You can disable Intel Management Engine by manually setting the bit a 0x1DE, which should be possible using flashrom with the internal programmer.
Keep in mind, doing this incorrectly can brick the board unless you have an external programmer. I have been able to flash the chip with the ch341a_spi, but it requires a special wson probe to interface with the chip.
I have done it on my system, and it removes mei from lsmod and device reference in /sys/class/mei. It’s been running for some hours now, so I believe it’s stable. The onboard wifi seems to need mei to work, and disabling mei makes the onboard wifi stop working.
I have only tested it with Dasharo, and it might not work with the stock MSI firmware. I’ve seen one person say it makes the stock firmware boot loop, which could be some protection in the msi firmware that detects the modification.
SMM BIOS Write Protection support and enable/disable option
AcpiView command to UEFI Shell
Platform will beep 12 times and blink HDD led on critical firmware errors, e.g. if memory training failed
PCIe 5.0 firmware caching in flash which allows to disable ME without losing PCIe 5.0 port functionality
cbmem logging from UEFI Payload is now supported and one can check complete firmware logs from OS using coreboot’s cbmem utility
Added Intel default settings for missing Alder Lake S CPUs
Changed
Added new ACPI Platform driver that installs coreboot exposed ACPI tables and all allows native EDK2 ACPI table protocol to install new tables, e.g. Firmware Performance Data Table, BGRT (Boot Logo) of VFCT (AMD GPU ACPI table)
Secure Boot is now disabled by default with all keys erased
Disabled PCIe ASPM and Clock PM for better PCIe device compatibility
Disabled GPIO programming by FSP, coreboot handles the GPIO completely. This additionally fixes a bug in FSP which did not enable SATA DEVSLP properly.
Changed Super I/O pin for PECI mode to reflect vendor firmware setting
Switched from IOT FSP to public ADL Client FSP
Switched to include microcode from public Intel microcode repository
Disabled PCIe hotplug
Network boot disabled by default, now configurable via menu option
Fixed
Vboot recovery popup is displayed before logo, so that logo do not disappear after popup is displayed
Incorrect USB2 PHY tuning values for USB-C ports causing hard USB controller lockups during USB enumeration and resulting in firmware hangs as long as USB Type-C devices were plugged or devices being unable to detect and enumerate in OS