corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.51k stars 279 forks source link

Dell t5810 haswell me cleaner and modded bios #352

Open frankr2994 opened 3 years ago

frankr2994 commented 3 years ago

Looking for an answer I cannot find. I have a ch134a and a test clip. I have pulled 3 dumps from my bios chip to check them against themselves to verify the file. I want to mod my bios using amibcb to unlock settings. However I read boot guard may be an issue flashing a modded bios and that me cleaner may help but now I'm reading on here that me cleaner may trigger boot guard. Rather than brick my desktop and ultimately have to flash back an original bios can someone point me in the right direction?

czeej commented 3 years ago

I wish I had something to help with. Make sure you explore possibility of a dual bios.

When you flash try to remove as many ME stacks as you can. and work backwards to get a good boot. takes time but may yield better results. Keep your backup. and again just be well researched. I've seen some dell implementation with a dual bios on one SPI flash.

As for boot guard, you'll need to test what and how much you can mod before it triggers. So far I have ran ME cleaner on a T440 with boot guard and it still boots. It may just be checking the OEM bios not ME itself. But it may use some modules or components of the ME to initialize boot guard. Thus i can't remove all modules but the kernel can be removed without any boot issues. More research will be needed,

If you can boot now with a modded bios. But no ME cleaner I am quite certain you can remove some ME components and not trigger a brick on Haswell. If you can mod the bios that is boot guarded there is some play in boot guard. It's only verifying parts not the whole thing in bring up.