IFWI

[orangecms]

Integrated Firmware Image
see https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/resources/key-usage-in-integrated-firmware-images.html

document and support it; also mentioned in corna/me_cleaner#282

see also https://doc.coreboot.org/soc/intel/apollolake/index.html
and https://github.com/coreboot/coreboot/blob/main/util/cbfstool/ifwitool.c
and https://cdrdv2-public.intel.com/671281/uefi-firmware-enabling-guide-for-the-intel-atom-processor-e3900-series.pdf

related:

• Improve Integrated Firmware Image (IFWI) support LongSoft/UEFITool#82
• scan through ME region #59

IFWI region is divided into 2 Logical Boot Partitions (LBP), which are defined by Boot Partition Description Table (BPDT).

[orangecms]

One does not simply parse IFWI, unfortunately.

There are multiple high-level partitioning data structures involved, and some cannot be trivially detected since they have no magic marker:
https://github.com/platomav/MEAnalyzer/blob/aa148556bbf09e418074c3cea18255a25432fb7c/MEA.py#L11490

Sample taken here per a hint from corna/me_cleaner#384 (comment)

NOTE: From WIP, this is output for Gigabty a Z590M version F10b image (https://www.gigabyte.com/us/Motherboard/Z590M-rev-10/support#support-dl):

Intel Firmware Tool 🔧
[2025-11-30T20:55:10Z INFO  intel_fw] ME region start @ 00003000
PreIFWIHeader { size: 40, checksum: 5fc2bcfb }
- PreIFWIEntry { offset: 19b000, size: 88000 }
FPT:   Header version: 33
  Entry version:  16
  Entries:        11
  Checksum:       00
  FITC version:   15.0.52.2706
- PreIFWIEntry { offset: 2000, size: 199000 }
12 entries, BPDT v2, IFWI v0, FIT 15.0.52.2706  @ 00004000
DLMP            @ 00000000..00000000; 00000000
IFPOverride     @ 00000000..00000000; 00000000
Secondary BPDT  @ 00000000..00000000; 00000000
RBEP            @ 00001000..00019000; 00000000
Here are 48 bytes:
 [3d, 27, 0b, 1c, b6, f0, e6, 65, b7, 9f, dc, bb, 2b, a0, 22, fc]
 [73, e5, fb, 61, 11, f2, dc, 59, 2f, b9, b8, c4, f6, db, f4, 45]
 [f6, 53, 16, d8, 93, e1, 7b, 3c, 2e, 8b, 29, 8f, de, 34, bb, dc]
UFSPhy          @ 00000000..00000000; 00000000
UFS_GPP         @ 00000000..00000000; 00000000
OEM Partition   @ 00000000..00000000; 00000000
FTPR            @ 00059000..0017e000; 00000000
Here are 48 bytes:
 [00, 00, 00, c0, 80, 0d, 00, c0, c0, 19, 00, c0, 40, 1e, 00, c0]
 [40, 2a, 00, c0, 40, 36, 00, c0, c0, 41, 00, c0, c0, 4d, 00, c0]
 [40, 59, 00, c0, 40, 65, 00, c0, 80, 70, 00, c0, 40, 7b, 00, c0]
PMC firmware    @ 00019000..00059000; 00000000
Here are 48 bytes:
 [0a, a6, 03, 86, 0b, 86, d1, c0, c1, c4, 6b, 24, c0, 10, c1, c4]
 [6b, 24, 80, 10, c1, c4, 9f, 74, 04, 14, 11, 34, 04, 14, 10, 34]
 [c1, c7, c1, c6, c1, c5, 04, 14, 0b, 34, 04, 14, 0a, 34, 04, 14]
Unknown (41)    @ 0017e000..00191000; 00000000
Here are 48 bytes:
 [92, a0, ff, a0, a2, c0, 0c, 22, a0, 29, 93, 1d, f0, 0c, 12, 1d]
 [f0, 00, 00, 00, 36, 41, 00, a2, a7, c4, 0c, 0b, 0c, 8c, a5, 01]
 [01, 26, 4a, 05, 26, 5a, 02, 66, 3a, 10, 1c, 48, 1c, 0a, 0c, 09]
Unknown (42)    @ 00191000..00198000; 00000000
Here are 48 bytes:
 [c1, 20, 0d, f0, 0c, 12, 12, c1, f0, 09, 01, 05, c9, ff, 21, 0f]
 [f6, 05, 2f, 02, 01, 2b, f6, 00, 03, 10, 02, 32, 02, 85, 33, 00]
 [0c, 02, 85, 47, ff, c5, df, ff, 0c, 72, c5, e4, ff, 85, 32, 00]
Partition Table @ 00198000..00199000; 00000000
Here are 48 bytes:
 [01, 00, 00, 00, d0, 55, 63, 65, 64, 2c, 00, 00, ec, 77, b0, d9]
 [3d, 00, 00, 00, 00, a2, 03, 10, e0, 02, 00, 00, 01, 00, 01, 00]
 [00, 92, 05, 10, e1, 02, 00, 00, 00, 00, 01, 00, 00, bb, 00, 10]
- PreIFWIEntry { offset: 00, size: 00 }
- PreIFWIEntry { offset: 223000, size: 199000 }
 8 entries, BPDT v2, IFWI v0, FIT 15.0.52.2706  @ 00446000
DLMP            @ 00000000..00000000; 00000000
IFPOverride     @ 00000000..00000000; 00000000
Secondary BPDT  @ 00000000..00000000; 00000000
RBEP            @ 00000000..00000000; 00000000
UFSPhy          @ 00000000..00000000; 00000000
UFS_GPP         @ 00000000..00000000; 00000000
OEM Partition   @ 00000000..00000000; 00000000
NFTP            @ 00001000..00199000; 00000000
Here are 48 bytes:
 [ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff]
 [ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff]
 [ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff, ff]
- PreIFWIEntry { offset: 00, size: 00 }
- PreIFWIEntry { offset: 00, size: 00 }
- PreIFWIEntry { offset: 00, size: 00 }

=== Flash descriptor ===
== Configuration ==
        components:  1, base: 0x00000030
           regions:  1, base: 0x00000040
           masters:  3, base: 0x00000080
   ICH8/PCH straps: 101, base: 0x00000100
        MCH straps:  1, base: 0x00000b00
== Components ==
Components {
    FLCOMP: FlashComponentConfig {
        comp1_density: _Undefined,
        comp2_density: _Undefined,
        read_clock_frequency: M20,
        fast_read_support: true,
        fast_read_clock_frequency: M33,
        write_erase_clock_frequency: M33,
        read_id_status_clock_frequency: M33,
    },
    FLILL0: FlashInvalidInstructions {
        inst1: 0x21,
        inst2: 0x42,
        inst3: 0x60,
        inst4: 0xad,
    },
    FLILL1: FlashInvalidInstructions {
        inst1: 0xb7,
        inst2: 0xb9,
        inst3: 0xc4,
        inst4: 0xc7,
    },
}
== Regions ==
   Flash descriptor (IFD):   00000000 - 00000fff
   BIOS (host) firmware:     01000000 - 01ffffff
   (CS)ME firmware:          00003000 - 00ffffff
   Gigabit ethernet data:    00001000 - 00002fff
   Platform data:            01fff000 - 00000fff (unused)
   Embedded controller (EC): 01fff000 - 00000fff (unused)
== Masters ==
  0: 00a00f00
  1: 00400d00
  2: 00800900
  3: 00000000
  4: 10010100
  5: 00000000
  6: ffffffff
  7: ffffffff
[2025-11-30T20:55:10Z ERROR intel_fw::show] No ME firmware found

FIT @ 01cc8600, 11 entries, version 0100, checksum: 00
  Microcode Update                         00000000 @ ffc20400 version 0100 no checksum
  Microcode Update                         00000000 @ ffc36800 version 0100 no checksum
  Microcode Update                         00000000 @ ffc4cc00 version 0100 no checksum
  Microcode Update                         00000000 @ ffc64c00 version 0100 no checksum
  Microcode Update                         00000000 @ ffc7b400 version 0100 no checksum
  Microcode Update                         00000000 @ ffc93000 version 0100 no checksum
  Microcode Update                         00000000 @ ffcaa000 version 0100 no checksum
  Startup AC Module                        00000000 @ fffa0000 version 0100 no checksum
  TXT Policy Record                        00000000 @ 7a040100710070 version 0000 no checksum
  Key Manifest Record                      00650300 @ fff6fd00 version 0100 no checksum
  Boot Policy Manifest                     00950400 @ fff6f800 version 0100 no checksum

[pacuro78]

@orangecms to be more precise, my motherboard is Gigabyte Z590M ITX and bios version tested was F11b, which I did not mention in my post you have linked above. My bad, sorry for that :)
https://www.gigabyte.com/us/Motherboard/Z590I-AORUS-ULTRA-rev-10/support#dl
I have also checked my brother's Asus Mini PC PL63 bios yesterday and got the same error with 0.1.0 tool. It was to be expected as Tigerlake and Rocketlake are the same generation cpus.
Thanks for your support and prompt answer. I am going to check tool 0.1.2 and update result here.

Edit: Already checkd and v0.1.2 gives the same error as 0.1.0. That would be great to hear you continue work on my case.

[orangecms]

@orangecms to be more precise, my motherboard is Gigabyte Z590M ITX and bios version tested was F11b, which I did not mention in my post you have linked above. My bad, sorry for that :)
https://www.gigabyte.com/us/Motherboard/Z590I-AORUS-ULTRA-rev-10/support#dl
I have also checked my brother's Asus Mini PC PL63 bios yesterday and got the same error with 0.1.0 tool. It was to be expected as Tigerlake and Rocketlake are the same generation cpus.
Thanks for your support and prompt answer. I am going to check tool 0.1.2 and update result here.

Edit: Already checkd and v0.1.2 gives the same error as 0.1.0. That would be great to hear you continue work on my case.

Thank you for diving in!

It will take a while for IWFI support to make it into a release.
The current versions were mainly for ME up to v11.

After that, Intel started creating lots of variants.

The output above is from the next branch here, which I frequently rebase. I don't have much time to work on this now, unfortunately.

Do you have a Rust toolchain set up, would you be willing to dive in?
I have written quite a bunch of documentation on the design, how to extend intel_fw etc:
https://platform-system-interface.github.io/intel_fw/
API docs as usual:
https://docs.rs/intel_fw/

I appreciate your feedback, it really helps - and good to see that the tool runs on Windows, as I don't have that system to try even! :)

[pacuro78]

It is not my intention to rush you. I realize such projects take lot of time until work properly. So I am waiting in patience for version which disable ME on my platform.
Regarding Rust toolchain it could be interesting to help but I have completely zero knowledge about programming, coding, etc. I would say I am power user who want to work my systems better :D That is why I am not afraid of testing custom solutions on my computers. I am Windows user and use Linux Live USB to adjust settings which are pain in Windows. I am going to take a look at Rust and try to set it up. I hope I could help more.