Anti evil maid and CoreBoot

General Discussion
1

Hi there,
A few days I came across the article about Anti evil maid in the documentation. It says: “If you cleaned your Intel Management Engine with e.g. me_cleaner while installing CoreBoot then you are out of luck.”
Does that mean that it is possible to use aem and CoreBoot if me_cleaner is not utilized while installing CoreBoot or do these two things don’t work together at all?

Thanks in advance.

2

maybe yes if you choose correct payload (ie: SeaBIOS)
that because

AEM is not compatible with (U)EFI boot. Legacy boot is required.

so only coreboot payload with legacy bios work

3

A few days I came across the article about Anti evil maid in the documentation. It says: “If you cleaned your Intel Management Engine with e.g. me_cleaner while installing CoreBoot then you are out of luck.”

CoreBoot has only recently added TXT support for some boards and
chipsets. If you have a supported device then you should be able to use
CoreBoot+AEM, though that will also depend on versions of TPM.
I don’t have any such device to test.

4

This info may not be useful to your situation, but I went down the path of trying to achieve AEM solutions myself. Checked out coreboot standard and the other custom bios. Realized it’s just cheaper and easier to get an x230 laptop for under 200 on used selling markets and go the route of using the heads flavor of coreboot with me_cleaner and a librem key. It just works.