[Request] Dell Optiplex 3040M 7th Gen CPU

[Rustyman22]

Hello
1st time posting here and sorry for my bad english.
I post this as i got out of options and my skills are not very Bios tinkering.
I got Dell Optiplex 3040m that was from local company tagged as "scrap metal". That company was buying new PC for W11
------------------------------
The device 3040m is without HDD and no passwords or tags are set. The Bios is Dell GUI one with many options configurable.
Most are set to disabled like secure boot but has enabled Bios-Downgrade.
Default CPU in this device is G4400T (celeron) on H110 Chipset and bios version is 1.5.7

Internet say that H110 can work with my not used i5-7600T but this Dell will not start and only issue orange LED Error.

I got utility named UEFITool_NE_A59 and MC extractor that got running on Python 3.8.2
MC extractor say that i have only one CPUID = 506E3
UEFITool_NE_A59 not allow me to modify anything and only shows Red and Yellow colored modules with warning in status log.

Code:

New AMI hash file found at base F85590h Protected ranges: Address: FF7E0000h Size: 302000h Hash: 7E0944F704E13A282E53EE334F2ECF8A4F2ACB20EF1EFC3C5DA20091A2BF4FE9 Address: 00000000h Size: 0h Hash: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF ------------------------------------------------------------------------ BootGuard ACM found at base FC0000h

I found article on libreboot about Dell 3050 with "Deguard" saying something about bypass but i am not skilled that high to get that scripts working.
The article say something about Managment Engine must be or bellow V11.
-----------------------------------------------------------------------------------
Bios in this Dell 3040 is 1.5.7 and has ME=11 .0 build 1197 hotfix 0
I am aware of not possible and thank you for reply.

Here is the Bios file that is flashed
https://www.dell.com/support/home/en-uk/drivers/driversdetails?driverid=kyvyg&oscode=w764&productcode=optiplex-3040m-desktop&lwp=rt

[DeathBringer]

Post a screenshot of Mainboard tab of CPU-Z.

[Rustyman22]

Post a screenshot of Mainboard tab of CPU-Z.

Thank you for reply
The motherboard is the second image

[DeathBringer]

This BIOS can't be modded because of BootGuard.

[Rustyman22]

This BIOS can't be modded because of BootGuard.

Thank you for reply

As i write in 1st post, i read on LibreBoot that there is way around this if i have ME V11 but i not have high skills to do it.
If you search "deguard" you can find it.

Code:

This document will teach you about deguard, which is a utility that modifies the Intel ME (which implements Boot Guard) in such a way as to disable the Intel Boot Guard, by exploiting a known security vulnerability on MEv11. The Libreboot project uses deguard for several coreboot ports, such as the Lenovo ThinkPad T480 with Libreboot or the Dell OptiPlex 3050 Micro with Libreboot.

And this

Code:

On systems with MEv11, a bug exists in older versions (of MEv11) that allows for unsigned code execution , at a very early stage in the boot process, to the point that almost all of the ME firmware in flash can be fully replaced. The ME is also what implements Boot Guard, and the hack is possible before Boot Guard is enforced, allowing for it to be disabled. This does not unfuse the keys set by the manufacturer, but rather, it bypasses all checks against them.

I did not understand fully the process and i was not able to get that scrips working so i ask here as people here are more skilled than me.

If i had Dell 3050m i just download premade bios made by them. But that will not work on my 3040m

[exe127]

So, can you mod the BIOS of 3040m and put a 7th intel cpu in it eventually?

[DeathBringer]

There is no way to add support of Kaby Lake to this system.

[gonza20889]

Hi, I have this BIOS where I used DeGuard and I did everything possible to disable BootGuard and add microcodes, but it's still untested.

If you have a CH341A or bios reprogrammer or can get one, you can try flashing this BIOS.

Remember to always make a backup of the original BIOS, and keep in mind that this BIOS isn't guaranteed to work because of BootGuard.
With all that in mind, you can try it and see if it works.

Good luck.

[DeathBringer]

Hi, I have this BIOS where I used DeGuard and I did everything possible to disable BootGuard and add microcodes, but it's still untested.

Adding microcode doesn't add support for new CPUs.

[gonza20889]

Not only that, enable the hap bit, use the recommended version for the Intel ME donor for deguard, which is 11.6.0.1126. Use coffee time to apply patches like ACPI microcode to the BIOS region, but bootguard is supposed to be disabled. But it's still untested. I did that when I was bored