Hi, I bought a computer a couple years ago that I recently used Intel's official tools to tell if it had Boot Guard enabled. My original plan was to port and flash Coreboot onto this machine, but due to the presence of Boot Guard this is not possible, so I am stuck with OEM UEFI. If I wanted to "disable" it, would I have to replace the PCH, the CPU, or the PCH and the CPU? Reading through the CSME whitepaper, it seems that the FPF keys are burned into the PCH but I'm not sure if I'm interpreting this correctly. Other experts have previously said that FPF keys are burned into the CPU. I'm not super interested in buying a new PC, and chipsets are available for cheap.
So, to reiterate my question: do I need to replace the CPU and the PCH or just the PCH to disable Boot Guard?
