Great! You can try to go to PCH Configuration → Security Configuration → and diasble Bios Lock
And then go to PCH-FW Configuration → Firmware Update Configuration → Enable ME Image Re-Flash → go back → ME Mode set it at Temporarily Disable(if visible, in the very bottom of the menu). Save and exit, and try to use intel FPT from here: Intel CSME: Drivers, Firmware and Tools for ME 2-15 - #2 by Fernando (pick CSME System Tools v11, and grab intel FPT under Flash Programmer Tool folder).
To flash the bios itself, here are the commands:
- -f -me and enter
- -f -bios and enter
- -greset and enter, and let it reboot automatically.
Do not restart before completing intel FPT, or else bios might be locked again which you might need to disable Intel ME with those 2 options under PCH-FW Configuration.
It is a ready to use file, with rebar support. Why would i sent the file for comparission only 
?
BTW, due to space constratint, i decided to not include any CFL/CFL-R mCode to the bios, BUT i did the patches for coffeelake to run… so all you gotta do later is to add the mCode (and fix the FIT table) of the corresponding cpuid of cfl/clf-r you have. ME is still enabled, so only retail non xeon CPUs that will work.
The bios is also CH341A-able, in case you want the flash descriptors to be unlocked (i already unlock all descriptors in the sent bios).