[coreboot] Removing Intel ME from the X230 coreboot
pluspluscharlotte at gmail.com
Mon Nov 7 21:13:23 CET 2016
Thanks a lot for your detailed report. I would be happy to contribute
to your tests with my Ivy Bridge Thinkpad W520.
I have been using the ME from
It is 1.5MB, which leaves me about 7MB for the payload:
With the following layout:
1 00000000:00000fff fd
2 00180000:007fffff bios
3 00003000:0017ffff me
4 00001000:00002fff gbe
The system did not poweroff after 30 min, but I would like to strip
down everything I can out of the intel ME. Your approach is
interesting. What is the minimal size you can presently get?
Using your python script on my 1.5 me.bin, I get FFs after 0x906C0
Can I adjust the IFD accordingly to scrape this extra space, or will I
run into problems as Tramell said the ME wants to write to its own
Have you been able to test Igor suggestions to further trim the intel ME?
On 11/6/16, Federico Amedeo Izzo <federico.izzo42 at gmail.com> wrote:
> On 11/06/2016 10:11 AM, Charlotte Plusplus wrote:
>> Did you release any of your work to remove the ME for a X230?
>> I am interested in attempting that on a W520. On
>> you mention you left ROMP, BUP, KERNEL, POLICY and FTCS. Any update on
>> that? Is it the minimal set??
>> I assume you made a script that takes a ME firmware, reads it
>> partition, then dd some parts of it to 0xFF. Can I please get a copy??
> Lately I worked with Nicola Corna on disabling the intel ME, following
> the results of Trammell Hudson.
> We also made a python script that removes all the partitions but FTPR
> and the corresponding entry in the FPT table, the results boots fine on
> a Sandy Bridge X220 & X220t but leads to a brick on Nehalem X201.
> You can find more details here along with the script
> coreboot mailing list: coreboot at coreboot.org
More information about the coreboot