Windows Client Guidance against speculative execution vulnerabilities

MUser said:

RS5, Skip ahead, gave me new microcode.

Good to know. Kinda confirming what I have heard. Here is hoping that I will have a microcode update from RS4 when it is finally released.

Hi,

Here is hoping that I will have a microcode update from RS4 when it is finally released.

Yep. And one that covers more than just a few of Intel's latest CPUs too.
Currently RS4 does not even support the KB that held the MC updates for 1709. Go figure....

Cheers,

Hi,

Ground Sloth said:

I don't know if it would be feasible in your particular situation, but you could move the computer to Linux. Linux has protection against Spectre Variant 2 built into the Linux kernel (reptoline). And if you want Linux to update the CPU microcode, you can download the update directly from Intel and install it manually. Intel provides instructions.

Download Linux* Processor Microcode Data File

No need to move to Linux. If you want to you can use the MCU's with AMI's tool to load the MCU in Windows at every boot.
Works fine for me even though GRC does not seem to recognize it, the MCU is effectively active as HWInfo will show so it does provide protection against Spectre attacks.

http://forum.notebookreview.com/thre...indows.787152/

This can cover any machine Intel has updated the MC for and works on all W10 versions I've tested it on from 1040 to SCU 1803.

Cheers,

How to check which microcode revision Windows is loading (if newer than BIOS microcode)?

Run Notepad.exe and turn on Format/Word Wrap from pull down menu.
Use File/Open and navigate to C:\Windows\System32\mcupdate_GenuineIntel.dll, its a bit slow to open
Scroll to the late screen full

You will see a list of CPUID's, Platform ID's and MCU revisions (microcode)

Using build 17643 RS5, some match up with the latest releases from Intel but others are still on old revisions, e.g. 20655.

Hope this helps somehow?

MUser said:

How to check which microcode revision Windows is loading (if newer than BIOS microcode)?

Run Notepad.exe and turn on Format/Word Wrap from pull down menu.
Use File/Open and navigate to C:\Windows\System32\mcupdate_GenuineIntel.dll, its a bit slow to open
Scroll to the late screen full

You will see a list of CPUID's, Platform ID's and MCU revisions (microcode)

Using build 17643 RS5, some match up with the latest releases from Intel but others are still on old revisions, e.g. 20655.

Hope this helps somehow?

If Windows is not updating microcode based on Intel's guidance then I suggest opening support case with Microsoft.

Here is a copy of where my Windows PowerShell indicated my system is at with regard to Windows Client Guidance against speculative execution vulnerabilities.

I'm not sure if there is anything further I need to do at the moment?

I know my Toshiba Satellite P50-C (Part Number: PSPT2A-00E001) BIOS is up-to-date with version 1.50 and I'm also aware a firmware update from Toshiba for my Model Number for Intel, AMD & Microsoft Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method Security Vulnerabilities is yet to be released and determined.

Intel, AMD & Microsoft Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method Security Vulnerabilities

Attachment 185043

ASUS support has released a list of systems and when new BIOS will become available for them. Link here -> https://www.asus.com/News/YQ3Cr4OYKdZTwnQK

storageman said:

ASUS support has released a list of systems and when new BIOS will become available for them. Link here -> https://www.asus.com/News/YQ3Cr4OYKdZTwnQK

I did read elsewhere that they wont be releasing Bios Updates for Motherboards considered EOL (like the X99 Series) and that list would seem to confirm it , not a single MB listed , just pre-built systems and a few Laptops.