Intel ME Cleaner

Warning: This project is old and outdated. Tread carefully so you don&#x27;t brick your device. It describes partial support for older hardware, the youngest being 8 years old.<p>Current Intel ME is at Version 16, while me_cleaner claims to partially support v11.

&quot;On systems with MEv11, a bug exists in older versions (of MEv11) that allows for unsigned code execution, at a very early stage in the boot process, to the point that almost all of the ME firmware in flash can be fully replaced. The ME is also what implements Boot Guard, and the hack is possible before Boot Guard is enforced, allowing for it to be disabled.&quot;<p>&quot;Libreboot’s build system automatically downloads this older version, runs me_cleaner on it, and applies the deguard hack; this includes machine-specific ME configuration, which is added per machine by extracting it from a dump of the original flash. The resulting configuration (for the MFS partition in the ME) is then inserted into the generic ME image.&quot;<p><a href="https:&#x2F;&#x2F;libreboot.org&#x2F;docs&#x2F;install&#x2F;deguard.html" rel="nofollow">https:&#x2F;&#x2F;libreboot.org&#x2F;docs&#x2F;install&#x2F;deguard.html</a>

&gt; probably as an attempt to enforce the Intel Anti-Theft policies.<p>Do anybody have story about theft prevention or recovery of stolen hardware via these policies? Have they been useful at least once for somebody?

Yeah, I wouldn&#x27;t use this.