this post was submitted on 17 Nov 2023
14 points (93.8% liked)

Framework Laptop Community

3155 readers
1 users here now

Related links:

Related communities:

founded 3 years ago
MODERATORS
uthredii@lemmy.ml
uthredii@programming.dev
14
Buying a Framework without Intel Boot Guard or AMD PSB enabled? (aussie.zone)
submitted 2 years ago* (last edited 2 years ago) by ky56@aussie.zone to c/framework@lemmy.ml
2 comments fedilink hide all child comments
 

Is there any progress regarding buying a Framework without Intel Boot Guard or AMD PSB enabled?

There is a dead discussion on the framework community form where framework talked about

exploring the idea of shipping a version of the mainboard with boot guard disabled for those who want to run their own firmware

back in 2021 but nothing since.

https://community.frame.work/t/intel-boot-guard-coreboot/1178

top 2 comments
sorted by: hot top controversial new old
[โ€“] Jumuta@sh.itjust.works 2 points 2 years ago (1 children)

how does boot guard work? can you not just flash new firmware using a ch341a programmer?

[โ€“] ky56@aussie.zone 5 points 2 years ago* (last edited 2 years ago)

Intel Boot Guard stores the public signing key in OTP fuses inside the PCH. Meaning that you need the private key to sign new BIOS firmware. This "feature" has existed since Haswell 4th gen processors.

This is a simplified description of how it works because it's still beyond my full understanding.

More info here: https://github.com/corna/me_cleaner/wiki/Intel-Boot-Guard