4 ms·
From my private conversations with MSI 2 months ago: > Our MB products offer M-FLASH feature, and our Intel 700 BIOS ROM files support Secure Flash so they can
by dawidpotocki 4y ago
From my private conversations with MSI 2 months ago:
> Our MB products offer M-FLASH feature, and our Intel 700 BIOS ROM files support Secure Flash so they cannot be modified or altered by tools.
> With Secure Flash support the BIOS ROM files are safer from malicious attempts.
My understanding is that they started signing their firmware with 700-series Intel boards (idk about AMD) in some way. The "Secure Flash" they are talking about seems to be something from AMI which is an implementation of NIST SP 800-147[1].
> Please release this so that I can have Coreboot.
Code is not necessary to add their boards to coreboot. E.g. MSI PRO Z690-A has coreboot support[2]. Also, looking at that code would cause legal issues for the project.
1: https://csrc.nist.gov/publications/detail/sp/800-147/final https://csrc.nist.gov/publications/detail/sp/800-147/final
2: https://docs.dasharo.com/variants/msi_z690/overview/ https://docs.dasharo.com/variants/msi_z690/overview/
- AshamedCaptain 4y agoI dont think anything has changed. I have a z790 msi board in front of me and I can still write to the spi flash with linux's builtin mtd driver. Even if secure boot and kernel integrity is enabled, the 2nd mtd device (which is the one with the firmware) remains writable... Not that I'm complaining. I think its a good thing.
- dawidpotocki 4y agoI am aware that the SPI is unlocked, but MSI claimed that this is somehow supposed to protect against flashing unauthorised firmware, even with SPI unlocked. I don't really trust them though. Are you flashing official firmware or modded?
- AshamedCaptain 4y agoI don't know of any modded firmware for Z790 yet. I did change some of the settings storage and it continued booting fine. If it'll refuse to boot when I change certain areas, I don't know. I would not like to discover it, though.