This message was posted on behalf of Intel Corporation
I would recommend updating the BIOS using the recovery method, downgrade the current version to 024 and then with a BIOS recovery jump to 026. If by any chance there was a corrupted file, the BIOS recovery should address this. See here for the instructions BIOS Recovery Instructions for Intel® Compute Stick.
OK, I downloaded the BIOS recovery files SC0024.BIO and SC0026.BIO, and used the BIOS Recovery process on both files, in succession:
- Immediately after applying the BIOS Recovery process, I noted that the BIOS function key menu (eg, F2, F7, F8, F10) appeared, but after I applied my usual BIOS settings, it disappeared. To make a long story short, once I enabled "Secure Boot", the BIOS function key menu disappeared (but the function keys continued to work). I found that, in the "Secure Boot Configuration" section, I had previously selected "Install Intel Platform Key". Once I selected "Force Secure Boot Defaults", the BIOS function key menu appeared on subsequent restarts. The question is, why does installing the "Intel Platform Key" disable the BIOS function key menu (but not the function keys!)
- The problem with "Scan Device" in "Bluetooth Configuration" remains: "Scan Device" in v0026 does nothing if there is not already a Bluetooth device listed. However, in using the "Power On menu", I found that the newer BIOSes (probably starting with v0019) will allow Bluetooth keyboard pairing as part of that "Power On" menu, and that is sufficient to get access to (and navigate within) the BIOS screens. So, this is an effective workaround (at least for me) for a real bug introduced in v0026.
Anything you can point me to, to find out about the "Intel Platform Key" mechanism (and whether I should use it), is welcome. I believe in hardening access to all my computers, using Secure Boot and whatever other security mechanisms are available. I use BitLocker encryption on all my Windows 10 systems except the STK1AW32SC (which does not have a TPM).
Hey Dean, thanks for the good information.
I'll see if I can reproduce your issues here and let you know.
in the meantime, we've posted BIOS 0029: Download BIOS Update [SCCHTAX5.86A] can you give that a try and let us know?
For the TPM info, you can start here: Intel® Trusted Platform Module User Guide
From the v0029 https://downloadmirror.intel.com/26317/eng/SC_0029_ReleaseNotes.pdf :
Added android option.
Update TCG to TCG10.
Added item for PTT enable/disable.
Added BT scan device solution.
Note the last item. This fixes the Bluetooth "Device Scan" I reported in this thread.
Note the penultimate item: Enabling PTT ( Trusted Platform Module Information ) and then booting Windows 10 reveals a TPM !!!
I've upgraded the STK1AW32SC to Windows 10 x64 Professional and enabled BitLocker (using the "TPM") on the SSD !!!
However, I would still like an answer to "Anything you can point me to, to find out about the "Intel Platform Key" mechanism (and whether I should use it), is welcome." The "Intel Platform Key" is not the same as the TPM (which I have some familiarity with). I read the document you referenced, and did not find a reference to the "Intel Platform Key".