Hello, I'm trying to disable Intel ME on my Asus Z270A.

(I've succesfully extracted my own bios and modded it with me_cleaner but I'm unable to write back)
1) I'm following "[Guide] How to flash a modded AMI UEFI BIOS"
2) but the "Flash Programming Tool (FPT)" gives an error message due to the BIOS's WRITE protection
3) In "SoniX's [Tool Guide] AMI Setup - IFR Extractor AMISetupWriter" it says to boot into UEFI Shell to disable the "BIOS Lock"

However I'm unable to boot into UEFI Shell no matter what. It just says "Secure Boot is enabled to prevent untrusted operating systems from loading during the system start-up. To launch UEFI shell, please disable Secure Boot option or acquire digital signature for UEFI shell file and store it in a USB flash drive." even if "PK key" in the "Key Management" is deleted and "Os Type" is "Other OS".

Any known workaround?
Thanks!