Title says it all really. I need to figure out how to disable or override the secure flash check. Googling has not given any results that are particularly useful or recent. Anyone know how to kill this bloody secure flash check?

Run BIOS through 1.69 or 1.7xx UBU and don't make any changes, exit and save as mod_BIOS etc. That often removes the hidden capsule security. Also, here in Asrock section at end of Asrock, there is links to check and how to do it manually
[Guide] How to flash a modded AMI UEFI BIOS

Thanks I was starting to think some deep diving might have been needed. Maybe I'm being brain damaged here but when I open the firmware image in UEFITool it won't let me save the file without making any changes the option is grayed out. The version of UBU I have is v1.7 RC8.

EDIT: Yup I'm pretty sure I was being brain damaged there went to the wrong menu. Just to check though; Action > Image > "extract as is", right? Or should I just left-click on "UEFI image" and select "extract as is"?
EDIT2: If it helps heres a link to th 1.4 firmware I will be modding, doesn't seem like UBU automatically removes the capsule and the couple attempts I've had so far didn't work. https://www.asrock.com/mb/AMD/Fatal1ty%2.../index.asp#BIOS

@ket You're welcome! I was surprised to see you asking easy one like this

Use regular UEFITool (not NE Alpha) - https://github.com/LongSoft/UEFITool/releases/tag/0.25.1

Watch FIT table using UEFITool NE Alpha before and after modification in case you need to fix (You can either fix manually, or extract copy of fit before and then put back after, or use mcodefit to backup/restore)

On your edit #1, I am not sure what you are extracting? Let me check the BIOS itself, usually on newer Asrock you are not really extracting BIOS Body from capsule like first part of the guide, that's why I mentioned end of the Asrock section.
It's a fake/non-capsule capsule, fake as in not really encapsulating the BIOS like most capsules, it's in the middle of the BIOS somewhere, you have to FF it or run through UBU. I'll check the BIOS out and let you know what I see.

*Edit - yes, all you do is as I mentioned initially, open in UBU, let it scan, then do nothing except save/exit rename to Mod_BIOS (opt 1) and that has capsule removed.
Compare stock/MOD via hex you will see where it FF's the 4KB capsule out and another 16bytes in other area too (unsure what that is?)

Alright, I'm doing this differently as for whatever reason I'm not getting the same results as you. I've located what I think is the AMI Aptio Capsule (GUID 5A88641B-BBB9-4AA6-80F7-498AE407C31F) and simply removed it, rebuilt the image and saved it. The file opens perfectly fine with AMIBCP and everything looks to be in tact but I don't know if I can outright yank out what appears to be the secure flash check and leave it out. Just to make sure I'm not missing anything what do you mean when you say to let UBU scan? Is that something it does automatically when the file is opened?

Thanks , I know I'm being really dense here first time I've needed to remove protection in this way.

EDIT: Ok I realise what I've been doing wrong (I think) I've been doing everything with UEFITool when I just needed to run UBU.bat.

New error unless I'm missing something again, this time when using afuefix64 with the /p /b /n /k switches I get a 1d error "failed to load image into memory 0x00FF8800 (99%)". I'll investigate with UEFITool and report back if I find anything.

Yes, sorry, all you need to do is run the UBU batch file and save without making any actual change choices, but still save as mod-BIOS. Then as Fernando mentioned, rename to stock and flash within the BIOS.
Sounds like you got the file now, if you still don't get it let me know I will upload. On your pre-edit, I am not sure removing the capsule will work, thus the method to FF out both locations instead is used. But sounds like you got it with UBU, if not I will upload.

Zitat von Lost_N_BIOS im Beitrag #8

---

Yes, sorry, all you need to do is run the UBU batch file and save without making any actual change choices, but still save as mod-BIOS. Then as Fernando mentioned, rename to stock and flash within the BIOS.
Sounds like you got the file now, if you still don't get it let me know I will upload. On your pre-edit, I am not sure removing the capsule will work, thus the method to FF out both locations instead is used. But sounds like you got it with UBU, if not I will upload.

---

Zitat von Fernando im Beitrag #7

---

@ket:
You don't need to use the AFU tools, if you want to flash a modded ASRock UEFI BIOS.
This is the easiest and safest way:
1. Let the UBU tool remove the capsuled security feature.
2. Rename the modded BIOS to the original one (incl. extension).
3. Flash the BIOS from within the BIOS by using the ASRock in-box Flash tool.

---

I knew you would be tweaking once you got the flash sorted out! Is this your new main system? If so, the Gigabyte guys will be sad to see you slowly leaving them in the dust

Zitat von Lost_N_BIOS im Beitrag #10

---

I knew you would be tweaking once you got the flash sorted out! Is this your new main system? If so, the Gigabyte guys will be sad to see you slowly leaving them in the dust

---

That's terrible design flaw, what the heck! Of course, not all 12 will be used always, but more than 4 at a time would be used often, even with switching happening. So you can't even add LLC via mod then sounds like? How can any manufacturer not have LLC these days, especially when it's not a budget/OEM model board.

Your Gigabyte BIOS fans will be happy to know you plan to keep up from time to time, I know they all looked sad there for a while when you said you wasn't going to do anymore

Indeed. I outright told my contacts that the intersil controller should support LLC and there is really no reason why the board should be missing CPU LLC options. I might give my contacts a bit of a prod about the issue and see what they say as theres a possible bug related to CLDO_VDDP I need to tell them about anyway. In more positive news I've been testing a performance modified version of firmware 1.4 on the board (I think we all knew this was coming :p ) and thus far the performance mods I made to the firmware look good 1715pts in Cinebench R15 @ 3.85GHz with 3200 CL15 memory. By comparison the vanilla 1.4 firmware @ 3.84GHz (because spread spectrum) and 3466 CL16 memory can only muster 1718pts quite looking forward to smashing that barrier when I ramp memory speed back up ;)

@Fernando:
I did indeed succeed with that method thats how I'm now able to test a performance optimised version of firmware 1.4 ;) Initially it was a little odd as a blank box popped up which after hitting the return key the flash went ahead. On subsequent flashes as I made more under the hood changes that blank box didn't pop up so not sure what that was about. A note for people though; You can't flash the same version of a firmware you are already running through the instant update utility you have to downgrade to an older version first.