Unknown public key & FTPR partition signature invalid

[eabase]

I was using this:

• https://github.com/daemon32/me_cleaner

because he had some fix that seemed relevant to my machine.

Here I have the following machine/mobo as mentioned here:

# PC:
# Lenovo Legion Slim 7 16IRH8

# CPU
# Name    : 13th Gen Intel(R) Core(TM) i9-13900H
# Codename: Raptor Lake-H

# Mother board
# Chipset: Intel Alder Lake-P PCH

# GPU
# Raptor Lake-P/U GT2

# BIOS fw
# M0ME04WW.bin

The *.bin I got from using innoextract, as shown here, including some MEA output.

Running the check command (-c) I get the following Warning/Error:

# python me_cleaner.py -c M0ME04WW.bin

ME/TXE image detected
Found FPT header at 0x10
Found 20 partition(s)
Found FTPR header: FTPR partition spans from 0x1268 to 0x136268
Found FTPR manifest at 0x154c
ME/TXE firmware version 16.1.38.2676 (generation 7)

WARNING Unknown public key e7155f4342af9d1b7e4cac467190d382
        Assuming Intel ME
        Please report this warning to the project's maintainer!
Checking the FTPR RSA signature... INVALID!!
The FTPR partition signature is not valid. Is the input ME/TXE image valid?

---

What's the problem and what can I try next?

BTW. It seem that lenovo separates the ME from the BIOS.

m0me04ww.exe   # Management Engine ?
m0cn42ww.exe   # BIOS

I was able unpack/extract the BIOS file, using 7zip.

  Length Name
  ------ ----
18830696 ILYG1_QS.bin
   10574 H2OFFT.cat
  627200 msvcr90.dll
  851456 msvcp90.dll
 1679864 mfc90u.dll
  286664 BiosImageProcx64.dll
 1353248 InterToolx64.efi
 2460776 H2OFFT-Wx64.exe
  225560 FWUpdLcl.exe
   42440 FlsHook.exe
    6668 H2OFFT.inf
   57079 platform.ini
     550 Microsoft.VC90.MFC.manifest
     526 Microsoft.VC90.CRT.manifest
   48008 H2OFFT64.sys
  105886 Ding.wav


# file  *
BiosImageProcx64.dll:        PE32+ executable for MS Windows 5.02 (DLL), x86-64, 6 sections
Ding.wav:                    RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz
FWUpdLcl.exe:                PE32 executable for MS Windows 5.01 (console), Intel i386, 5 sections
FlsHook.exe:                 PE32+ executable for MS Windows 5.02 (GUI), x86-64, 5 sections
H2OFFT-Wx64.exe:             PE32+ executable for MS Windows 5.02 (GUI), x86-64, 5 sections
H2OFFT.cat:                  DER Encoded PKCS#7 Signed Data
H2OFFT.inf:                  Windows setup INFormation
H2OFFT64.sys:                PE32+ executable for MS Windows 10.00 (native), x86-64, 8 sections
ILYG1_QS.bin:                PE32+ executable for EFI (application), x86-64, 4 sections
InterToolx64.efi:            PE32+ executable for EFI (application), x86-64, 5 sections
Microsoft.VC90.CRT.manifest: XML 1.0 document, ASCII text, with CRLF line terminators
Microsoft.VC90.MFC.manifest: XML 1.0 document, ASCII text, with CRLF line terminators
exit:                        directory
mfc90u.dll:                  PE32+ executable for MS Windows 5.02 (DLL), x86-64, 6 sections
msvcp90.dll:                 PE32+ executable for MS Windows 5.02 (DLL), x86-64, 6 sections
msvcr90.dll:                 PE32+ executable for MS Windows 5.02 (DLL), x86-64, 6 sections
platform.ini:                ASCII text, with CRLF line terminators

and the H2OFFT-Wx64.exe is GUI app, but can be run from CLI, with some minor issues in powrshell. Maybe it was meant to be run in CMD under IBM437 or so.

---

---

[eabase]

@daemon32 @corna

I found a lot of Intel docs for Raptor Lake (formerly Alder Lake) (and all others) here:

• https://github.com/intel/FSP/tree/master/RaptorLakeFspBinPkg/Client/RaptorLakeP
• https://github.com/intel/FSP/blob/master/RaptorLakeFspBinPkg/Docs/AlderLake_FSP_Integration_Guide.pdf

Maybe those could be helpful?