I finally got ME working. The correct unlock values are 1F1F.
I compared to: https://watchmysys.com/blog/wp-content/u…-Descriptor.pdf
Bios has to be set to that, ME/GB region doesn’t matter. Now its asking for a password for ME even though I never set one.
(it was admin)
So I made some bios mods.
*Added Dell Slic for W7
*Removed Computrace Module
Updated the Intel Oprom to Intel-RST_RAID-ROM_v10.1.0.1008 (highest that would boot)
Changed dell for sun logo 
HDR -
https://mega.nz/#!duRmELzR!LwlsV2wrjdlkz…seqxFgdv_v0KLgM
EXE -
https://mega.nz/#!R2ZVTChS!kTHGyqh3t2jAT…IYZB2O1jC1J2igg
Also this is a list of the modules and what they are:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
65,536 01_1.ROM
357,472 02_5.ROM
13,002 03_6.ROM
428,736 04_7.ROM
43,503 07_2.ROM - Slic Is Here
2,378 0B_27.ROM - TPM Broadcom
76,182 0C_3.ROM
155,744 0D_30.ROM
45,962 0E_15.ROM - Dell Logo 196x229
27,560 0F_20.ROM - Blue Dell Logo 392x140
1,016 10_8.ROM - Dell.com 128x14
32,768 11_23.ROM - Intel(R) Boot Agent GE v1.3.52.1.IBA GE Slot 0000 v1352.PXE 2.1 Build 089 (WfM 2.0)
30,208 12_24.ROM - Intel Corporation...Intel Corporation.Intel(R) Boot Agent PXE Base Code (PXE-2.1 build 089.1)
24,170 13_29.ROM - DSDT Table
395 14_31.ROM
5,320 17_19.ROM - Energy Star, 98x100
5,320 18_22.ROM - Energy Star, 98x100
6,788 19_18.ROM - Intel 130x98
5,612 1A_21.ROM - Intel 109x98
65,536 27_25.ROM - Bios Nvidia HWEAG96 NB9P-GLM2-A1 Version 62.94.8F.00.01
65,536 28_26.ROM - Bios Nvidia HWEAG96 NB9P-GLM3-A1 AVIA 62.94.8F.00.04
45,648 3B_41.ROM
6,347 3C_32.ROM
123,660 3D_4.ROM
64,000 3E_39.ROM - AMT MEBX
21,504 3F_33.ROM - Computrace
49,676 42_34.ROM
8,156 43_35.ROM
258,574 45_36.ROM
156 48_16.ROM - PubKey
182 49_17.ROM - Marker for Slic
66,560 4B_37.ROM - Intel(R) RAID for SATA - v8.0.0.1039
10,000 4C_38.ROM - Console Redirection Code for AMT SOL
46,920 4F_28.ROM
717,617 52_40.ROM
5,078 56_9.ROM - F12 159x25
14,922 59_10.ROM - Model Name 236x21
8,690 5A_11.ROM - Preparing Setup 196x17
8,826 5B_12.ROM - Diagnostic boot 171x17
10,730 5C_13.ROM - One time boot menu 209x17
8,010 5D_14.ROM - MEBx 156x17
Just missing a way to edit the bios menus. There are some secret thing still.
Hidden temperature/fan values
– Press FN + Shift button
– While pressing those buttons press 1, 5, 3, 2, 4
– Release FN and Shift
– Press FN + R
So ME turning on was relatively easy but turning it back off was harder. AMT/ME consumes a little bit of system ram just like a graphics card (~16MB) and more importantly it holds up the boot process if you blank it.
What I did was make 2 flash descriptors. One like when ME was disabled and one from ME enabled. To get rid of ME you blank the region with the "dead" factory image and then flash the descriptor. Pull the bios battery and MEbx is gone, boot no longer waits. To put it back you do the reverse except this time no need to reset the CMOS.
Sure, I can 00 block it in the flash descriptor but that requires HW programming to bring it back.
AMTPack.zip (3.57 KB)
I have a old m4400 motherboard floating around I could get running if you wanted any extra help testing things. I have a fairly complete lab.
Its up and running. I’ve no idea what else I could do with it. I got AMT working and turned AMT back off. Unfortunately there was no way to do it without removing the chip at least once.