Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Unknown Image" for Asus P6T SE #105

Closed
ghost opened this issue Nov 29, 2017 · 4 comments
Closed

"Unknown Image" for Asus P6T SE #105

ghost opened this issue Nov 29, 2017 · 4 comments

Comments

@ghost
Copy link

ghost commented Nov 29, 2017

This is really not all that surprising given the outputs I've received, but this platform does seem to have Intel ME as would any Nehalem platform:

$ ./intelmetool -dm
Bad news, you have a `82801JIR (ICH10R) LPC Interface Controller` so you have ME hardware on board and you can't control or disable it, continuing...

MEI not hidden on PCI, checking if visible
MEI device not found

Similar results came from ifdtool:

$ ./ifdtool -d p6t_se.rom
File p6t_se.rom is 2097152 bytes
No Flash Descriptor found in this image

Finally, this result from me_cleaner itself should be unsurprising:

$ ./me_cleaner.py p6t_se.rom
Unknown image

It is worth noting this output from file since it seems to indicate some relevant information as to why these procedures may be failing:

$ file p6t_se.rom
p6t_se.rom: DOS executable (block device driver)

Based on the output of these commands, I am led to conclude that my platform does indeed contain Intel ME, but that the available tools cannot remove (much less access) its contents.

I am hopeful this is simply a case of the BIOS image simply needing conversion into another format. I extracted the BIOS originally by physically removing the chip and reading its contents using a CH341A programmer, done several times to ensure that the image was properly extracted. Interestingly, these results are all the same when run against the latest BIOS image available from ASUS's website (https://www.asus.com/Motherboards/P6T_SE/HelpDesk_BIOS/). With any luck, I would like to completely remove the ME firmware as the information from (https://www.win-raid.com/t2443f39-Remove-ME-Ignition-firmware-completely-amp-Panther-Point-PCH-observations.html#msg33301) suggests is possible on Nehalem platforms.

Any helpful input or suggestions on where to proceed from here would be warmly appreciated, and of course I am happy to contribute my findings back to the community.

@skochinsky
Copy link

skochinsky commented Nov 29, 2017

The chipset possibly contains ME*, but the linked download contains only BIOS (legacy 16-bit AMIBIOS, pre-UEFI). You can try dumping the flash chip to double-check but it seems there is no ME firmware present in the flash, so there is nothing to clean.

* it seems ICH10R is positioned as a "consumer" variant and is not intended for AMT usage, so quite possibly ME is even removed or fused off completely, but there is a small possibility that the ME boot ROM still runs to perform the very basic initialization but stops because of missing ME firmware.

@platomav
Copy link

X58 ICH does not contain a ME co-processor and thus not ME firmware

@ghost
Copy link
Author

ghost commented Nov 30, 2017

@skochinsky @platomav Thank you for your informative responses. I did do a cursory comparison of the hexdumps from both my ROM file extracted from flash and the ROM file downloaded from ASUS, which have some differences but are mostly the same. Searching for any actual ME firmware would require further independent research, and I imagine that would start with determining what offset(s) to look at and what sort of byte patterns to look for.

For the time being, I will take your assessment that this platform lacks ME firmware as valid and close this issue, but I would like to cross-reference it with regards to intelmetool since that would mean that its output is misleading.

Should there be some outstanding reason to re-open this issue, whomever has the power should feel free to do so.

@corna
Copy link
Owner

corna commented Nov 30, 2017

The output of ifdtool is the key here:

 $ ./ifdtool -d p6t_se.rom
 File p6t_se.rom is 2097152 bytes
 No Flash Descriptor found in this image

On ICH10 (and before) it is possible to disable completely Intel ME by using a descriptor-less image, an image where the is BIOS mapped to the whole flash, no regions at all.

Yes, the output of intelmetool is misleading.

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants