Intel CSME System Tools v11 r12 not have "SMIP Signing Key" field! Same problem with HM170, Dell Inspiron 15-5577

I do everything as instructed to step 7, but then when I need to substitute Smip signature of this item is simply not in the Fit. all the same as @virginlulu in the attachment. In the Platform protection menu there is a sub-item Configuration for Bootguard/ISH and there is no sub-point Platform integrity. I assume here is how used the "Manifest Extension Utility" from kit.
In my case "platform integrity" is missing, but "OEM public Key Hash" is not empty

well I seem to understand, I try this

i using CSME System Tools v11 r12

Thanks to plutomaniac's excellent guide (initial post of this thread), his "ME: Drivers, Firmware & System Tools" repository and SoniX's awesome UBU tool I've been able to keep my aging PC (i7 3770k + Z77) secure - so far. (I would like to use it until Windows 7 support deadline in 2020.)
Unfortunately there are new ME vulnerabilities:
https://www.intel.com/content/www/us/en/...l-sa-00112.html
https://www.intel.com/content/www/us/en/...l-sa-00118.html
And Intel will only fix ME 9 to current.
The guide lists features (Intel Anti-Theft Technology) that can be deactivated. So, is it possible to deactivate other vulnerable features, too?
I can perfectly do without all that remote maintenance stuff (especially if the "service" is provided by criminals or security agencies ).
Unfortunately it isn't transparent which features can be safely deactivated. So, this task would require expert input.

Good news at last: currently (still) safe

With this method can I change the '11.8.50.3399_CON_H_D0_PRD_RGN.bin' firmware to an '11.8.50.3399_CON_H_D0_PRD_EXTR.bin' firmware?

Please re-read what I wrote in the other thread, I made an edit that maybe you missed. You don't want EXTR, that only means it's dirty (Settings and data from some running motherboard, not yours unless you extracted ME) and it means it has been extracted from some previously used BIOS already.

I tried doing all these steps on the 11.8.50.3399_CON_H_D0_PRD_RGN.bin firmware but when I get to:

"SMIP Signing Key" field, input the placeholder RSA Private Key (dummy.pem) that was created by the OpenSSL tool. Then go to "Build > Build Settings", input the Manifest Extension Utility (MEU) executable location at "Intel(R) Manifest Extension Utility Path" field, input Win32 OpenSSL Lite executable location at "Signing Tool Path" field, make sure that "OpenSSL" is selected at "Signing Tool" field, make sure that "Verify manifest signing keys against the OEM Key Manifest" is set to "No", leave all other settings intact and click Close."

there is no Platform Integrity Field or "SMIP Signing Key" :(

That step is not needed for the board/BIOS we just discussed (Maximus X Formula), unless your dump is different than the stock BIOS? OEM Key hash field is all zeros (Empty), so skip all that and move onto step #8
Or, if you are referring to another board/BIOS, ignore this