Software ME disable and HAP bit in BIOS setup

[miczyg1]

The problem you're addressing (if any)
Proprietary components are controversial, there is a need for a way to disable ME.

Describe the solution you'd like
Add an option to disable ME in the Dasharo setup.

Where is the value to a user, and who might that user be?
The community desires an option to disable ME due to privacy concerns and not only that.

Describe alternatives you've considered
None

Additional context
None

[renehoj]

I'm very interested in this feature for the Z690 board.

If it is easier in terms of development, I think most people who want this feature are fine HAP being set in the bin file, and you need to flash the ME section to enable or disable ME.

[wessel-novacustom]

Dasharo users should know the difference between Intel ME disabled state and neutralised ME. We receive quite a lot of demands if we can neutralise Intel ME (which is not possible (yet)). If anyone reads this and believe that this is an important function for the future, please comment!

[Anth0rx]

I think being able to neutralize the Intel ME backdoor is of great importance. What has to be done in order to move forward regarding this task?

[angelocar]

I'd like to comment that I think it certainly be a very important function for Dasharo to either neutralise or at least disable Intel ME. Intel ME is an obscure system that has privileged access and thus presents very grave security and privacy issues. I pay Intel for their chips, but I don't want that to come with potential backdoors into my computer!

[mkopec]

Looks like somebody discovered the HAP location for newer ME versions: corna/me_cleaner#384

[mkopec]

Did a quick test on NovaCustom NV4x with Dasharo v1.2.1, and it seems to work correctly. As expeted with TGL-U, disabling ME breaks suspend mode (prevents the CPU package from going into C-state C10, causing high power usage), but I imagine some users would accept that as a tradeoff

As for Z690, unfortunately that PR does not implement Alder Lake support.

[renehoj]

Yes, it doesn't work with the Z690 / ME v16

I tried it on the Z690 dump, and it just fails while processing the rom

[XutaxKamay]

If you're ready to make some tests and not afraid to potentially (very low risk I believe) damage your motherboard (flashing externally is crucial in case it doesn't boot), I can try to find the HAP bit for Intel ME 16 and add support to me_cleaner if you send me your BIOS, we can maybe figure this out.

We can talk about this in XMPP, IRC or anything.

[renehoj]

You can download my rom here https://drive.proton.me/urls/TJTSPK5960#8asKbIr7icmg

The external programming is a bit more difficult, I have a handheld wson test probe, but I need to completely disassemble my desktop PC to use it.

[XutaxKamay]

You can download my rom here https://drive.proton.me/urls/TJTSPK5960#8asKbIr7icmg

The external programming is a bit more difficult, I have a handheld wson test probe, but I need to completely disassemble my desktop PC to use it.

I see, sadly you would need to probably flash it around 10-20 times to be sure it's working.
It seems that Intel ME 16 has changed again their structures compared to 15 (maybe not much), I'll try to figure that out.

Though once it's done, I'll send you a new BIOS ROM to test with, the idea to find it will be mostly simple if I'm allowed to say it legally, but I tested this method on my laptop before and it worked.

The problem will be later to find the real HAP bit location, which will need probably around 7-8 flashes, depends really on the location of the HAP bit offset so it can be used with me_cleaner this way.

[XutaxKamay]

This may work, if it doesn't or it doesn't boot, let me know, I'll try something different.

https://xutaxkamay.com/bios_test_hap.rom

Using XMPP (you can use Dino or Gajim) might be easier you can contact me at admin@xutaxkamay.com

[renehoj]

I assume I only need to flash the ifd section of the rom?, not having to flash the full 32 MB image would make it a lot easier.

I can try to flash it tomorrow when I get home from work.

[XutaxKamay]

I assume I only need to flash the ifd section of the rom?, not having to flash the full 32 MB image would make it a lot easier.

I can try to flash it tomorrow when I get home from work.

Yes you only need to flash the IFD region (0x1000 bytes at address 0). :)

I believe to have found for Intel ME 16, redownload the BIOS again, and tell me if it works.

[renehoj]

I wasn't able to read the ifd with the eprom programmer I have, which makes not want to try and flash the firmware, at least not until I found some way to recover in case it fails. I'm pretty sure flipping 0x1DE has already been tested, and it results in a boot loop.

The official flashrom says the ifd is skylake and 17mhz is the only valid frequency, and the dasharo flashrom doesn't support the ch341a_spi programmer I'm using.