Lenovo ThinkPad X200s Intel ME Driver
Purism Librem 13 v1 coreboot neutered Intel ME 30mins test. Purism. This sections relates to disabling and removing the ME (Intel Management Engine) on GM This was originally done on the ThinkPad X, and later adapted for the . Note: the (BIOS region) from lenovobios is in a compressed. Regular X laptops will use either a SOIC-8 or SOIC connection . to ommit the ME firmware updates while still using the Intel firmware.
|Supported systems:||Windows XP (32/64-bit), Windows Vista, Windows 7, Windows 8.1, Windows 10|
|Price:||Free* [*Free Registration Required]|
Lenovo ThinkPad X200s Intel ME Driver
Read the flash twice, and compare shasum the files to be sure. Save a copy of the dump onto external media.
Due to interference it had to be read about 10 times, 2 of which were corrupted. The easiest way to handle the non-coreboot blobs that need to be present on flash is by using flashrom 1. First of all make a backup with your external programmer and verify it be a Lenovo ThinkPad X200s Intel ME image. To update the coreboot image later on do the following: This make it possible to use the flash region the ME used for bios region, allowing for much larger payloads useful for Linux payloads.
Libreboot – GM45 chipsets: remove the ME (manageability engine)
This requires the Lenovo ThinkPad X200s Intel ME a modified descriptor and moving things around a bit. It first needs some padding since as of writing flashrom still needs image that match the whole flash size even if only a region is flashed. First extract it from the vendor image: Either generate a layout using ifdtool to only flash the bios region, or use flashrom 1.
Those chips will be detected several times, forcing you to use the -c parameter for selecting a flash chip. One easy and permanent way to avoid this is to remove those definitions that are redundant to you this method is inappropriate for upstream. When you write-protect the flash chip, re-flashing is no longer possible unless you use dedicated external equipment, which also means disassembling the laptop.
The same equipment can also be used to remove the write-protection later on, if you choose to do so. Change them all to 0x0, then re-compile ich9gen. The next time you boot, the flash chip will be read-only in software hardware re-flashing will still work, which you will need for re-flashing the chip after write-protecting it, to clear the write protection or to flash yet another ROM image with write protection set in the descriptor. Lenovo ThinkPad X200s Intel ME
Flashrom will tell you that you can still forcefully re-flash, using -p internal: For external flashing guides, refer to. ICH9 deblob utility [link] This is no longer strictly necessary. This was the tool originally used to disable the ME on X later adapted Lenovo ThinkPad X200s Intel ME other systems that use the GM45 chipset. Keep this and the factory.
Intel Management Engine
The first 4KiB contains the descriptor data region for your system, and the next 8KiB contains the gbe region config data for your gigabit NIC. These 2 regions could actually be separate files, but they are joined into 1 file in this case.
The newly built ich9gen executable will be able to re-create the very same 12KiB file from scratch, based on the C structs, this time without the need for a factory. You should now have a libreboot. It also sets all regions read-write. The idea is that Lenovo ThinkPad X200s Intel ME this will remove all of those restrictions.
Simply run with factory.
Insert that into a factory. Keep the original factory.
Modify the assembly code inside. They are useful for background information. Disabling descriptor security also disables the ethernet according to sgsit. This one gives some detail and covers QM67 which is what the X uses: You drag a complete image into in and the utility decomposes the various components, allowing Lenovo ThinkPad X200s Intel ME to set soft straps.
This tool is proprietary, for Windows only, but was used to deblob the X End justified means, and the utility is no longer needed since the ich9deblob utility documented on this page can now be used to create deblobbed descriptors. The data is the gbe region is fully documented in this public datasheet: