Dell G3 3590 SELEK_N18P_MB ME Clean Request

[poster1]

Model: Dell G3 3590
MB: SELEK_N18P_MB 18825-1

CPU: SRF6X (I5-9300H)
GPU: N18P-G0-MP-A1 (GTX 1650)
PCH: SR40B

Please help me clean ME (or move ME region from donor bios).
I've tried some versions of FIT12, but outimage.bin is still "Initialized" and has same old ME version.

If its possible, please disable BootGuard.

There are 2 .bin files in the archive; One is old bios, the other - bios from donor board (I've replaced PCH chip, i didnt power board yet).


Thanks in advance!

[SMDFlea]

Please post the laptop service tag ! .Where did you get the PCH chip from. Disabling Boot Guard in ME settings will only work if the replacement PCH has no Boot Guard. If the PCH came from a dell donor board it must not be disabled.

[poster1]

Thank You for reply.
Service Tag: J1TNKW2

PCH chip was taken from Acer Nitro board (LA-H501p). I've also attached dump from this board in the archive. (ACER pch donor.bin)
Replacement PCH had no bootguard (hash 0000-s, bootguard set to: 0 No_FVME)

[shiyab]

Thank You for reply.
Service Tag: J1TNKW2

PCH chip was taken from Acer Nitro board (LA-H501p). I've also attached dump from this board in the archive. (ACER pch donor.bin)
Replacement PCH had no bootguard (hash 0000-s, bootguard set to: 0 No_FVME)

hi try

[SMDFlea]

hi try

Your bios has bootguard enabled, he has asked for it disabling.

[poster1]

hi try

Thank You. Could you provide Flash Image Tool, which worked to do that?

Possible to disable bootguard? Your bios has bootguard enabled level 5.

[SMDFlea]

Thank You. Could you provide Flash Image Tool, which worked to do that?
Possible to disable bootguard? Your bios has bootguard enabled level 5.

I`ve been trying it but there`s a problem. To disable bootguard, set it to 0 ,and change the OEM public key from 2A 38 4C 46 A3 E4 44 23 77 D7 36 FD 5E 2B 91 E7 E8 C9 C0 17 5D 74 A3 A9 A2 46 3B B5 02 3C 9F 57 to 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , so far so good until you click on build, then there`s a warning message about the ISH . The OEM public key is needed for the ISH (touch screen) to work. If you put the key back in you can`t set the bootguard profile to 0 . Catch 22

[poster1]

Could You disable ISH and attach .bin file? Laptop has no touchsreen.

I think i have bricked versions of Intel FIT or something is wrong with my pc. It builds image but there are no changes in output.bin file 🤓

Motherboard im trying to repair has previous repair attempts. I am not sure auther GPU or CPU are funcional. That the reason why i want bootguard disabled - in case of another CPU or GPU related issue i will be able to use PCH on another board. When i'll boot it with Bootguard level5, it may brick and save that bootguard setting forever.

[shiyab]

Could You disable ISH and attach .bin file? Laptop has no touchsreen.

I think i have bricked versions of Intel FIT or something is wrong with my pc. It builds image but there are no changes in output.bin file 🤓

Motherboard im trying to repair has previous repair attempts. I am not sure auther GPU or CPU are funcional. That the reason why i want bootguard disabled - in case of another CPU or GPU related issue i will be able to use PCH on another board. When i'll boot it with Bootguard level5, it may brick and save that bootguard setting forever.

need original backup file

[poster1]

Which original backup file? I've attached original bios in post #1.

[SMDFlea]

Could You disable ISH and attach .bin file? Laptop has no touchsreen.

I think i have bricked versions of Intel FIT or something is wrong with my pc. It builds image but there are no changes in output.bin file 🤓

Motherboard im trying to repair has previous repair attempts. I am not sure auther GPU or CPU are funcional. That the reason why i want bootguard disabled - in case of another CPU or GPU related issue i will be able to use PCH on another board. When i'll boot it with Bootguard level5, it may brick and save that bootguard setting forever.

The ISH does other things besides touchscreen, so disabling that in the ME settings ,besides bootguard might lead to no boot or other sensors that rely on it to stop working. Intel Integrated Sensor Hub (ISH) info https://docs.kernel.org/hid/intel-ish-hid.html

You can disable ISH and build a clean ME bios with bootguard enabled ,and clean another bios with ISH disabled and compare the differences (there are 18 differences as far as i know). There are a lot of changes. I don`t think it would work if you copied the ISH firmware, cleaned the ME disabling bootguard and ISH, then copying the ISH firmware back in.It wouldn`t work because it wouldn`t be anabled.

You can extract the ISH firmware with a hex editor 2EE000 - 32DFFF length 40000 .To find where the ISH firmware is open the bios with MEAnalyzer and use the -dfpt switch , just type -dfpt before pressing enter.

FIT attached.

[SMDFlea]

The ISH does other things besides touchscreen, so disabling that in the ME settings ,besides bootguard might lead to no boot or other sensors that rely on it to stop working. Intel Integrated Sensor Hub (ISH) info https://docs.kernel.org/hid/intel-ish-hid.html

You can disable ISH and build a clean ME bios with bootguard enabled ,and clean another bios with ISH disabled and compare the differences (there are 18 differences as far as i know). There are a lot of changes. I don`t think it would work if you copied the ISH firmware, cleaned the ME disabling bootguard and ISH, then copying the ISH firmware back in.It wouldn`t work because it wouldn`t be anabled.

You can extract the ISH firmware with a hex editor 2EE000 - 32DFFF length 40000 .To find where the ISH firmware is open the bios with MEAnalyzer and use the -dfpt switch , just type -dfpt before pressing enter.

FIT attached.

Just to add to that, i looked at the configured ME firmware extracted from the dell bios update and both boot guard and ISH Hub are disabled

[poster1]

FIT attached.

Thanks! This one works fine and saves correct settings in outimage.bin Ill experiment on it