# Open Sourcing our Firmware

**URL:** <https://community.frame.work/t/open-sourcing-our-firmware/14033>\
**Category:** Blog\
**Tags:** news\
**Created:** [January 21, 2022, 5:27pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033 "2022-01-21T17:27:57Z")\
**Posts on this page:** 20\
**Page:** 3

<div class="post-metadata">

**Author:** ![Abhijeet\_Singh](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/abhijeet_singh/32/6435_2.png) [@Abhijeet\_Singh](https://community.frame.work/u/Abhijeet_Singh)\
**Post date:** [January 28, 2022, 4:37pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/42 "2022-01-28T16:37:11Z")

</div>

It’s great !  
I was curious that if you going to provide software support for Linux like System 76 with there DKMS and Drivers on GitHub.

---

<div class="post-metadata">

**Author:** ![Alexander\_von\_Gluck](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/alexander_von_gluck/32/6464_2.png) [@Alexander\_von\_Gluck](https://community.frame.work/u/Alexander_von_Gluck)\
**Post date:** [January 30, 2022, 8:04pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/43 "2022-01-30T20:04:57Z")

</div>

I bought a framework laptop yesterday because of this.  
Keep going! Open source the bios (Coreboot?), work on firmware upgrades from Linux!

My XPS 13 was a big disappointment because of the broken + unstable TB 3 implementation under Linux. Really hopeful the Framework is outta this world.

---

<div class="post-metadata">

**Author:** ![Patrick\_Macdonald](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/patrick_macdonald/32/6466_2.png) [@Patrick\_Macdonald](https://community.frame.work/u/Patrick_Macdonald)\
**Post date:** [January 30, 2022, 9:36pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/44 "2022-01-30T21:36:27Z")

</div>

Ive had 4 framework laptops (one for each of my family members) in my basket for ages… the only thing holding me back is not being able to flash coreboot (so that intel management engine (IME) can be disabled with me\_cleaner). Obviously it would be even better if framework distributed their laptops with coreboot & a disabled Intel ME but if framework would at least disable boot guard and unlock the CPU I could have a crack at it myself.

The release of EC code is actually enough to convince me that it’s coming and I should just go ahead and order at least one, but assuming that Framework does eventually get this done, will it apply retroactively to the current models for those willing to DIY? Or will it require a hardware change (and hence buying a new mainboard?)

---

<div class="post-metadata">

**Author:** ![GhostLegion](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/ghostlegion/32/3356_2.png) [@GhostLegion](https://community.frame.work/u/GhostLegion)\
**Post date:** [January 31, 2022, 7:50pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/45 "2022-01-31T19:50:47Z")

</div>

> [@Patrick\_Macdonald](#):
>
> will it apply retroactively to the current models for those willing to DIY? Or will it require a hardware change (and hence buying a new mainboard?)

It would require a whole new motherboard from my understanding. I know Purism is able to ship a mostly neutered and disabled ME because they leave certain fuses unfused but if the manufacturer of Framework’s board trips the fuses then they can’t be unfused. The only problem with that theory is that Purism uses 10th gen parts and not 11th or 12th gen so perhaps the design changed.

---

<div class="post-metadata">

**Author:** ![y0b0](https://avatars.discourse-cdn.com/v4/letter/y/eb8c5e/32.png) [@y0b0](https://community.frame.work/u/y0b0)\
**Post date:** [January 31, 2022, 9:20pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/46 "2022-01-31T21:20:26Z")

</div>

very excited for coreboot ! will keep watching this issue !

understand that frame.work have a lot of work ahead but im hopefull they recognise the value . the type of people who want a diy upgradible laptop are likely to be the type of people who want a free bios !

---

<div class="post-metadata">

**Author:** ![Matthew\_Garrett](https://avatars.discourse-cdn.com/v4/letter/m/eb8c5e/32.png) [@Matthew\_Garrett](https://community.frame.work/u/Matthew_Garrett)\
**Post date:** [January 31, 2022, 9:51pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/47 "2022-01-31T21:51:29Z")

</div>

As mentioned [here](http://community.frame.work/t/free-the-ec-and-coreboot-only/791/47), there’s a theoretical path to enabling Coreboot on existing hardware, using a similar model to how we enabled UEFI Secure Boot on Linux systems. While I think it’s possible to build everything in an appropriate way, it’s not yet guaranteed to be possible.

---

<div class="post-metadata">

**Author:** ![junaruga](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/junaruga/32/5342_2.png) [@junaruga](https://community.frame.work/u/junaruga)\
**Post date:** [February 5, 2022, 11:20am UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/48 "2022-02-05T11:20:36Z")

</div>

I just put some articles about this topic.

- [Framework looks to expand repairability beyond the laptop – TechCrunch](https://techcrunch.com/2022/02/01/framework-looks-to-expand-repairability-beyond-the-laptop/)
- [Framework is Open Sourcing their firmware #OpenSource @FrameworkPuter « Adafruit Industries – Makers, hackers, artists, designers and engineers!](https://blog.adafruit.com/2022/02/02/framework-is-open-sourcing-their-firmware-opensource-frameworkputer/) - I am sure people loving open hardware like this organization Adafruit and the website [https://www.adafruit.com/](https://www.adafruit.com/) .

---

<div class="post-metadata">

**Author:** ![John\_Loucaides1](https://avatars.discourse-cdn.com/v4/letter/j/35a633/32.png) [@John\_Loucaides1](https://community.frame.work/u/John_Loucaides1)\
**Post date:** [May 16, 2022, 10:59pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/49 "2022-05-16T22:59:37Z")

</div>

Has anyone tried using the TGL package from edk2-platforms?  
[edk2-platforms/Platform/Intel/TigerlakeOpenBoardPkg · GitHub](https://github.com/tianocore/edk2-platforms/tree/master/Platform/Intel/TigerlakeOpenBoardPkg)

---

<div class="post-metadata">

**Author:** ![noname](https://avatars.discourse-cdn.com/v4/letter/n/58f4c7/32.png) [@noname](https://community.frame.work/u/noname)\
**Post date:** [August 7, 2022, 4:36pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/50 "2022-08-07T16:36:47Z")

</div>

> [@Patrick\_Macdonald](#):
>
> so that intel management engine (IME) can be disabled with me\_cleaner)

This does only apply to vPro CPUs, doesn’t it? The ones without vPro do not come with ME, right?

---

<div class="post-metadata">

**Author:** ![GhostLegion](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/ghostlegion/32/3356_2.png) [@GhostLegion](https://community.frame.work/u/GhostLegion)\
**Post date:** [August 7, 2022, 5:03pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/51 "2022-08-07T17:03:08Z")

</div>

> [@noname](#):
>
> This does only apply to vPro CPUs, doesn’t it? The ones without vPro do not come with ME, right?

Every modern Intel CPU comes with ME. Period. Only older platforms lack Intel ME.

---

<div class="post-metadata">

**Author:** ![Second\_Coming](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/second_coming/32/29330_2.png) [@Second\_Coming](https://community.frame.work/u/Second_Coming)\
**Post date:** [August 7, 2022, 9:09pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/52 "2022-08-07T21:09:29Z")

</div>

> [@GhostLegion](#):
>
> Every modern Intel CPU comes with ME

On the **processor** , yes, still come with ME.

On the **system** , up to the manufacturer to provide something like this:

> **[Dell now offers PCs with Intel Management Engine disabled](https://hexus.net/tech/news/systems/112835-dell-now-offers-pcs-intel-management-engine-disabled/)**
>
> Several machines are available to custom order with “Intel vPro – ME Inoperable".

[https://www.dell.com/community/Latitude/What-is-quot-ME-Lockout-MOD-quot/td-p/7699939](https://www.dell.com/community/Latitude/What-is-quot-ME-Lockout-MOD-quot/td-p/7699939)

For example, you can see it here:

> **[Dell Latitude 13 Inch 7330 Rugged Laptop | Dell Canada](https://www.dell.com/en-ca/shop/laptops-ultrabooks/latitude-7330-rugged-extreme-laptop/spd/latitude-13-7330-laptop/xctolr7330cavi?redirectTo=SOC)**
>
> 13" rugged laptop with enhanced battery life, 5G connection, up to Intel® Core™ i7 processors andtouch-responsive, 1400-nit sunlight viewable screen.

---

<div class="post-metadata">

**Author:** ![GhostLegion](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/ghostlegion/32/3356_2.png) [@GhostLegion](https://community.frame.work/u/GhostLegion)\
**Post date:** [August 7, 2022, 9:19pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/53 "2022-08-07T21:19:38Z")

</div>

@Second_Coming It can be disabled by flipping the HAP bit but not removed from what I understand. Good to know that other more mainstream manufacturers are offering that option, I wasn’t aware of that. I knew of a few niche manufacturers offering that but Dell is new to me.

---

<div class="post-metadata">

**Author:** ![Second\_Coming](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/second_coming/32/29330_2.png) [@Second\_Coming](https://community.frame.work/u/Second_Coming)\
**Post date:** [August 7, 2022, 9:28pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/54 "2022-08-07T21:28:47Z")

</div>

It’s mostly around using devices in government contracts and defense contracts. But now, you know, as a consumer, you can have that option to disable Intel ME.

Related:

> **[Conti spotted working on exploits for Intel ME flaws](https://www.theregister.com/2022/06/02/conti_rasomware_intel_firmware/)**
>
> Don't leave those firmware patches to last

…and with or without [news like this](https://www.cnn.com/2022/07/23/politics/fbi-investigation-huawei-china-defense-department-communications-nuclear/index.html), Lenovo could be ruled out. So that leaves Dell and HP really for most of the North America.

---

<div class="post-metadata">

**Author:** ![Luna\_VM](https://avatars.discourse-cdn.com/v4/letter/l/898d66/32.png) [@Luna\_VM](https://community.frame.work/u/Luna_VM)\
**Post date:** [August 7, 2022, 10:27pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/55 "2022-08-07T22:27:36Z")

</div>

@Second_Coming I see no hard reason ruling out said chinese companies in this news. It seems like “we found nothing but it is from china so it is dangerous”, very common US hate to china.

It is unfortunate as Huawei has been making the best to-bussiness x86 ultrabooks as of 2022. And I think people in North America should worry more about the three-letter agencies rather than China trying to spy on them?

---

<div class="post-metadata">

**Author:** ![Second\_Coming](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/second_coming/32/29330_2.png) [@Second\_Coming](https://community.frame.work/u/Second_Coming)\
**Post date:** [August 7, 2022, 10:59pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/56 "2022-08-07T22:59:44Z")

</div>

No hard reason to rule out…but to some, it’s about taking the route with minimal risk…instead of waiting for an incident to occur. (Or take risks that can be managed)

---

<div class="post-metadata">

**Author:** ![Jake\_Richter](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/jake_richter/32/2403_2.png) [@Jake\_Richter](https://community.frame.work/u/Jake_Richter)\
**Post date:** [August 7, 2022, 11:06pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/57 "2022-08-07T23:06:05Z")

</div>

Dell has actually had the ability to disable the ME for years.

Whenever I replace a motherboard, the first thing that comes up is a one-shot screen to set the service tag (serial number) to match the actual machine’s, several options for the ME, and sometimes a few other settings. There’s a sticker on (usually inside) the computer that indicates which ME option is appropriate.

(And yes, federal and some medical sites have it disabled.)

It’s not resettable once I’ve finished the replacement - if I get it wrong, the only option is to replace the motherboard again.

---

<div class="post-metadata">

**Author:** ![GhostLegion](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/ghostlegion/32/3356_2.png) [@GhostLegion](https://community.frame.work/u/GhostLegion)\
**Post date:** [August 8, 2022, 2:19am UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/58 "2022-08-08T02:19:21Z")

</div>

> [@Luna\_VM](#):
>
> I think people in North America should worry more about the three-letter agencies rather than China trying to spy on them

Why restrict myself? The things that make it harder for the three letter agencies would undoubtedly make it more difficult for the Chinese or frankly anyone else from listening in on me. Although frankly the most common attack vector isn’t low-level firmware, it’s the web browser or other applications or even the OS. Those have much more surface area and are more universal than the ME.

Having said that, I’m under no illusions that if any nation-state wants my data, they’ll get it one way or another.

> [@Luna\_VM](#):
>
> very common US hate to china

Speaking for myself here, I don’t hate the Chinese as a people. I am however exceedingly distrustful of any nation that manages to be more hostile to civil rights than my own. Don’t try and portray this as xenophobic because it simply isn’t. China has given plenty of cause for concern, just as much as the US has.

---

<div class="post-metadata">

**Author:** ![Second\_Coming](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/second_coming/32/29330_2.png) [@Second\_Coming](https://community.frame.work/u/Second_Coming)\
**Post date:** [August 8, 2022, 2:30am UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/59 "2022-08-08T02:30:05Z")

</div>

> [@GhostLegion](#):
>
> as much as the US has.

DoublePulsar

---

<div class="post-metadata">

**Author:** ![Jason\_Dagless](https://avatars.discourse-cdn.com/v4/letter/j/48db29/32.png) [@Jason\_Dagless](https://community.frame.work/u/Jason_Dagless)\
**Post date:** [August 8, 2022, 4:31pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/60 "2022-08-08T16:31:55Z")

</div>

I wouldn’t trust any nation, Western or otherwise. They are all going full on authoritarian.

They’ve run the numbers. They know they have to get us all under control before we kick off.

---

<div class="post-metadata">

**Author:** ![Second\_Coming](https://sea1.discourse-cdn.com/flex001/user_avatar/community.frame.work/second_coming/32/29330_2.png) [@Second\_Coming](https://community.frame.work/u/Second_Coming)\
**Post date:** [August 8, 2022, 4:35pm UTC](https://community.frame.work/t/open-sourcing-our-firmware/14033/61 "2022-08-08T16:35:52Z")

</div>

> [@Jason\_Dagless](#):
>
> I wouldn’t trust any nation, Western or otherwise

Yeah, comes down to which nation would you like to backup your data. 🤣

[Previous page](https://community.frame.work/t/open-sourcing-our-firmware/14033.md?page=2)

[Next page](https://community.frame.work/t/open-sourcing-our-firmware/14033.md?page=4)
