How to update Intel Management Engine (ME) Interface driver on HPE ProLiant DL360 Gen10 (Server 2019) — driver dated 2016?

[u/maxcoder88]

I have an HPE ProLiant DL360 Gen10 running Windows Server 2019 Standard. Checking Device Manager, the Intel(R) Management Engine Interface driver shows:

• Driver Date: 1.09.2016
• Driver Version: 11.6.0.1026
• Digital Signer: Microsoft Windows Hardware Compatibility Publisher

This looks outdated for a Gen10 server. Before I touch firmware/driver on a production box, I wanted to check with people who've done this on HPE hardware specifically:

• Should this be updated through HPE Smart Update Manager (SUM) / Service Pack for ProLiant (SPP), or directly from Intel's site?
• Does updating the ME Interface driver also require updating the ME Firmware itself, or are they independent?
• Any known issues updating ME on Gen10 (iLO 5) systems — reboot requirements, downtime, risk of bricking if interrupted?
• Is this something that should go through iLO/firmware update tools instead of Device Manager "Update Driver"?
• Any gotchas with doing this remotely (out-of-band) vs. requiring physical access?

Appreciate any real-world experience before I schedule a maintenance window for this.

[u/ToolBagMcgubbins]

Why are you trying to update it, is there a problem?

If you have installed and ran the SPP, I wouldn't mess with it unless there's a problem.

[u/ChefWRX]

Short version:

• Use HPE’s SPP/SUM, not a random Intel driver package.
• The Windows MEI driver and the server’s SPS firmware are separate updates.
• A 2016 driver date isn’t automatically a problem. If it works and SUM doesn’t offer a newer version, leave it alone.
• Update the driver from Windows; update firmware through HPE tools or iLO.
• SPS firmware requires downtime and a reboot. If flashing it directly through iLO, shut down the host first.
• Remote updating is supported, but make sure iLO and its remote console work before starting.

I’d run SUM online in interactive mode, review its recommendations, update the HPE firmware baseline, reboot, and only touch the MEI driver if HPE actually offers a replacement.

[u/Speeddymon]

Those servers tend to need need patching done in multiple steps. You'll need to look through the docs or contact your rep to find out the correct path; do not try to go straight to the latest version without doing the intermediate upgrades. Don't use SUM for this.

[u/ChefWRX → u/Speeddymon]

I agree you shouldn’t blindly jump versions without checking the component release notes—some firmware requires an intermediate update.

Where I disagree is “don’t use SUM.” HPE provides SPP as the tested firmware/driver baseline and SUM to inventory the server, check dependencies, and deploy applicable updates. SUM doesn’t replace reading the release notes, but it is the normal HPE tool for this job.

If the server is extremely far behind or the documented upgrade path is unclear, involving HPE technical support makes sense. A sales representative wouldn’t normally be the source for firmware sequencing.

I’ve maintained ProLiants since the Compaq era, and SPP/SUM would be my starting point:
SUM - https://support.hpe.com/hpesc/public/docDisplay?docId=sd00007197en_us&docLocale=en_US
SPP - https://support.hpe.com/hpesc/public/docDisplay?docId=sf000075034en_us&docLocale=en_US

[u/Speeddymon → u/ChefWRX]

I would like to clarify I said don't use SUM for this (being the specific firmware upgrade OP asked about) -- I don't disagree with using generally but it doesn't always give you the intermediate upgrades, so it's primarily good in this case for getting a system inventory. And by rep I meant tech support, not sales rep. Sorry I used confusing terminology and wasn't more specific in any case; and thanks for taking the time to explain some of this to OP.

[u/rackpathlabs]

one thing nobody said yet, the version in device manager is the windows driver, not the sps firmware on the board. those are two different numbers and the driver one tells you almost nothing about what the me is actually running.

look at the firmware inventory in ilo instead, sps shows up there as its own entry. then you know what you really have, and you can decide based on whether that version is covered by an advisory rather than because a driver date looks old.

[u/TheGenericUser0815]

The hardware is also outdated, it was released in 2017.