2.6.50
Apps: 2.6.50
Intel(R) AMT: 2.6.50
Sku: 12
VendorID: 8086
Build Number: 1056
Recovery Version: 2.6.50 <---
Recovery Build Num: 1056 <---
Legacy Mode: False
.
.
.
5. Note the "Recovery Version" and "Recovery Build Number", and refer to the
Version Information section to check the installed version.
If you see any errors, check Device Manager to see if the following devices
exist.
In the Ports (COM & LPT) category,
Intel(R) Active Management Technology - SOL (COMx)
In the System devices category,
Intel(R) Management Engine Interface
If not exists, install the following software:
Intel AMT 2.6 - Management Engine Interface
Intel AMT 2.6 - Local Manageability Service (LMS) and Serial Over LAN (SOL)
Drivers
--------------------------------------------------------------------------------
NOTES
Nothing.
--------------------------------------------------------------------------------
UPDATE INSTRUCTIONS
Notes:
- If your computer runs satisfactorily now, it may not be necessary to update
the software. To determine if you should update the software, refer to the
Version Information section.
- You may need to confirm with your IT administrator if you need to update
Management Engine Firmware.
- If you are not using AMT, you don't need to update AMT Management Engine
Firmware.
- AMT devices are hidden by default and you cannot update the Management Engine
Firmware. If you need to enable AMT, contact your IT administrator.
- When you update Management Engine Firmware, you need the current Management
Engine password. Consult with your IT administrator about the password.
- Before updating Management Engine Firmware, make sure to connect an AC
power and fully charged battery pack to your system.
Manual Update
Step 1. Enable Intel AMT in the BIOS setup
1. Turn off the computer.
2. Turn on the computer.
3. While the ThinkPad logo is displayed on the screen, press the F1 key. The
BIOS Setup Utility menu will be displayed. If a password prompt appears,
type the correct password.
4. Select Config.
5. Select Intel(R) AMT.
6. Select Enabled for the Intel AMT Control.
7. Press F10 to save and exit.
8. Select Yes.
9. Restart the computer.
Step 2. Select Intel AMT for Manageability Feature Selection, and enable Intel
Management Engine Firmware Local Update
1. Turn on the computer.
2. Press the Ctrl and P keys at the same time to enter Intel(R) ME Setup when
prompted.
3. Enter the Intel(R) Current ME Password.
4. Select Intel(R) ME Configuration.
You will be required to change the password before you proceed.
The new password must be strong, i.e., it must include at least:
- 8 characters
- One upper case letter
- One lower case letter
- A number
- A special character/non-alpha-numeric character (Ex: !,@,#,$,%,^,&,*).
- The password cannot contain blanks or the characters '<' or '>'.
5. From the following message, press Y:
[Caution]
System resets after configuration changes
Continue: (Y/N)
6. Select Intel(R) ME Features Control.
7. Select Manageability Feature Selection.
8. Select Intel(R) AMT.
9. Select Return to Previous Menu.
10. Select Intel(R) ME Firmware Local Update.
11. Select ENABLED.
12. Select Return to Previous Menu.
13. Select Exit.
14. From the following message, press Y:
[ CONFIRM EXIT ]
Are you sure you want to exit? (Y/N):
Step 3. Update Intel Management Engine Firmware
This section assumes to use Internet Explorer and Windows Explorer.
Downloading file
1. Click once on the underlined file name. Once this is done, some pop-up
windows will appear.
2. Follow the instructions on the screen.
3. In the window to choose Run or Save, click Save.
4. Choose the folder you would like to download the file to and click Save.
A different window will appear and the download will begin and complete.
Once the download has completed, there may or may not be a message stating
that the download completed successfully.
Extracting file
5. Make sure to be logged on with an administrator account.
6. Locate the folder where the file was downloaded.
7. Locate the file that was downloaded and double-click it.
8. Follow the instructions on the screen.
9. In the Ready to Install window, click Install. All the necessary files will
be extracted to the C:DRIVERSWINME folder.
Installing files
10. Open a Command Prompt with the following steps.
[Windows 7/Vista]
1. Click Start, click All Programs, and then click Accessories.
2. Right-click Command Prompt, and select Run as administrator.
3. Click Yes (Windows 7) or Continue (Windows Vista).
[Windows XP]
1. Click Start, and click All Programs, and then click Accessories.
2. Click Command Prompt.
11. In the Command Prompt, type the following command and press Enter.
C:DRIVERSWINMEMEUPDATE.CMD
12. Wait for about 1 minute for completion.
13. Close the Command Prompt window, and then shut down the computer.
Finally delete the file saved in the step 4.
--------------------------------------------------------------------------------
VERSION INFORMATION
The following versions have been released to date.
Package version Recovery Version Recovery Build Number Rev. Issue Date
--------------- ---------------- --------------------- ---- -----------
2.6.50.1056 2.6.50 1056 01 2011/04/14
2.6.40.1054 2.6.40 1054 01 2010/11/02
2.6.30.1051 2.6.30 1051 01 2010/02/16
2.6.10.1043 2.6.10 1043 01 2009/05/18
2.6.6.1037 2.6.6 1037 02 2009/02/12
2.6.6.1037 2.6.6 1037 01 2009/02/06
2.6.4.1034 2.6.4 1034 4th release
2.6.3.1032 2.6.3 1032 3rd release
2.5.0.1094 2.5.0 1094 2nd release
2.5.0.1084 2.5.0 1084 1st release
Note: Revision number (Rev.) is for administrative purpose of this README
document and is not related to software version. There is no need to
upgrade this software when the revision number changes.
To check the version of software, refer to the Determining which version is
installed section.
Summary of Changes
Where: < > Package version number
[Important] Important update
(New) New function or enhancement
(Fix) Correction to existing function
<2.6.50.1056>
- (Fix) Fixed an issue where Redirection did not work with Kerberos ticket
larger than 4K in size (maximum ticket size has been increased to 10K).
- (Fix) Fixed an issue where Intel AMT returned inconsistent NAP posture hash
results over SOAP/WS-MAN.
- (Fix) Fixed an issue where Intel AMT might not acquire an IP address in DHCP
active mode wWhen using DHCP Relay Agent software configured with
"seconds-since-boot threshold" > 0.
- (Fix) Fixed an issue where Intel AMT would accept DHCP ACK after DHCP
transaction was complete.
<2.6.40.1054>
- (New) Added support for Windows 7.
- (New) Added the updated VeriSign G1.5 and G5 Root Certificate hashes into the
AMT 2.6.
- (New) Added CyberTrust Root Certificate hashes (GTE CyberTrust Global Root,
Baltimore CyberTrust Root and Cybertrust Global Root) into AMT 2.6.
- (Fix) Changed the MEInfo error message to alert users of insufficient
administrative rights when executing tool with non-administrative
privileges on Windows 7.
- (Fix) Fixed an issue where Wireless Intel AMT might fail to reconnect to the
802.11n Access Point with RSN-TLS profile in Hx after any link down/
link up cycle (SOL/IDER started/stopped in H0, wireless driver was
disabled/enabled, Wireless Manageability disabled/enabled).
- (Fix) Fixed an issue where it did not accept nor reject the connection,
jamming LME's listening socket when HECI driver was disconnected and
LME was requested to handle new connection (e.g., UNS event).
- (Fix) Fixed an issue where AMT crashed when processing a malicious Kerberos
token.
- (Fix) Fixed an issue where SOL/IDER session might fail to open with 802.1x
profile on some Access Points. Timeout was over before association
process was completed.
<2.6.30.1051>
- (Fix) Fixed an issue where Intel AMT did not handle DHCP options correctly if
the DHCP option 0 existed (padding).
<2.6.10.1043>
- (Fix) Fixed an issue that related Kerberos Authentication.
When using Intel AMT with Kerberos Authentication, after 25 continuous
days with the Intel Manageability Engine in the M0/M1 state, the IT
console loses the ability to manage this system due to a Kerberos
authentication failure. The exposure is limited to provisioned
platforms using Intel AMT with Kerberos Authentication enabled.
<2.6.6.1037>
- [Important]
Fixed security vulnerability issues that:
1. A vulnerability in which a malicious user with local machine access
who had intimate Management Engine (ME)-knowledge could potentially
exploit boundary errors in some ME application functions to gain
control over those ME applications.
2. A remote Denial of Service (DOS) vulnerability which a malicious
user could potentially exploit to cause the reboot of a system
running susceptible versions of Intel Active Management Technology
(AMT).
<2.6.6.1037>
- (New) Added support for some special characters in AMT host names,
_ (underscore) and # (pound sign).
(The first character must be an alpha character)
- (Fix) Fixed an issue that disconnected from the network every 5 minutes
unexpectedly.
<2.6.4.1034>
- [Important]
Protection against premature SPI flash memory wear-out.
<2.6.3.1032>
- [Important]
Mobile Intel(R) 965 Express Chipset Unexpected DDR RCOMP Update Erratum.
- (New) Support for ThinkPad Reserve Edition,T61p,X300,X61,X61s,X61 Tablet.
<2.5.0.1094>
- (Fix) A possible battery life issue when AMT is configured.
<2.5.0.1084>
- (New) (Initial release) Support for ThinkPad T61.
--------------------------------------------------------------------------------
LIMITATIONS
Nothing.
--------------------------------------------------------------------------------
TRADEMARKS
* Lenovo and ThinkPad are registered trademarks of Lenovo.
* Intel is a registered trademark of Intel Corporation.
* Microsoft, Windows and Windows Vista are registered trademarks of Microsoft
Corporation.
Other company, product, and service names may be registered trademarks,
trademarks or service marks of others.