this post was submitted on 17 Nov 2023
12 points (92.9% liked)

Framework Laptop Community

2515 readers
75 users here now

Related links:

Related communities:

founded 3 years ago
MODERATORS
[email protected]
[email protected]
12
Buying a Framework without Intel Boot Guard or AMD PSB enabled? (aussie.zone)
submitted 9 months ago* (last edited 9 months ago) by [email protected] to c/[email protected]
2 comments fedilink hide all child comments
 

Is there any progress regarding buying a Framework without Intel Boot Guard or AMD PSB enabled?

There is a dead discussion on the framework community form where framework talked about

exploring the idea of shipping a version of the mainboard with boot guard disabled for those who want to run their own firmware

back in 2021 but nothing since.

https://community.frame.work/t/intel-boot-guard-coreboot/1178

top 2 comments
sorted by: hot top controversial new old
[โ€“] Jumuta 2 points 9 months ago (1 children)

how does boot guard work? can you not just flash new firmware using a ch341a programmer?

[โ€“] [email protected] 5 points 9 months ago* (last edited 9 months ago)

Intel Boot Guard stores the public signing key in OTP fuses inside the PCH. Meaning that you need the private key to sign new BIOS firmware. This "feature" has existed since Haswell 4th gen processors.

This is a simplified description of how it works because it's still beyond my full understanding.

More info here: https://github.com/corna/me_cleaner/wiki/Intel-Boot-Guard