# Anybody with linux could run intelmetool for bootguard? **URL:** \ **Category:** Framework Laptop 13\ **Created:** [September 19, 2021, 9:50pm UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383 "2021-09-19T21:50:11Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![intptr](https://avatars.discourse-cdn.com/v4/letter/i/57b2e6/32.png) [@intptr](https://community.frame.work/u/intptr)\ **Post date:** [September 19, 2021, 9:50pm UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/1 "2021-09-19T21:50:11Z")
Hi, can anybody run “intelmetool -b” on framework laptop ? I’m curious about bootguard status on the machine. ---
**Author:** ![Jacob\_Padgett](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/jacob_padgett/32/1553_2.png) [@Jacob\_Padgett](https://community.frame.work/u/Jacob_Padgett)\ **Post date:** [September 20, 2021, 1:51am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/2 "2021-09-20T01:51:06Z")
For me, this is all it outputs: ``` Can't find ME PCI device Can't find ME PCI device ``` I may have done something wrong though, I don’t know much about Intel ME or this tool. I’m on Fedora 34 and had to disable Secure Boot for the tool to work at all. ---
**Author:** ![Ethan\_Spoelstra](https://avatars.discourse-cdn.com/v4/letter/e/e79b87/32.png) [@Ethan\_Spoelstra](https://community.frame.work/u/Ethan_Spoelstra)\ **Post date:** [September 20, 2021, 4:10am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/3 "2021-09-20T04:10:36Z")
I’m not sure if the ME will show up if you chose a device without vPro, or it might not be visible/accessible in the firmware by default. ---
**Author:** ![Jacob\_Padgett](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/jacob_padgett/32/1553_2.png) [@Jacob\_Padgett](https://community.frame.work/u/Jacob_Padgett)\ **Post date:** [September 20, 2021, 5:30am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/4 "2021-09-20T05:30:53Z")
Oh, then I should clarify: I have the i7-1165g7, and therefore no vPro. ---
**Author:** ![intptr](https://avatars.discourse-cdn.com/v4/letter/i/57b2e6/32.png) [@intptr](https://community.frame.work/u/intptr)\ **Post date:** [September 20, 2021, 10:29am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/5 "2021-09-20T10:29:32Z")
yes - sorry i should clarify - it would be nice to get the status on i7-1185g7 “-b” switch checks the “boot guard” status i’m curious about porting CoreBoot to this machines - but to do so - bootguard must be disabled ---
**Author:** ![intptr](https://avatars.discourse-cdn.com/v4/letter/i/57b2e6/32.png) [@intptr](https://community.frame.work/u/intptr)\ **Post date:** [September 20, 2021, 10:50am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/6 "2021-09-20T10:50:55Z")
[Jacob\_Padgett](http://community.frame.work/u/Jacob_Padgett) could you check the bootguard status this way? : install msr-tools fedora: dnf install msr-tools debian/ububntu: sudo apt install msr-tools then run: sudo modprobe msr sudo rdmsr 0x13a possible statuses will be something like that ``` 0x0 == no bootguard 0x10000000 == verified 0x20000000 == measured 0x30000000 == verified + measured ``` ---
**Author:** ![Ethan\_Spoelstra](https://avatars.discourse-cdn.com/v4/letter/e/e79b87/32.png) [@Ethan\_Spoelstra](https://community.frame.work/u/Ethan_Spoelstra)\ **Post date:** [September 21, 2021, 2:20am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/7 "2021-09-21T02:20:34Z")
They are hoping to work on Coreboot at some point. > [@\[RESPONDED\] Coreboot on the Framework Laptop](http://community.frame.work/t/free-the-ec-and-coreboot-only/791/5): > > Yep, open source firmware is well aligned to our mission of building products that are better for people and the planet. Our EC firmware is based on chromium-ec, and we will be releasing source. As @Kieran_Levin noted, we’re also exploring coreboot. We’re currently focused on getting the Framework Laptop out into the world in a lower-risk path that uses an off the shelf proprietary BIOS, but we’re looking forward to replacing that with an open alternative in the future. ---
**Author:** ![intptr](https://avatars.discourse-cdn.com/v4/letter/i/57b2e6/32.png) [@intptr](https://community.frame.work/u/intptr)\ **Post date:** [September 21, 2021, 12:22pm UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/8 "2021-09-21T12:22:20Z")
i know they will, but if laptop is "unlocked’ from factory - opensource people (me included) could start right away 😉 ---
**Author:** ![Olivia](https://avatars.discourse-cdn.com/v4/letter/o/b9e5f3/32.png) [@Olivia](https://community.frame.work/u/Olivia)\ **Post date:** [February 24, 2022, 11:32pm UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/9 "2022-02-24T23:32:08Z")
When I receive the laptop I will definitely try this out and tell you. I hope it is unlocked ---
**Author:** ![Chris2](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/chris2/32/983_2.png) [@Chris2](https://community.frame.work/u/Chris2)\ **Post date:** [February 24, 2022, 11:42pm UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/10 "2022-02-24T23:42:49Z")
@intptr ```auto $ cat /proc/cpuinfo | grep "model name" | head -1 model name : 11th Gen Intel(R) Core(TM) i7-1185G7 @ 3.00GHz $ sudo rdmsr 0x13a 30000007d ``` ---
**Author:** ![Olivia](https://avatars.discourse-cdn.com/v4/letter/o/b9e5f3/32.png) [@Olivia](https://community.frame.work/u/Olivia)\ **Post date:** [February 25, 2022, 2:50am UTC](https://community.frame.work/t/anybody-with-linux-could-run-intelmetool-for-bootguard/7383/11 "2022-02-25T02:50:01Z")
Damn what does boot guard verified and measured do. And is it possible to remove it