[Offer] ASUS ROG STRIX B760-I BIOS MOD - Unlocked Hidden Settings


ASUS ROG STRIX B760-I Guide

Intro and warning

Warning: Flashing this modified UEFI firmware may permanently brick your motherboard. Proceed only if you fully understand the risks! I am not responsible for any damage, bricked hardware, or other issues caused by this firmware. Flash at your own risk.

This is a modified UEFI firmware for the ASUS ROG STRIX B760-I mini-ITX motherboard (firmware version 1805 with Intel’s 0x12B microcode) to enable undervolting and overclocking. This modification unlocks the ability to set the Global Core SVID Voltage to adaptive or offset mode.

All settings remain at their defaults, so you’ll need to manually toggle the necessary locks before making any changes. The main reason I modified this firmware was to unhide CFG Lock, which improves power management in macOS with OpenCore for Hackintosh setups.

Important Notes

  • Use only on ASUS ROG STRIX B760-I running firmware version 1805 or lower.
  • This motherboard was not designed for overclocking, and some of these hidden features may have been disabled by ASUS for good reason. While this firmware unlocks these features, their functionality and stability are not guaranteed. So far I haven’t noticed any issues though.
  • Advanced features present on higher-end ASUS Z-series motherboards are still missing from this modification. Features such as Extreme Tweaker, AI Features, and Silicon Prediction (SP Score) were not present at all in the firmware for the B760-I motherboard, so of course they can’t be unhidden.
  • Using UEFI-Editor, I modified the access level of hidden features from 9 to 1, which unlocked several menus and additional options dependent on the ones listed below. These changes also revealed many advanced settings, including options that may not have been designed for end-user access.

Unhidden Features

Unlocked Drop-Down Menu Options

Global Core SVID Voltage

  • New Options: Adaptive and Offset

SVID Behavior

  • New Option: Trained

Intel Default Setting

  • New Option: Extreme

New Menus

CPU Lock Configuration
Advanced → CPU Configuration → Power Management Control → View/Configure CPU Lock Options

  • Includes options to enable or disable CFG Lock and Overclocking Lock

OverClocking Feature
Advanced → OverClocking Performance Menu

  • Adds extensive overclocking capabilities, including frequency and voltage tweaking.

RC ACPI Settings
Advanced → RC ACPI Settings

  • Unlocks power state-related options, including “Low Power S0 Idle Capability.”

Security Configuration
Advanced → PCH Configuration → Security Configuration

  • Unlocks additional security-related settings tied to platform controllers.

Instructions

Requirements

Introduction

To flash the firmware, we first need to unlock the BIOS lock. Since this is hidden in the stock firmware, we cannot simply toggle the setting through the BIOS interface. Instead, we’ll need to modify the values via NVRAM. There are several guides on WinRaid that use modified grub, setup_var, and RU.EFI tools to achieve this. However, all three of these applications encountered errors due to write protection.

The only tool that worked for me was AMI SCE / WinSCE. The others produced the following errors:

RU.EFI 5.34.0426-BETA:

Error: Write variable failed (0x0000001A)

Setup_var.efi (0.3.0):

Error: Failed to write variable  
Error: Failed to set content of variable CpuSetup (SECURITY_VIOLATION)

grub-mod-setup_var.efi (2.06):

Error: Unable to set variable using EFI (Error: 0x000000000000008a)

Preparation

  1. Boot into BIOS by pressing F2 at boot, press F5 to restore factory defaults, then press F10 to save and reset.

  2. Boot into BIOS again with F2. Enable the following two options (Use F9 to Search):

    • Setup → Tool → Publish HII Resources
    • Setup → Advanced → UEFI Variables Protection → Password protection of Runtime Variables
  1. Press F10 to save and boot into Windows 10 or 11.

Downloading AMI SCE / SCE WIN

  1. Navigate to AMISCE/WINSCE (SCEHUB) and download the latest release. Launch DL_SCEWIN.exe, which will open a command prompt window. SCEWIN should begin downloading automatically. Be aware that it might take some time for any activity to appear; in my case, the prompt remained black for an extended period before progressing.
  1. Optional: Once the process is complete, copy the contents from .\SCEWIN\5.05.01.0002 to C:\TOOLS.

Download Flash Programming Tool (FPTW64)

  1. Download FPTW64 from Intel Management Engine: Drivers, Firmware and Tools for ME 16+ and extract the archive.

  2. Optional: Copy the FPTW64.exe from CSME System Tools v16.1 r0\Flash Programming Tool\WIN64 to C:\Tools.

Create a backup

  1. Right click start, open PowerShell as Administrator and navigate to the folder where FPTW64.exe is located.
  1. Run the following command to check if FPTW64 is working: .\FPTW64.exe -I

If this is was successful you can now create a backup by dumping the BIOS, I recommend doing this at least two to four times and comparing the resulting file hashes to verify the integrity of the dump.

Run the following command to create the first backup:

.\FPTW64.exe -BIOS -D B760-I_1805_DUMP1.BIN

After the first dump is complete, repeat the process with a new file name for the second dump:

.\FPTW64.exe -BIOS -D B760-I_1805_DUMP2.BIN

Next, compare the two hashes to ensure the files are identical and verify that both are 32,768 KB (32 MB) in size. If the files meet these conditions, store them in a secure location. This will allow you to recover the firmware using a hardware flasher if anything goes wrong.

To compare the hashes, use the following command:

Get-FileHash .\Filename.bin

We can try to flash them back but you will see the BIOS lock prevents this. Try:

.\FPTW64.exe -BIOS -F B760-I_1805_DUMP1.BIN

Extract the NVRAM variables

Next, open PowerShell with administrative privileges and navigate to the folder where SCEWIN_x64.exe is located (in my case, it’s the same folder: C:\Tools).

Then, run the command:

.\Export.bat

A new file named nvram.txt should appear in the folder. Open it in a text editor, then open a new, empty file.

Copy the first few lines from nvram.txt into the new file.

Next, use CTRL + F to search for BIOS lock. Once located, copy the block of code containing the BIOS lock to the new file and move the asterisk from [Enabled] to [Disabled]

Run .\Import.bat through PowerShell.

Reboot your PC, then open PowerShell as Administrator once more.

Navigate back to the folder containing FPTWIN64, and copy the modified firmware (downloaded from the bottom of this page) into the folder.

Flash the modified firmware using the following command (it should succeed now):

.\FPTW64.exe -BIOS -F B760-I_1805_MOD.BIN

Reboot your PC again, and you should see a screen prompting you to press F1 to enter BIOS and F5 to reset to factory defaults.

Don’t worry if the first boot takes longer than usual. This is normal after flashing new firmware. Once the process is complete, the GMAN should appear, and the hidden features will be accessible when you enter the UEFI BIOS.

Recovery Methods

The firmware I provided was thoroughly tested and should not have caused your device to brick. However, but it might still be usefull to know how to recover.

You might have panicked midway through the flashing process after realizing you were installing firmware created by a stranger on the internet and pulled the power plug.

Alternatively, you might have liked a challenge and attempted to recreate the modified firmware by following the guide below but did something wrong.

Another possibility is that you tried flashing firmware intended for a different board, such as the Z790I, in an effort to add new features, only to find your device doesn’t do anything anymore (I’d be interested to know about such experiments).

In any of these scenarios, your motherboard should still have been recoverable using ASUS CrashFree BIOS 3. If this feature didn’t resolve the issue, you could have restored your backup using a hardware flasher.

The Easy Way: ASUS CrashFree BIOS 3

According to the official user manual, this motherboard includes ASUS CrashFree BIOS 3, which may allow recovery if something goes wrong and the system becomes unbootable.

  1. Download the official ASUS UEFI capsule file for your motherboard.
  2. Rename the file to ASUS.CAP.
  3. Copy it to the root directory of a FAT32-formatted USB drive.
  4. Insert the USB drive into your motherboard and boot.

Note: I haven’t personally tested this feature, so results may vary.

Advanced Recovery: Flashing the SPI Chip

If the device is completely unresponsive, or you’re using this guide for a different motherboard where the BIOS Lock can’t be disabled through software, you’ll need a hardware flasher like the CH341A. These devices are very cheap, but the process might not be so easy for someone inexperienced.

On this motherboard, the SPI chip is a GigaDevice 25B256EYIG WSON-8. WSON-8 chips don’t have traditional pins, their solder pads are located underneath. Fortunately, on this board, the pads extend slightly beyond the chip’s edge, making it possible to solder tiny wires to it without having to remove the chip. You could also use 8x6 Pogo Pin Chip Programmer.

Pogo

The BIOS chip is located between the screw for securing the NVMe drive and the Intel B760 chipset.
On my board, the chip was a GigaDevice 25B256EYIG, but I’ve also seen images online of this specific board using a Winbond chip. While the specific chip on your board may vary, there should be a 32MB WSON-8 chip there.

Download

Changelog

Edit 1 - 18/01/24: Revised several sections for clarity.
Edit 2 - 18/01/24: Included a screenshot of the boot logo.
Edit 3 - 18/01/24: Added Changelog.
Edit 4 - 23/01/24: Added recovery methods.
Edit 5 - 24/01/24: Added an example image to hardware recovery.

3 Likes

Other ways to flash the firmware

IMPORTANT! Before you flash anything to your board make sure Intel Boot Guard isn’t enabled, if it is and you flash a customized firmware your device won’t boot! On the ASUS B760-I ROG STRIX firmware 1805 this isn’t the case.

Refer to this guide: Determining whether the Intel Boot Guard is enabled

For most ASUS motherboards, the steps in the first post should work. However, if your motherboard doesn’t have the options Publish HII Resources and Password Protection of Runtime Variables, or if you’re following this guide to modify the firmware for a different brand or model, you could try turning the BIOS lock off with setup_var or ru.efi first.

You can find plenty online, for example: [Guide] HowTo Fix Intel FPT Error 280 or 368

If that doesn’t work you’ll need to tinker with the hardware to unlock the lock. The easiest way would probably be to make a backup of the full chip through FPTwin64 as described above, modifying the BIOS Lock in the dump and flashing it back with a hardware flasher.

Another way is to unlock the full SPI, this is by using the pin-mod method, a technique officially described in Intel’s chipset documentation. This method is intended for motherboard service and requires connecting specific pins on your board’s audio chip.

ASUS ROG STRIX B760-I "Pinmod"

If your motherboard has a different audio chip, you’ll need to look up its datasheet online, as the pin locations can vary. Locate the pins named DVDD and SDATA_OUT on your audio chip. Refer to the chip’s datasheet or pinout table for this information. As the ASUS ROG STRIX B760-I uses the ALC1220P chip you can refer to the ALC1220 spec sheet.

Use a small wire, clip, or another conductive tool to temporarily connect (or “short”) the DVDD and SDATA_OUT pins. You’ll need to do this during system startup, specifically when the system reaches the PWROK state (right after pressing the power button).

Flash Your BIOS

Once the pins are successfully shorted, the motherboard’s full flash memory address range will be unlocked until the next reboot. This allows you to flash a modified BIOS with certain locks, like the BIOS Lock, disabled.

Be extremely careful when shorting the pins. These chips are very small and delicate. Too much pressure from a needle or clip could damage the pins or cause an accidental short circuit elsewhere. Double-check the pin locations and your setup before powering on the system.

Creating a modified firmware

#ToDo

For now please refer to [TOOL] UEFI Editor to unhide menu’s.

Refer to this GitHub ticket to set defaults and unhide drop-down menu options (Like Global SVID Core voltage): Failsafe and Optimal are being ignored

A more detailed guide on setting defaults can be found here: [Guide] Enabling hidden BIOS settings on Gigabyte Z690 mainboards

@denisuu Thanks for sharing your modified BIOS and writing the very detailed guide so that others may benefit.

1 Like

@chinobino @denisuu
HELLO. I’m struggling for unlock bios FOR rz09-0484 laptop.

BUT error occured. because of error:168 FPRR IN FPTW64.EXE.

Can you advise this problem?

Thanks!

I had it all documented in my OneNote for personal reference, so I figured I might as well share how to flash it. I’ve also documented the BIOS modification process, but it still needs some rewriting before I can post it.

1 Like

Before attempting to modify your firmware, it’s important to determin whether Intel Boot Guard is enabled, If Intel Boot Guard is enabled, flashing a modified firmware will brick your laptop, so proceed with caution.

If Boot Guard is not enabled, you can try disabling the BIOS lock:

  1. Using UEFI-Shell:

    • Boot into UEFI-Shell.
    • Use the tool setup_var to set the correct offset and turn the BIOS lock off.
  2. If UEFI-Shell doesn’t work, try RU.EFI.

  3. If neither method works, you can try using SCEWIN. Note, however, that if your laptop is not an ASUS model, you may not be able to enable certain options like Publish HII Resources or Password Protection of Runtime Variables, which could prevent this method from working. Keep an eye on the GitHub repo, maybe a solution will pop-up there.

  4. As a last resort, check if your laptop has a SOP8 chip. If it does, you can:

    • Dump the firmware using a hardware flasher like the CH341A.
    • Turn off the BIOS lock in the firmware.
    • Write the modified firmware back to the chip.
  5. Alternatively, you can gain temporary full read/write access by performing the pin mod, an official Debug method by Intel which unlocks access to all flash regions.

Good luck!

1 Like

@denisuu
THANKS!

All of the errors described in the text above have occurred (RU, GRUBSHELL)
So I want to use SCEWIN but on the basic AMI APTIO bios screen I didn’t find any features
If it was similar, it was just SECUREBOOT option and key deletion.
HII RESOURCESPASSWORD was nowhere to be found, but in this case, all you have to do is use CH341A to dump it, modify it, and flash it, right?

You’re probably out of luck if you’re relying on software alone. I updated my reply above to include the pin-method. If your laptop uses a Realtek audio chip, check which one it is, then find the spec sheet for that specific chip and identify which pins to bridge. For example, on my board, it’s an ALC1220. That said, I wouldn’t recommend this approach. It involves removing the chip’s shielding, and the pins are extremely tiny.

If you’re planning to go the CH341A route, I suggest practicing with some old hardware first, like an old PC, router, or modem you don’t use.

Either way, you’ll need to do some research on your own. This topic isn’t about my specific motherboard, and it’s not even close. I don’t mean to be rude, but I can’t spend more time explaining this.

1 Like

Thanks for your dedication.
I ll find the answer.

1 Like

I updated the first post to include recovery options and the second post to add more BIOS flash options for anyone referencing this guide.

A Reddit user suggested that the BIOS from an ASUS ROG STRIX Z790-I might work, so I attempted a cross-flash. However, the system didn’t POST and only displayed a red LED. Asus CrashFree BIOS 3 didn’t help in this case.

I was able to recover the board by flashing back the dump I made using FPTwin64 with a CH341a hardware flasher.

Mods: If you notice anything inaccurate or think more details are needed on a topic, let me know.

1 Like

I upload a second version as per request via Reddit.

Changelog

Revealed the following options

BCLK Frequency (Numeric) under Ai Tweaker by unsuppressing: 0x686CA, 0x68694, and 0x68670, and modifying QuestionId 0x2CBB to Access Level 01.

BCLK Aware Adaptive Voltage by unsuppressing: 0x69EC8 and 0x69EAE.

Advanced → BCLK Configuration by unsuppressing: 0x735D1.
This exposes the following additional settings:

  • BCLK TSC HW Fixup
  • Discrete CPU BCLK Frequency
  • Discrete Peg/DMI CLK Frequency

Note: The option BCLK Aware Adaptive Voltage appears twice with conflicting defaults, I don’t know which one takes precedence. They reference different offsets, so their behavior might differ too?

The drop-down menu under Ai Tweaker also has a third option Auto which the one under Overclocking Performance Menu doesn’t have.

1 Like