[Guide] How to flash a modded AMI UEFI BIOS

hi
i am trying Modding my bios with afuwin ami
but i keep getting this error
18 - error: secure flash rom verify fail
my mother board is msi B760m-p
i searched about Solution in your website i did found this but i didn’t understand what is

MEAnalyzer
what i should do with it ?
thanks

Nothing to do with mods flash…
platomav/MEAnalyzer: Intel Engine & Graphics Firmware Analysis Tool (github.com)

Bios mod on modern motherboards only flashed with Intel FPT tool (Should be v16)
or an SPI programmer.
Dump your bios with the tool, (bios_region must allow writing, MSI usually allow it) mod it and flash it back.
If no experience on this area and not familiar with the tools, do not procede, i will not teach this to anyone as it’s no easy task and time consuming.
VERY high risk of getting a braked board.

You should wait for others users pov.

EDIT: Use the search box on the forum…your task and your time, not mine.

1 Like

sorry if i bother you can i get the link of FPT v16 ?

@almajed
Since you are obviously searching for a tool to get a modded MSI BIOS properly flashed, I have moved your request (and the reply given by MeatWar) into this already existing and much better matching thread.
Don’t forget to read its start post before sending new posts.
Good luck!

@MeatWar

1 Like

since i looking for fpt (CSME System Tools v16) i found the last 2 version of it and i would like to upload it for others if they looking for it later
thanks for helping @MeatWar https://mega.nz/file/tddyRJYA#USa3sj1qh2g2c-RNlbP-XzLHGR8WUOboUF1Ewu6oMgQ

Those tools are present in the forum, in the correct section and thread related to ME tools.
I just told you to search for it… all users will find it in the:

Intel Converged Security Management Engine
Drivers, Firmware and Tools
CSME 16+

Lates v16.0 is the CSME System Tools v16.0 r8
Lates v16.1 is the CSME System Tools v16.1 r0

2 Likes

7 posts were split to a new topic: [Problem] Change of the MB’s Serial Number

Need some help with this Asus TUF H370 Pro Gaming Bios, i have modded this Bios but can´t Flash it.

First of all here is the Original Bios File:

TUF-H370-PRO-GAMING-ASUS-3101.zip (8.5 MB)

Preparations:
Cleared all Keys in Secure Boot and set System to “Other OS” Secure Boot: shows deactivated

First i looked for locked Bios with USB Stick and Shell.EFI with GRUB but it´s unlocked as standard
(Bios LOCK 0xBC9 = 0x00 i set it to 0x00)
(FPRR 0x5BE = 0x00 standard)
(BIOS GUARD 0x1CC = 0x00 standard)

Then I have tried to Flash it in several ways:

This Asus Mainboard have no Bios Flashback so it´s more complicated

  • Flash from UEFI Bios itself: Says Can´t Flash this Bios File

  • Next i tried AFUDOS this says 22 - Error Problem allocating memory.

  • FTP (DOS) & FTPW says this Error 167 Protected Range Registers are set by Bios, preventing Flash access.
    Same if I first make a Bios dump of original Bios with “ftp -d backup.bin”, when i wan´t to reflash this with “ftp -bios -f backup.bin” Same Error 167

  • Then I tried Asus AI Suite and replaced the .CAP File (as in Guide), it flashed the Bios 3101 but without Modifications.

  • Last i tried Flashrom 1.2 with programmer “internal”
    Here are the Errors from Flashrom:

Bios Region SMM Protection is enabled
SPI Configuration is locked down
FREG0: Flash Descriptor Region (0x00000000 - 0x00000fff) is read only
FREG2: Management Engine Region (0x00003000 - 0x002fffff) is read only
Enabling Hardware Sequencing because some important OPCODE is locked
Found programmer Flash Chip “Opaque Flash Chip”
Aborted

Here is my MEInfo64 Output:
Meinfo.zip (1.5 KB)

Who can help me to get this working or have some Guides for me that i haven´t found at this time ?

1 Like

Hello.
I am modifying the bios of the original motherboard. :slight_smile:
It works fine, but there is one problem.
Non-existent hardware appears in Device Manager.
It is a device called GDIX1001, and this board is a board that has converted the hardware originally used in a tablet PC into a mini PC. (The model of the board is unknown, but it says U35FL002)
I modified the ACPITable in bios to try to remove this.
The fix is using ACPICA and UEFITool and flashing with AFUWIN (I tried this, but an error occurred: 18 - error secure flash rom verify fail. So I dumped the entire BIOS, modified it with UEFITool, and flashed it with a ROM programmer.)

The result is like this:

  1. Something like a recovery tab and ROM Image update denied has appeared in the BIOS.
  2. Does not automatically boot into Windows. The BIOS menu appears first. Internal drive (EMMC) is gone. (= This problem was resolved by reformatting the eMMC and reinstalling the OS.) Other than that, USB or EFI Shell is possible in the BIOS. (Menu appears)
  3. Booting from BIOS is a bit slow.

How can this problem be solved? :0 (Or is it not editable?)

@Kang-Jinsu
Welcome to the Win-RAID Forum!
Since you obviously had problems to get a modded AMI UEFI BIOS properly flashed, I have moved your post into this already existing thread. The Guide is within the first post.
By the way - the “device” named GDIX1001 is an ACPI one. You may find a driver [>here<].(ACPI\GDIX1001 download driver for Windows 10 x64 | DriverPack).
Good luck!
Dieter (alias Fernando)

1 Like

At least you can get rid of the following.

Just delete ReFlash dxe.

1 Like

Thank you for solving it. (Booting is still slow, but it doesn’t matter) :slight_smile:

I have a modern motherboard ASUS B760M-A D4 without flashback usb port.
I can’t use flashrom’s -p internal since it can’t detect any eeprom.
So wonder what my options are?

Is it Intel FPT tool or ch341? Looks like the board have 2 bios chips so which one should i flash?
Where can I find Intel FPT tool for alderlake/raptorlake mb’s? Do not seem to find any download links.

Where?

Can be mistaken but i can only identify a GigaDevice SPI ic

This model should use Intel ME v16, usually the tool reads/dumps, writing is another issue… to read and understand the operations:

Intel (Converged Security) Management Engine: Drivers, Firmware and Tools (16+) - Special Topics / Intel Management Engine - Win-Raid Forum (level1techs.com)

[Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing - Special Topics / Intel Management Engine - Win-Raid Forum (level1techs.com)

[GUIDE] [UPDATE] Usage of AMI’s AptioV UEFI Editor + FPT Flash Method - BIOS/UEFI Modding / BIOS Modding Guides and Problems - Win-Raid Forum (level1techs.com)

1 Like

Within the start post of this thread you can find 2 other options (AFUWIN and AISuite methods).

You obviously have missed >this< thread.
P.S.: MeatWare was quicker than me. I am sorry for haven’t seen his reply earlier.

2 Likes

Thx for info,
I was wrong on BIOS. Have read through the posts you linked to.

Do I understand correctly that I need the exact CSME version to work on BIOS region with fptw? So if MB has 16.1.30.2307 I need to find this version of CSME to use fptw tool to modify bios region? Or will any 16.x version work when only modifying bios? Only part I really do not get.

16.1.30.2307 = Major.Minor.Hotfix.Build

The tool needs to be the Major.Minor. version
This is the preferable general rule for all SKU’s.

Careful with ME tools, they don’t care for wrong choice of cmds/syntax given, they write what is told too… correct or incorrect data.
Do several backups of the full SPI and separate regions, for safe keeping and store MB original data.

EDIT:
Macronix - MX25L12872F (mxic.com.tw)

1 Like

Hello again,
had a look at the chip which you marked and it’s a MXIC 25li2872f. Also found a soic8 chip abit above to the right of ram slot and it’s a MXIC 25v5126f.

Don’t know which of them is for BIOS :slight_smile:

Wanted to make sure that I would be able to flashback using ch341 if software fails. Seems Asprogrammer has support for 25LI2873F which should work with 25LI2872F

I’m running an ASRock Z790 Nova and I’m trying to flash a modified bios to it. I’ve tried following the instructions for using Flashrom but I get an error of “no eeprom/flash detected” whenever I run it. Am I doing something wrong?

Maybe Flashrom cant identify (due to Outdated DB) such new mb and her SPI IC…
Have you at least identified it yourself?

EDIT: Dont know, maybe an CH341 SPI programmer or the SPI_TPM header, your mb is too new but you don’t seem to have enough knowledge of these things… do you?
image