search

corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.51k stars 279 forks source link

Unexpected output when using intelmetool #331

Open LinuxDragon57 opened 4 years ago

LinuxDragon57 commented 4 years ago

When running ./intelmetool -m on my computer as root (not sudo either) and with the iomem=relaxed boot paramter set in /etc/default/grub I receive the following unexpected output:

Bad news, you have a `Sunrise Point LPC Controller/eSPI Controller` so you have ME hardware on board and you can't control or disable it, continuing...

Can't find ME PCI device

As far as I can tell, there is no description of what this means. I attempted and succeeded in setting the HAP bit awhile back on my Lenovo ThinkPad T480. That too had some output that was unexpected, but the important part was that it returned that the HAP bit was set. I haven't dumped the firmware and checked since though. When I get a chance I will redump my firmware, check again, and post the output here.

privacyguy123 commented 4 years ago

Does your audio output work with the HAP bit set?

nariox commented 4 years ago

Mine does (on a T480). Was yours borked? Did you try resetting the BIOS. Somehow mine still shows AMT as enablable even after setting the HAP bit, no idea what would happen if I enabled it.

LinuxDragon57 commented 3 years ago

I have since had to return my T480 to Lenovo for a warranty repair. I've had the keyboard backlight fail 3 times on this machine - even without the HAP bit set. Upon returning the machine to me, the repair paper said something about the Firmware. I just checked, and my fears confim that Lenovo reenabled the stupid ME. I will go back through the process again of reflashing the ME. I'd also like to expirement with Coreboot on this as well. I hear that there is a project to get coreboot running on modern, Intel Boot Guard ThinkPads.

LinuxDragon57 commented 3 years ago

Does your audio output work with the HAP bit set?

Yes it did.

LinuxDragon57 commented 3 years ago

Mine does (on a T480). Was yours borked? Did you try resetting the BIOS. Somehow mine still shows AMT as enablable even after setting the HAP bit, no idea what would happen if I enabled it.

I borked mine twice when using all options except the --soft flag (I can't remember if that is -S or -s right now). I couldn't phyiscally remove Intel ME modules, but setting the HAP bit to 1 worked.