[Guide] Unlock Intel Flash Descriptor Read/Write Access Permissions for SPI Servicing

Hello lfb6! Thank you for responding. I am looking to achieve a clean me region or try my best to come close to disabling intel me due to my privacy concerns over it. I have the correct system tools repo and I have done a spi.bin dump and placed that into the ME anaylser to ensure i have the correct flash tool kit version, and I also make sure the PMC and FW versions are matching aswell.

So when i create an outimage.bin using the fit tool, and as i select the FW extracted version from repo + the pmc version from the repo aswell, and i press no for build immediate files, it builds the image for me called outimage.bin. Then i use that image it produces assuming it has the clean version and having settings that kind of disables intel me, it comes up with an error when i flash with the command : ā€œFWUpdLcl.exe -f outimage.binā€ I have also done what pluto said to another person on a different thread which was to remove the extra padding, and i did that in hxd to make sure they match file size, but still even with the extra padding remove no luck.

Ah OK. Then Iā€™m sorry, I donā€™t have any experience with clean MEs in the meaning of ā€˜disabledā€™- here the term ā€˜cleanā€™ stands pretty much for reconfigured / reinitialized according to plutomaniacs guide:

thank you anyways :slight_smile:

Could you help me find where in my bios dump would i need to edit to have write access to resolve this error: Error 238: The host CPU does not have write access to the target flash area.To enable write access for this operation you must modify the descriptor
settings to give host access to this region.FPT Operation Failed.
The zip has my bios, if you or anyone can help, I would greatly appreciate it.
biosbin.zip (3.8 MB)

Did you read post # 1 in this thread?

By the way - the attached file seems to have your bios region, not a complete firmware! FD, ME missing.

Hi lfb6. Firstly thank you for response. The problem im facing is i have the outimage.bin which is about 16,415KB. That contains the clean ME. I have my FD unlocked because I can do a full SPI dump. However, since my board is AMI, i cannot find a way to do a full flash. So even though my outimage.bin contains the full firmware, I always encounter the error, the cpu doesnt have write access to the region for me. So i was thinking perhaps somewhere in my biosregion.bin i can edit it with hex to give write acess to the me region, then i can use fptw to do a flash. I hope that explains my situation and i hope you can help me

@charliemorgan
Only CH341 can help you. Only hardware programmer. Believe me, please.

If you canā€™t write to the ME region because of the settings in the FD- what makes you think that this is an unlocked FD? Can you write to the FD?

For example dump the FD
fpt(w(64)) -DESC -d fd.bin

and write it back unchanged?
fpt(w(64)) -DESC -f fd.bin

No. These settings are in the flash descriptor and you have to change the flash descriptor to change them. Regarding your questions and your project thereā€™s anyway a higher probability that you might end with a brick so I concur with Michael_Code.

(Be careful with fpt, it writes what itā€™s given almost always without warning. Only warnings fpt gives I know about is size mismatch)

Hi. Does anyone know, why audio chip rules bios security?

I thought that audio.sdata_out ā†’ pch.hda_sdo connection is a quirk of some particular mobo design, but I was wrong, it is a typical design.

Intel does not even explain the meaning of hda_sdo acronym, thanks this guide for getting known that hda is high definition audio and sdo is sdata_out.

But ā€¦ why? What is the reason?

I am currently looking at HP Elitedesk 800 G2 schematic, they call the wire between audio.sdata_out and pch.hda_sdo as rsdata_out. Even more curious.

Hi, i checked all methods and pinmod seems easiest to me. I have an asus b560m plus wifi but my audio chip is ā€œALC897ā€ and after looking for datasheets. I canā€™t seem to find much about it. however, I looked at other similar realtek audio chips and they seem to have the same pinouts. Im scared of frying my chip or damaging my motherboard. Should I try it or no??