Any use of ME-Cleaner on i9 14th gen CPUs

General Privacy & Security
1

Hey all, hope you’re having a great day.

I was wondering if it’s still possible to remove most of the IME on the newest i9 CPUs using ME-cleaner, and if not, are there any other tools?

Also, I remember Librem laptops fully disable it after booting using some exploit that was found, does that still exist on the aforementioned CPUs?

1 Like
2

No, the most that can be achieved on recent Intel generations is disabling the HAP bit.

Yes.

3

Ah, that’s unfortunate. Do you perhaps know after what generation of i7 does me-cleaner become useless? I use i7 9700k

1 Like
4

No, but it looks like Comet Lake works with a custom BIOS:

5

Most vendor enable a option to disable intel Me via BIOS setting heci.

1 Like
6

Any good tutorials on how I can disable it by setting the hap bit?

1 Like
7

On BIOS setting it is via HECI Bit than HAP Bit. I not sure if HAP Bit work on newer i9 .

1 Like
8

Not that I am aware of.

9

Or, more accurately, setting the HAP bit. Setting the HAP bit asks the IME to sleep once the boot is complete.

2 Likes