


Also, the Descriptor region is not affected by these actions, so it is still not possible to access the complete flash memory even when the ME region is unlocked.įor the different possibilities please see the documentation in our repository. There are a few ways to enable full access to the ME region, but they are not user friendly at all in general. flashrom detects that, warns the user and disables write access for safety reasons in that case. This means that flashrom which runs on the host PC can not access the ME firmware region of the flash at all in this configuration. Writes by the host could interfere with the code running on the ME. Intel recommends to set the descriptor region read-only and to forbid reads and writes to the ME region by the host CPU. These restrictions are enforced by the chipset's SPI controller which is the main interface for flashrom to access the flash chip(s) attached to the chipset. The first one ( Descriptor region) contains configuration data which contains something similar to a partition table and access rights for the different devices that can access the flash (host CPU, ME, GbE controller). The address space is separated into regions (similar to partitions on a harddisk). The firmware of the ME usually shares the flash memory with the firmware of the host PC (BIOS/UEFI/coreboot).
