u/RaxisPhasmatis

Got a 13980hx modt motherboard and when booting into Windows it spits one cache hierarchy error (on apic 0, corrected) at the point I think the windows power management takes over

And if I turn on tvb it spits them into event viewer for random apic numbers whenever going from high load to low load or back again

No actual crashes or anything

My last intel cpu experience was 4th gen and the voltages etc in the bios were a lot more simple back then

No bios updates likely from the manufacturer as I had to mod my own bios to add the new microcode and new csme version

So my questions are:

Is it something to be worried about?

Is there a voltage offset I can change to stabilize this as I expect it's because it's setting the voltage slightly to low when running low frequency

And what is a likely safe voltage to set if there is one

So to pass the Cod attestation tool you need three things:

 

A working TPM 2.0 module - if this is red in the cod attestation tool you need to turn it on in bios.

if its green its on and you are good.

 

 

Working secure boot - If its green on the cod attestation tool you dont need to update your bios for this particular problem.

If its red you either need to enable it in the bios

if you turn it on and it brings up a big red window you need to update to the 2023 CA certs(erying hasn't done that yet, but I have modded some bioses to do that, see https://www.reddit.com/r/EryingMotherboard/comments/1udaxxw/11th_gen_es_8corethm570111_and_thm570307_and/

to see more on that.

 

 

Up to date CSME Firmware - (it updates the management engine and the security stuff like the TPM firmware)

If the the cod attestation shows green tpm 2.0 -- green secure boot -- and a "you must update your bios" in yellow then your ME firmware is out of date. Example below:

https://preview.redd.it/t0w5795pd0ah1.jpg?width=4000&format=pjpg&auto=webp&s=64ea21ff6b433c7fffefafde31cc18267a0e2208

how to find out if your CSME is out of date/vulnerable and stopping COD attestation tool/WZ from working:

Run the CSME check tool from intel:

https://www.intel.com/content/www/us/en/download/19392/intel-converged-security-and-management-engine-version-detection-tool-intel-csmevdt.html

if it says something in red about you being vulnerable you need to update your ME

for example my 13th gen 13980hx says this:

https://preview.redd.it/h3ys45mrd0ah1.png?width=639&format=png&auto=webp&s=cd5b32968e97e68507ad162d868145ec715e082e

Because I already updated my 13980HX its showing green text

I've added 11th gen and 13th gen discoverytool and the CSME updates as zips here(for 13th gen H770 and 11th gen HM570 based boards only):

https://drive.google.com/drive/folders/1JNikQhar3nApPa3qSFQBOfBrKAJe-62n?usp=sharing

or you can get them yourselves from places like windowselevenforum under the [FIRMWARE] Intel ME post(make sure you get consumer and the right version for the right chipset(H570 for 11th gen, H770 for 13th gen)

be careful when you do this, this is usually something motherboard makers do, but erying doesn't have that kind of support yet(they make cobbled together custom MODT and prob didnt expect apps/windows to up and change how much they care about firmware updates all of a sudden.

DO NOT FLASH AN ME FIRMWARE THAT NOT YOUR MAIN VERSION FOR YOUR CHIPSET, YOU WILL FAFO THE HARD WAY IF YOU TRY A V15.0 ON A CHIPSET THAT REQUIRES V16.1 OR A V16.1 ON A CHIPSET THAT REQUIRES V11.0

Steps to update your CSME:

WARNING: Do not attempt to update your ME without installing the ME driver, if you do attempt it and partially install the ME firmware DO NOT REBOOT, FIND AND INSTALL THE DRIVER AND RERUN THE ME FIRMWARE UPDATE BEFORE REBOOTING.

Step 1 install your ME driver if you havent already

https://www.intel.com/content/www/us/en/download/682431/intel-management-engine-drivers-for-windows-10-and-windows-11.html

step 2 check csme version with the discovery tool(included in zip)

Step 3 if it says vulnerable and your main version matches one I have in my shared google drive right click install.cmd and run as admin and install your updated CSME firmware if you have a different erying board check windowselevenforum for a version suiting yours(ask them if you are unsure and show them your CSME discovery tool results)

Step 4 reboot

Basically modded the bioses for two of my 11th gen ES boards to have the new 2023 Secure boot keys

additionally modded my 13980HX D4(DDR4 ONLY) NON-ES board to have the new secure boot keys and the 132 microcode(best working microcode to prevent CPU degredation)

and thought I'd share for anyone with the same boards.

READ ALL OF THESE WARNINGS:

NOTE: Changing your secure boot settings can trigger bitlocker if you have it enabled, disable it first.

IMPORTANT NOTE: Before doing anything, make sure you have your password to your microsoft account, changing secureboot settings makes windows force you to put in your password and re-enable your pin/face/whatevers

NOTE: take a photo of your bios settings before you begin, you will be resetting them, you might want to set them back up and its easier if you have a reference, specially on an Eng sample board that may have loads of settings you had to set to get it stable.

Note: NO THE Eng sample bioses wont work on non-ES 11th gen boards.

THM570111 is compatible with the older 570106

Check your current bios versions to confirm

WARNING: the 11th GEN BIOSES WILL NOT WORK ON THE 6 CORE VERSIONS(ES OR NOT) OR THE NON-ES VERSIONS OF THE BOARDS

WARNING: The 13th Gen bios is for the HM770 based 13980HX DDR4 motherboard only.
It might not work on the ddr5 version, it might not work on lower end 13th gen HX boards, I don't know, if you do try it have a flash programmer like the CH341A and required adapters handy(cheap af and it works)

WARNING: MAKE BACKUPS, THE HOWTO TEXT FILE TELLS YOU HOW TO.

Also do this at your own risk, I'm not a helpdesk, I'm just here because some bios flashing veterans might find having the new secure boot keys on an erying bios useful.

Use the CSME discovery tool to work out what version of the CSME tools/ FPT64 you need to use to flash

also included instructions on how to update your ME firmware etc as I have done to my machines.

https://drive.google.com/drive/folders/1JNikQhar3nApPa3qSFQBOfBrKAJe-62n?usp=sharing