ASRock Z370/Z390 Taichi (and some others, actively modding!) Firmware with Intel Management Engine Disabled, new method

[Caring1]

Resurrecting an old thread (sorry! ) to ask a question about people's experience with disabling ME. I'm on z390 with BIOS v4.30. Got IME disabled - showing as version 0.0.0.0.
And now Windows 10 does not shut down. It hangs on Shutting Down screen with no events in event log indicating any issues. I uninstalled IME from Device Manager and Apps.

Any suggestions?

Start your own thread asking for help, this thread isn't relevant to your issue.

 

[UnsortedReality954]

I respectfully disagree. This issue is a direct result of disabling IME using the firmware mentioned in this thread. The reason for posting is two-fold: 1. A person who goes through with the above method may find themselves in a similar situation. 2. A person who posted the method has the greatest chance of answering it.

 

[R-T-B]

It appears he has a new board variant. I do believe his problem is real, but as I use the same board and don't share the issue, I can only assume it's some change beyond my control.

As I no longer offer non-commercial support, my first stop would be to check cmos to make sure we aren't using any ME-features. Things like trusted execution, tpm features, trusted enclaves, none of these features work with the ME disabled and all of them can cause issues. If those are all off, you have done all you can for the moment.

Start your own thread asking for help, this thread isn't relevant to your issue.

I thought same at first, but he's done his diagnostic homework with me and proved it via PM. It does appear to be my mod in his instance.

 

[R-T-B]

I can no longer edit the OP, but I've been informed that the links in it are http, which my server no longer supports. Since these links are still useful to some people who like to get the ME cleaned out, could a mod kindly switch my links to https?

I don't know the section mods, so I don't know who to ping. Maybe @Kursah or someone? Lol get me pointed somewhere, I'm clueless.

 

[techyphantom]

@R-T-B
Hi, I'm trying to build a desktop PC with IME removed and I came across this thread, which seems to use the latest parts that would allow me to have a desktop with IME removed/disabled.
The only other way I've found to have a modern desktop pc with IME removed is to use Talos OpenPower CPU, but that's way too expensive.
I had a couple questions if you don't mind:
1. Is the Asrock Z390 Taichi still the newest motherboard that I can disable/remove IME on?
2. Can I put it an Intel i9-9900K into the above motherboard and still disable/remove IME?
3. Will there be any problems running linux or putting in an AMD 6800 XT GPU?
4. I'm trying to build the PC from the ground up, is there anything else I should do or look into before I begin buying all the parts?

 

[R-T-B]

Hi,

Sorry for the late reply. Yes, the z390 is the latest I personally did research on. I personally am employed elsewhere now and no longer doing ME research so a bit out of date on the latest, but I do still keep the binaries for the z390/z370 taichi going.

 

[techyphantom]

Ok thank you I appreciate the reply.
I just had 1 last question, will an i9-9900K work or do I need a specific 9th gen intel cpu in order to disable ime?

 

[R-T-B]

Ok thank you I appreciate the reply.
I just had 1 last question, will an i9-9900K work or do I need a specific 9th gen intel cpu in order to disable ime?

i9 9900k is fine. Good cpu, I'd advise it if going with that board, they are a good pairing and can still do most anything.

 

[techyphantom]

I'm building the PC on pcpartpicker and I got this message when using the Z390 Taichi and 9900K:
The ASRock Z390 Taichi ATX LGA1151 Motherboard supports the Intel Core i9-9900K 3.6 GHz 8-Core Processor with BIOS version P4.00. If the motherboard is using an older BIOS version, upgrading the BIOS will be necessary to support the CPU.

-- will this be a problem?

 

[mclaren85]

Apart from increasing security/privacy, what extend does the editing of firmware affect the overall performance?

 

[Count von Schwalbe]

I'm building the PC on pcpartpicker and I got this message when using the Z390 Taichi and 9900K:
The ASRock Z390 Taichi ATX LGA1151 Motherboard supports the Intel Core i9-9900K 3.6 GHz 8-Core Processor with BIOS version P4.00. If the motherboard is using an older BIOS version, upgrading the BIOS will be necessary to support the CPU.

-- will this be a problem?

No, you can flash a new BIOS if you don't already have P4.00 or higher installed already. Really, being as old as it is, it should have at least that one pre-installed. Especially if you are purchasing new.

 

[techyphantom]

So the basic steps would be to first flash stock bios 4.30
then flash Z39TC430_NOME.zip?

 

[R-T-B]

I'm building the PC on pcpartpicker and I got this message when using the Z390 Taichi and 9900K:
The ASRock Z390 Taichi ATX LGA1151 Motherboard supports the Intel Core i9-9900K 3.6 GHz 8-Core Processor with BIOS version P4.00. If the motherboard is using an older BIOS version, upgrading the BIOS will be necessary to support the CPU.

-- will this be a problem?

It should ship with that bios on any build you find still floating around.

So the basic steps would be to first flash stock bios 4.30
then flash Z39TC430_NOME.zip?

Yes. Follow instructions in zipfile.

Apart from increasing security/privacy, what extend does the editing of firmware affect the overall performance?

There should be no performance difference. Some ME functions may be unavailable (fTPM etc) but that's expected.

 

[trailerparkjob]

I followed all the steps but I can't find a "PCH-FW Configuration" option in the BIOS settings or anywhere to disable or enable Intel ME.
It does however say "ME Firmware Version 0.0.0.0" at the top left of this image.
Did I do it right or did it not work?

 

[R-T-B]

I followed all the steps but I can't find a "PCH-FW Configuration" option in the BIOS settings or anywhere to disable or enable Intel ME.
It does however say "ME Firmware Version 0.0.0.0" at the top left of this image.
Did I do it right or did it not work?

That step is somewhat outdated. If it says 0.0.0.0 it is disabled and you are good to go.

 

[trailerparkjob]

ok thanks my guy

 

[thread]

Now I have one Asrock Z390pro4 motherboard，I want to try G3900T on it，but I don't know how to disable ME？

 

[the54thvoid]

@R-T-B edit time unlocked