[REQUEST] LAPTOP ASUS GL553VD BIOS TPM Update — TPM Attestation Unlock

[krimimed]

Hey everyone,
I'm hoping someone here can help me with a BIOS mod for my ASUS GL553VD.
System:

Laptop: ASUS GL553VD
CPU: Intel Core i7-7700HQ (Kaby Lake)
Chipset: Intel HM175
Current BIOS: GL553VD.308 (April 2019 — last official release, EOL forever)
SPI Flash: Winbond W25Q64FV 8MB
ME Firmware: 11.8.93.4323 H (updated from 11.6.0.1136)
PTT Version: 303.12.0.0
OS: Windows 10 22H2


Flash layout (from FPT -i):
DESC  - Base: 0x00000000, Limit: 0x00000FFF
BIOS  - Base: 0x00200000, Limit: 0x007FFFFF (6MB)
CSME  - Base: 0x00001000, Limit: 0x001FFFFF (2MB)
Master Region Access:
CPU/BIOS - Read: 0x00B, Write: 0x00A
ME      - Read: 0x00D, Write: 0x00C (locked to host)

The problem:
PTT firmware version 303.12.0.0 fails remote attestation required by Call of Duty Warzone's anti-cheat (Ricochet/Azure). Intel's EKOP provisioning server no longer issues EK certificates for this PTT version. This affects thousands of users across Kaby Lake and Coffee Lake platforms.
Diagnostic confirmation:
tpmtool getdeviceinformation:
- Ready For Attestation: False
- Is Capable For Attestation: False
- Information Flag: INFORMATION_EK_CERTIFICATE

Get-TpmEndorsementKeyInfo -HashAlgorithm Sha256:
- ManufacturerCertificates: {} (empty)
- EKPub Hash: d46eb08384e98c7d3c17505344d140d2a1d1b73281b1bd8bee60ef6e7f1b0818
- IsEndorsementKeyPairPresent: True
- IsKeyAttestationCapable: ReturnValue 2147942520 (False)

MEInfo:
- EK Revoke State: Revoked
- Re-key needed: True
- PTT: PRESENT/ENABLED
- FW Version: 11.8.93.4323 H
- CurrentState: Normal
- FPF and ME Config Status: Match

What I've already done:

Updated ME firmware from 11.6.0.1136 → 11.8.93.4323 via FWUpdLcl64 -GENERIC 
ME CurrentState: Normal, no longer in Recovery 
PTT PRESENT/ENABLED 
TPM 2.0 confirmed working in tpm.msc 
Secure Boot enabled, Confirm-SecureBootUEFI: True 
BIOS region successfully dumped via FPT: FPTw64.exe -d bios.bin -bios (6MB) 
Analyzed BIOS with UEFITool NE A74 — located setupdata inside double LZMA compressed volume 
Extracted IFR from Setup PE32 — PTT byte found at VarOffset 0x68A in PchSetup (VarStoreId: 0x1) 
Patched setupdata byte 0x68A from 0x00 → 0x01 using HxD 
Reconstructed bios_patched.bin via UEFITool 0.28 Replace body — verified same size (6,291,456 bytes) 
Confirmed patched byte in reconstructed file 
bios_patched.bin NOT yet flashed — ready and waiting 
Attempted TPM provisioning via all Windows methods — all failed due to PTT version floor 
Attempted FWUpdLcl64 -PARTID WCOD — failed (partition not in consumer firmware) 
Attempted Clear-Tpm and Initialize-Tpm — EK cert still missing 

BIOS structure (UEFITool):
UEFI image
├── Padding
├── AmiNvramMainRomGuid
├── AmiNvramMainRomGuid
├── Padding
├── 4F1C52D3-D824-4D2A-A2F0-EC40C23C5916
│  └── 9E21FD93-9C72-4C15-8C4B-E77F1DB2D792
│      └── LzmaCustomDecompressGuid
│          └── Volume image section
│              └── 5C60F367-A505-419A-859E-2A4FF6CA6FE5
│                  ├── Setup (PE32) ← PTT IFR found here
│                  └── setupdata
│                      └── LzmaCustomDecompressGuid
│                          └── setupdata ← PTT byte patched here
├── AFDD39F1-19D7-4501-A730-CE5A27E1154B
├── 14E428FA-1A12-4875-B637-8B3CC87FDF07
└── 61C0F511-A691-4F54-974F-B9A42172CE53

IFR finding:
OneOf Prompt: "TPM Device Selection"
VarStoreId: 0x1 (PchSetup)
VarOffset: 0x68A
Size: 8
Option: "dTPM" Value: 0x00
Option: "PTT"  Value: 0x01 (Default, MfgDefault)
Current value in setupdata: 0x00 → patched to 0x01

What I need:
A complete modded image for GL553VD containing:

Updated PTT partition version above 303.12.x.x — ideally 400.x.x.x or higher (Activision says Intel PTT with versions 303.12.x.x need new firmware update)
Our already-patched setupdata PTT byte (VarOffset 0x68A = 0x01) preserved

Flash method:

BIOS region: flashable via FPTw64.exe -f modded.bin -bios from Windows (write confirmed)
ME region: locked to host write — if ME needs updating, would need full 8MB SPI flash image or FWUpdLcl method


Attached files:

GL553VDAS308.zip — Latest original BIOS file (which i'm running)
bios_patched.bin — setupdata PTT byte already fixed (for enabling TPM in BIOS, but not implemented)
meinfo_for_modder.txt — full MEInfo verbose output
setup.bin.0.0.en-US.uefi.ifr.txt — full IFR extract
FPT_i_output.txt -- output confirming flash chip and region layout


This fix would benefit thousands of affected players.
Thanks in advance!
Mohamed

[laret]

Hi, currently the latest ME for your chipset is v11.8.98.4781 even the latest one ME for U series chipsets is v11.9.1.3010 i can confirm that intel PTT still at version 303.12.1000 not 400.x.x.x.