search

corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.49k stars 278 forks source link

Does not work on XPS 9550 #34

Open perillamint opened 7 years ago

perillamint commented 7 years ago

Laptop/Motherboard: Dell XPS 9550 (i7-6700HQ) BIOS: OEM BIOS 1.2.21 Issue: Does not boot at all.

I dumped XPS BIOS using bus pirate. I need to do some hack as described in #33, and it successfully removed tables.

After flashing, it does not boot at all. It shuts itself after few seconds. No screen output.

I tried 0ac4b4.

Hardware notes: This motherboard has two flash. One is 1MB one with some device descriptor things and other thing is 16MB which stores BIOS.

corna commented 7 years ago

Can you run ifdtool -d on the dump of the 1MB flash chip?

perillamint commented 7 years ago

@corna It says

File UT2_backup.rom is 1048576 bytes
No Flash Descriptor found in this image
corna commented 7 years ago

And what about ifdtool -d on the 16MB one?

corna commented 7 years ago

Oh right, I already have that output ;) The 16MB one seems to contain BIOS, ME and GbE, I don't know the purpose of the 1MB one.

5685C4A059D5 commented 7 years ago

Have you checked with MEInfo to see if boot guard is enabled?

perillamint commented 7 years ago

@5685C4A059D5 Not yet. Can you describe how can I do that?

perillamint commented 7 years ago

@5685C4A059D5 I searched web but it seems I can't run that.

My system isn't working at all. It does not boot(it seems it cannot load BIOS) so I cannot run ME System Tools on my laptop

5685C4A059D5 commented 7 years ago

Flash the original BIOS back then run the tool.

perillamint commented 7 years ago

@5685C4A059D5 I can't do that now because my cheap soic8 is broken while I trying In-circuit programming.

I need to buy clip to continue this. (few weeks shipping time required -- I'll buy promona clip through Digi-key rather then el-cheapo made in china clip)

corna commented 7 years ago

I personally hate SOIC8 clips, they always break and you don't know if it's actually flashing or not. If you want something more reliable you can buy SMD clips (like this one): they take a bit longer to be connected, but they're much more reliable.

Let me know when you can flash the original BIOS back, then we can resume the analysis.

ghost commented 7 years ago

It is extremely likely BootGuard is the cause; Dell advertises the 9550 (and now 9560, as well as their enterprise brothers the Precision 5510/5520) as being Intel BootGuard enabled. This device has a 2.0 version TPM as well (though Dell provides a switch to switch between 1.2 and 2.0 as well as 1.2-only TPM firmware images).

Edit: Confirmed, see output from my 9550.

Intel(R) ME code versions:

BIOS Version                                 1.2.21
MEBx Version                                 11.0.0.0008
GbE Version                                  0.8
Vendor ID                                    8086
PCH Version                                  31
FW Version                                   11.0.18.1002 H
LMS Version                                  Not Available
MEI Driver Version                           11.5.0.1019
Wireless Hardware Version                    Not Available
Wireless Driver Version                      Not Available

FW Capabilities                              0x31111940

        Intel(R) Capability Licensing Service - PRESENT/ENABLED
        Protect Audio Video Path - PRESENT/ENABLED
        Intel(R) Dynamic Application Loader - PRESENT/ENABLED
        Intel(R) Platform Trust Technology - PRESENT/DISABLED

Intel(R) AMT State                           Disabled
TLS                                          Disabled
Last ME reset reason                         Global system reset
Local FWUpdate                               Enabled
BIOS Config Lock                             Enabled
GbE Config Lock                              Enabled
Host Read Access to ME                       Disabled
Host Write Access to ME                      Disabled
Host Read Access to EC                       Disabled
Host Write Access to EC                      Disabled
SPI Flash ID 1                               EF4018
SPI Flash ID 2                               Unknown
BIOS boot State                              Post Boot
OEM ID                                       -
Capability Licensing Service                 Enabled
OEM Tag                                      0x00000000
Slot 1 Board Manufacturer                    0x00001028
Slot 2 System Assembler                      0x00000000
Slot 3 Reserved                              0x00000000
M3 Autotest                                  Enabled
C-link Status                                Enabled
Independent Firmware Recovery                Disabled
EPID Group ID                                0xFA0
LSPCON Ports                                 None
5K Ports                                     None
OEM Public Key Hash FPF                      234EB9DE1AC240CC1376378CA22D245372D665B40F93D148141A66E9B76293EF
OEM Public Key Hash ME                       234EB9DE1AC240CC1376378CA22D245372D665B40F93D148141A66E9B76293EF
ACM SVN FPF                                  0x2
KM SVN FPF                                   0x0
BSMM SVN FPF                                 0x0
GuC Encryption Key FPF                       0000000000000000000000000000000000000000000000000000000000000000
GuC Encryption Key ME                        0000000000000000000000000000000000000000000000000000000000000000

                                             FPF                      ME
                                             ---                      --
Force Boot Guard ACM                         Enabled                  Enabled
Protect BIOS Environment                     Enabled                  Enabled
CPU Debugging                                Enabled                  Enabled
BSP Initialization                           Enabled                  Enabled
Measured Boot                                Enabled                  Enabled
Verified Boot                                Enabled                  Enabled
Key Manifest ID                              0xF                      0xF
Enforcement Policy                           0x3                      0x3
PTT                                          Enabled                  Enabled
PTT Lockout Override Counter                 0x0
EK Revoke State                              Not Revoked
PTT RTC Clear Detection FPF                  0x0
vincent-legoll commented 7 years ago

@Hikari-chin : How does one get that output ?

ghost commented 7 years ago

@vincent-legoll Run MEinfo from the Intel ME System Tools package available here in CMD, PowerShell, etc. If you're not running Windows, you'll need to use MEAnalyzer or something.

libcg commented 7 years ago

Does that mean it's not possible to disable ME on these laptop? I'd like to give it a shot on my Precision 5510, which is roughly equivalent to the XPS 9550.

5685C4A059D5 commented 7 years ago

So far nothing can be done for machines with BootGuard enabled.

corna commented 7 years ago

Like @5685C4A059D5 said, if Boot Guard is set in Verified Boot - Immediate shutdown (FVE or FVME) we can do nothing. It seems that some manufacturers didn't enable Boot Guard properly (as exposed by Alexander Ermolov - Safeguarding rootkits: Intel BootGuard - Zeronights 2016, slide 54), so it might be still possible to use me_cleaner on those platforms.

ghost commented 7 years ago

It may be possible to disable (but not remove) the ME using the HAP bit - me_cleaner has this ability via the -s option now. It may be that doing this does not trigger the BootGuard immediate shutdown, but it has not been tested. If it does trigger BootGuard, recovery would require opening the device and externally programming the flash chips on the motherboard.

I do not have the tools for this, but if someone does and would be willing to test, it would be nice to know if the HAP bit allows us a disabled ME even with BootGuard.

corna commented 7 years ago

I'm currently working on a Lenovo Thinkpad X1 Carbon (Broadwell) with BG set in Verified Boot - Immediate Shutdown, and it seems to work with the -s option, but not with the -S. Intel ME, when BG is enabled, seems to require more modules or partitions, I'm trying to determine which ones are really needed.

al3xtjames commented 6 years ago

Can someone post a picture of the correct SOIC-8 chip on the XPS 15 9550/9560 motherboard? Currently don't have a SOIC clip (broke mine and need to order another), but I can test once I get one again.

Edit: Clarified the laptop model.

perillamint commented 6 years ago

There is 3 chips, at first time, I missed one chip among this. (or more, if I missed another one). One chip is buried under plastic film. They're located near audio jack I remember.

Sorry for no photo. I'm not in my home now.

On 18 November 2017 12:30:25 GMT+09:00, Alex James notifications@github.com wrote:

Can someone post a picture of the correct SOIC-8 chip on the motherboard? Currently don't have a SOIC clip (broke mine and need to order another), but I can test once I get one again.

-- You are receiving this because you authored the thread. Reply to this email directly or view it on GitHub: https://github.com/corna/me_cleaner/issues/34#issuecomment-345415121

-- Sent from my Android device with K-9 Mail. Please excuse my brevity.

shawnanastasio commented 6 years ago

@perillamint Do you recall where the location of the third chip is? I'm currently disassembling one and can only find the two under the adhesive strip near the headphone jack. Is it on the reverse side of the motherboard?

al3xtjames commented 6 years ago

Unfortunately for those with the XPS 15 9560 (and apparently the XPS 13 9360), the main 16 MB SOIC-8 package (containing ME firmware + UEFI) has been replaced with a 32 MB WSON-8 package.

perillamint commented 6 years ago

@shawnanastasio One near eDP connector. If I remember correctly, you have to remove eDP connector holding bracket to access that chip. img_20170609_212639

perillamint commented 6 years ago

Note that I suspect powering SOIC chip through SOIC clip damaged my previous board. Please be careful.

shawnanastasio commented 6 years ago

@perillamint Thanks much. It turns out that I was mistaken and the motherboard was in fact from an XPS 15 9650 and had a WSON-8 chip like @al3xtjames described.

oguzhantopcu commented 6 years ago

did anyone tried -s option with 9550 and succeeded? since I do not have these soic things and the knowledge about how to use them I do not want to take risk for now.

goodwin commented 6 years ago

Is there somebody who has full SPI dump from 9550, made with hardware programmer? I have my Intel ME corrupted, and need another dump from some working machine. If somebody can - send me to good.win.alexs at gmail

al3xtjames commented 6 years ago

If it's just the ME region that's bad, you can extract the ME region from the latest BIOS update (use 7-Zip/binwalk/whatever + PFSExtractor.

goodwin commented 6 years ago

Yes, official intel's Flash Image Tools rejects to open my ME dump bcz of corrupted ME data. So i can't cleanup my own ME dump to flash it back. And my ME stuck on initializing phase - so it's not functioning properly. And that happened after installing official Dell bios update. So now i just don't know how i can fix my ME. Only hope if i can find somewhere any other dump with ME in working condition to use for cleanup and reflash.

al3xtjames commented 6 years ago

Well, here is the ME firmware (extracted from BIOS 1.6.1 updater for the 9550):

section_2_11.8.50.3426.data.zip

If FITC doesn't let you flash, you may want to try the BIOS recovery procedure, which is documented here (for the 9560 at least, I believe it is similar for the 9550). I think this should rewrite the ME firmware, but I am not sure.

goodwin commented 6 years ago

No, it will not rewrite ME. I did try dozen times. Same as "fptw -greset" and resetting RTC (with clear ME on rtc reset option enabled). on win-raid forum there is guide how to clean own dumped ME from existing "data" to leave only clean state of me. but it doesn't work on my image - due to existing issues with me data inside of image. Will try to work with that image from updater - let see what i can do. In worst case i have current dump.

RomSand commented 6 years ago

I got xps 9550 that stuck on Dell logo, strange thing it turns on right away then I plug the power, when I disconnected the battery it goes to diagnostic mode there it passes everything except battery but after reboot it still freezes on Dell logo, I'm thinking to rewrite SPI bios but can't find bump or backup anywhere.

al3xtjames commented 6 years ago

What option did you use for me_cleaner? If you only set HAP bit in PCH strap 10 (-s option), you should be able to unset it and reflash with a HW flasher. If you used a different option, you may be able to replace the modified ME region (from a dump made with a HW flasher) with the original ME region (extracted from Dell firmware updates).

RomSand commented 6 years ago

I need backup of the bios , I don't think mine is good any more...

ghost commented 6 years ago

Has anyone attempted this on the 9550 with just the HAP bit set? If so, does it work without issues?

lorantsz commented 6 years ago

I managed to make it work for a 9550 with -s-O however I did the mistake of trying to update the BIOS trough the .EXE file from the dell website and it obviously bricked my device.

I'm suspecting that the .exe is writing some parts on all 3 of the bios chips (16M, 4MB, 1MB)

Now the laptop fires up with blank screen and gives a CPU Fail code (1 white 2 Amber) error code.

Would anyone have handy a dump of these 3 chips? [MB is : LA-C361P Rev2.0 (A01)]

ghost commented 5 years ago

@lorantsz Can you confirm how you dumped and flashed the 9550 ME firmware, as well as the exact me_cleaner command that worked for you?