corna / me_cleaner

Tool for partial deblobbing of Intel ME/TXE firmware images
GNU General Public License v3.0
4.51k stars 279 forks source link

Question about flashrom... #394

Open kyle-nothing opened 1 year ago

kyle-nothing commented 1 year ago

I want to flash me_cleaner internally and I have OEM firmware. (I use Arch btw) Could I use flashrom to disable the ME?

Hardware: CPU: i5-6500 Manufacturer: MEDION Product Name: Erazer i72000/C057

BIOS Information:
        Vendor: American Megatrends Inc.
        Version: 110H4W0X.111
        Release Date: 12/14/2017
        Address: 0xF0000
        Runtime Size: 64 kB
        ROM Size: 5 MB
        Characteristics:
                ISA is supported
                PCI is supported
                PNP is supported
                BIOS is upgradeable
                BIOS shadowing is allowed
                ESCD support is available
                Boot from CD is supported
                Selectable boot is supported
                BIOS ROM is socketed
                EDD is supported
                5.25"/1.2 MB floppy services are supported (int 13h)
                3.5"/720 kB floppy services are supported (int 13h)
                3.5"/2.88 MB floppy services are supported (int 13h)
                Print screen service is supported (int 5h)
                8042 keyboard services are supported (int 9h)
                Serial services are supported (int 14h)
                Printer services are supported (int 17h)
                CGA/mono video services are supported (int 10h)
                ACPI is supported
                USB legacy is supported
                AGP is supported
                BIOS boot specification is supported
                Targeted content distribution is supported
                UEFI is supported
        BIOS Revision: 5.11

I also plan on flashing coreboot onto it, but I currently use the OEM default. I get this error from flashrom: Enabling flash write... SPI Configuration is locked down. FREG0: Flash Descriptor region (0x00000000-0x00000fff) is read-only. FREG2: Management Engine region (0x00001000-0x002fefff) is locked. Not all flash regions are freely accessible by flashrom. This is most likely due to an active ME. Please see https://flashrom.org/ME for details.

I am still learning (aka a noob), so sorry if this is dumb