Hi,

I'm looking to edit the PRMRR size to 128mb for Intel SGX but cannot find an option to do so with this motherboard, only has enable/disable/software controlled option. If someone can help me with this problem I'm willing to pay a tidy sum for your help.

@yeojhg - Need to know actual motherboard model before anyone can look for you. MSI has several "Gaming Carbon Wifi" boards
Please link to the BIOS download page, and edit your post above to put in the full model name

Hi, thanks for helping! Mine is the Z490.

Post 2 for link
------------------

Hi, thanks for helping! Mine is the Z490 version, 7C73v13

Link (Post 3)
---------------------

Link: https://www.msi.com/Motherboard/support/...ING-CARBON-WIFI

@yeojhg - This BIOS can be set to 256MB, default is "Invalid PRMRR" which is actually an invalid 32bit set amount (I assume to disable or invalidate by default?)
It's also set to "Software controlled" by default too. You can change any of these values with RU program method, see here - section 2.2 and make bootable USB with RU program, then read 2.3-2.5
http://forum.notebookreview.com/threads/...-issues.812372/

Please note, the guide above shows you how to make changes in "Setup" but this does not apply to what you want, all of the settings for this (except for the "Epoch" settings below), are in the following varstore
VarStore: 0x11 >> = CPUSetup @ GUID >> B08F97FF-E6E8-4193-A997-5E9E9B0ADB32 - So, you would make changes in CPUSetup, not Setup

Or, I can make you mod BIOS with any changes you want? Whichever seems easier to you.

Hi, it’s amazing to hear that you can change the PRMRR value. I got a little lost at the spoiler part, what exactly do I do? Haha..

@yeojhg - Yes, you can change any BIOS setting hidden or visible with usually grub/setup_var, or RU program method. In this case, what you want to change is not in setup, so can't use grub/setup_var method.

You have to follow guide at post #4 I linked to use RU method, but remember you are making change in CPUSetup area, not "Setup" which they discuss.
In the spoiler, each item/setting, example >> Maximum Supported PRMRR Size, VarStoreInfo (VarOffset/VarName): 0xE3 << This is the "offset" which you go to in order to change the setting while in RU
And to change this to 256MB, you change 00 00 00 00 to >> 00 00 00 10 << The last byte here is the starting "Offset", data is input backwards, so you would really change offset E0-E3, if there was values other than 00 in the other three places, hope you get what I mean, tough to explain
Once there, you can take an image, show me, I will circle for you what to change, if you are not sure.

First you also want to change >> SW Guard Extensions (SGX), VarStoreInfo (VarOffset/VarName): 0xE0 << at this offset, from 02 (Software controlled) to >> 01 (Enabled)

If you want, there is another way we can edit, I can do for you if you want, without having to flash in mod BIOS (but, if may be easier for you to just flash in mod BIOS, not sure, up to you etc )
To do other way, you will dump NVRAM volume with FPT and send to me, I will edit, then you flash back. Do you want me to give info on how you do that, or do you want me to just mod a BIOS for you?

If you want a mod BIOS, I can change the defaults, so it's always what you want by default, in a stock BIOS.
Or, I can have you dump current BIOS with FPT and we can change only the current/live setting and not the defaults, all up to you.

Or, I can swap in the entire hidden advanced menu for you, so that you can directly change all this in BIOS.
But, this is a MUCH more involved edit, will take me a few days to do, and you will have to pick some submenu hidden or visible that you do not want/use and I will replace it.

Many thanks for the reply! I’ve attached the pictures.. Still not quite sure what values to offset and where in the array, maybe a step by step procedure on the inputs?

Are there any other changes other than the CPUSetup tab? Where is the Epoch setting located?

@yeojhg - Select Owner EPOCH input type, >> VarStore: 0x11 << This setting in CPUSetup
Other Epoch >> Software Guard Extensions Epoch 0 & 1 >> VarStore: 0x15 << This setting is in CpuSetupSgxEpochData
^^ This ^^ Will be difficult for you to change this way, it's in hex and little endian and 64 bit, so = 8 bytes in reverse, and I can't tell you what these values are stored in. I advise against you do anything with this setting, unless you know what you're doing and what this value is applying

Stock value for Epoch 0 = 1604620071 decimal / ‭5FA48F27‬ hex (Stored in NVRAM in Little Endian / Backwards)
Stock value for Epoch 0 = 3192651201 decimal / D76767B9BE4BFDC1 hex (Stored in NVRAM in Little Endian / Backwards)
Software Guard Extensions Epoch 0 >> @ Offset >> 0x0 in >> CpuSetupSgxEpochData
Software Guard Extensions Epoch 1 >> @ Offset >> 0x8 in >> CpuSetupSgxEpochData

CpuSetup - VarStore: VarStoreId: 0x11 @ GUID - B08F97FF-E6E8-4193-A997-5E9E9B0ADB32
CpuSetupSgxEpochData - VarStore: VarStoreId: 0x15 @ GUID - B08F97FF-E6E8-4193-A997-5E9E9B0ADB32

ForPRMRR - the following, this is all you need to edit (in CPUSetup)
SW Guard Extensions (SGX) (Default = Software Controlled 02) >> Change to = Enabled >> Change offset 0xE0 >> From 02 >> To 01 = Enabled - In your image above, this already set to 01, so nothing to do here
PRMRR Size, VarStoreInfo (VarOffset/VarName): (Default = 00 00 00 00) >> Change to max of 256MB >> Change offset at 0xE7 from >> 00 >> Change to >> 10 (This will actually be 00 00 00 10, but you only need to change that last byte here, rest already 00)
I circled the "PRMRR size" settings bytes in image below, you just need to change 0xE7


Or, if you want, you can do the following, and dump your NVRAM, send to me and I will make the two edits directly above, well just one I guess then you flash back. But you are right there, I think you can do it

Go here, get ME System Tools package V14.0.20+, in section C.2 at post #2 - Intel Management Engine: Drivers, Firmware & System Tools
For this, you must have ME drivers installed in windows, or use EFI version - Secure Boot needs to be disabled while we work, you can enable once done. Also, remove any BIOS password, and disable TPM/Encryption if enabled, do all this before you do below dump
In windows, FPT must be ran from ADMIN CMD Prompt, logged in as Admin does not matter, must be Admin CMD Prompt and say Admin at top of CMD Window
Here's registry fix to add this to right click if you need, install/merge, then reboot, and you can right click anywhere in folder to "Open CMD Prompt here as Admin"
http://s000.tinyupload.com/index.php?fil...134606820377175 << This is for Win10. If you have Win7, hold shift, right click folder that contains FPTw.exe, and choose Open Admin CMD Prompt here

Then, make NVRAM dump using command below and send me the file
FPTw.exe -a 0x1000000 -l 0x40000 -d NV1.bin

Hmm, I seem to have edited the values but I'm still getting an error of enabling Intel SGX and setting PRMRR size to 128 MB when playing back my UHD discs. Could it be I'm doing something wrongly? I could send you the bios file, is there any way you could test run or see what is wrong with the file?

@yeojhg - After you save in RU, reboot back in there again and check to confirm your change stayed set
If it does not stay, then dump NVRAM how I mentioned at end of post #9 and send to me, I will edit it for you and show you how to flash it back.

SGX may have other requirements? Or may require certain drivers be installed too. Did you look this up, to be sure your hardware all supports it etc?
Sorry, I know nothing about this, I only know BIOS, don't even know what SGX or PRMRR is

It does not seem to stay, I've tried dumping the NVRAM but it the command prompt it says FPTw.exe is not recognised as an internal or external command, operable program or batch file.

Hi Bios,

I've tried doing the ftpw.exe command in the admin command prompt, but currently facing this problem (picture attached). Please advise, thanks!

@yeojhg You typed 'ftp' followed by 'enter'. That opens an ftp session. ftp = file transfer protocol. See the different prompt? ("ftp>")? The next thing to do in an ftp ssession would be an "open ftp.servername.domain" then you'd be asked for username and password and could thereafter transfer files to/ from that server. I suppose that's not what you wanted here.



("quit" will close this ftp- session and bring you back to the command prompt)

Hi lfb6, my bad! It was a typo, I have corrected it but it still displays error message (picture attached), revert to post #12