Good job! Thanks for sharing this!
I have recently done some research on a Z690 BIOS: some of which I have posted here: [Guide] Enabling hidden BIOS settings on Gigabyte Z690 mainboards - BIOS/UEFI Modding / BIOS Modding Guides and Problems - Win-Raid Forum (level1techs.com).
Going on of what I have learned from my own research, I do wonder about some of your findings.
- About UEFI variables write protection at runtime
I found out I’m not the only one most Z690 and Z790 Motherboards have this problem which is NVRAM write protection which makes Scewin and other bios tools not working
I also found this nasty problem on the Z690 board. This is what makes most of the old guides obsolete. These guides advise to boot into an UEFI shell and then use something like setup_var or RU.exe/RU.efi to change those variables.
However, consider this: AMISCE is specifically intended to work around this and it can change write protected UEFI variables at runtime (meaning post boot, in Windows). See below.
- BIOS Lock
This BIOS option sets the Lock Enable (LE) bit in the BIOS Control (BIOS_SPI_BC) register. It determines whether the BIOS region is write protected on the SPI flash chip.It has, afaik, nothing to do with UEFI variables (NVRAM). In fact,it might, but: my own testing showed, that AMISCE worked fine when BIOS lock was enabled. It might be BIOS/board dependent. - Password protection of runtime variables
This is an interesting one and it is missing in my Z690 BIOS. The description of this option seems to be:
Allows you to control the NVRAM Runtime Variable Protection through System Admin Password. Configuration options: [Disable] [Enable]
If this is true, then AMISCE should still work with this option enabled, as it’s manual states:
Unlocks protected variable update with administrator password.
- Publish HII Resources
This one seems to be another new option that the z690 BIOS does not have. However, without access to the HII database, AMISCE cannot work.
Perhaps if you can find the time, you could help, clear a few of these questions up (as I don’t have a Z790 board to test any of this).
- Did you test all these BIOS options, that you change to make it work, individually, to test if all of them are needed, to make SCE work? I wonder, if enabling only Publish HII Resources would do the trick and I wonder if BIOS Lock is needed at all.
- Have you tried to set a BIOS password, and supply that password to AMISCE? See docs:
