Disabling Intel ME on Boot Guard computers
The Intel Management Engine (ME) is a "ring -3" system in all modern Intel CPUs. Due to security concerns, there have been efforts to disable ME as much as possible, such as me_cleaner . Intel Boot Guard is a technology for cryptographically verifying system firmware, including the BIOS and ME firmware. Boot Guard has two primary modes of operation - Measured Boot and Verified Boot. In Verified…