MSI advanced BIOS undervolt

Yesterday I undervolted my laptop (GE66 10SFS) for the first time through its BIOS.

In the BIOS, I could open its hidden advanced menus by pressing four keys: right shift + right ctrl + left alt + F2 at the same time. I was able to manually give an offset -.075 and successfully passed all four 5-minute stress tests of XTU.

But searching about undervolting, I found out that several manufacturers had already updated their BIOS to disable its undervolting menu for Plundervolt security vulnerability last year.

https://plundervolt.com/

MSI advanced BIOS undervolt

Intel and OEMs have killed undervolting and there is little that you can do about it

Undervolting is dead. Worse still, OEMs are killing the functionality on older machines too. Undervolting is no longer possible on recent Dell XPS laptops, for example, nor on the Surface Laptop 3 or Surface Pro 7.
MSI advanced BIOS undervolt
www.notebookcheck.net

I would not use the undervolting if it is risky for security. But this is confusing. I saw an article which says 'Intel re-enables undervolting for some reference design laptops'.

MSI advanced BIOS undervolt

Intel re-enables undervolting for some reference design laptops

Undervolting has returned to a select number of laptops. Specifically, the functionality has been re-enabled on Intel QC71 laptops, which includes the XMG Fusion 15, Maingear Element and the Eluktronics MAG 15.
www.notebookcheck.net

As far as I know, only MSI provides in-BIOS undervolt menu (even though it is hidden by default) whereas other manufacturers still keep it locked.

So my question: Is undervolting through the latest version of MSI BIOS completely safe from the Plundervolt issue?

I've searched for this topic for hours and days, but I have failed to find out exactly which BIOS supports undervolving of Plundervolt-proof.

Plundervolt is related to Intel's SGX, and I saw the SGX was set to software-controlled in the hidden advanced settings by default (it must mean that my laptop uses the SGX feature).

Does latest MSI BIOS supports undervoltting which is already patched for Plundervolt, or it just provides a hidden setting to users to apply the undervoltting at their own risk?
I think @next3r says updating the Intel Management Engine https://en.wikipedia.org/wiki/Intel_Management_Engine you can be protected from Plundervolt
Anyway updating the ME is dangerous (if you flash the wrong firmware than you need to de-solder the chip to re-flash with appropriate firmware using an eeprom programmer) and for sure not supported. It is something you don't want to do unless you are forced somehow or just playing and learning with an old PC.

If the goal is to lower the temperature during normal usage you can lower the CPU Frequency via Dragon Center
MSI advanced BIOS undervolt

MSI advanced BIOS undervolt

MSI advanced BIOS undervolt

You can also lower the Freq per each core ... sure you will loose performance but at least you will have a stable and secure system.
When ever you need performance just go to Dragon Center and select "Extreme Performance" in User Scenario.
This is simple and supported by MSI ... there are other tools if you do not want Dragon Center. Anyway DC should be already installed on your laptop.
Dragon Center has an alternative module called "DPC Latency Tuner" that can be installed that can control a few more parameters (Ratio Mode, EIST, Turbo mode ...).
The finest control is in BIOS anyway you have to reboot ...
All in all DC User Scenario profiles is an easy starting point
Just to be clear ... I am not saying I love DC or that is the best toll ...
Cheers
Best
Furna said:
I think @next3r says updating the Intel Management Engine https://en.wikipedia.org/wiki/Intel_Management_Engine you can be protected from Plundervolt
Anyway updating the ME is dangerous (if you flash the wrong firmware than you need to de-solder the chip to re-flash with appropriate firmware using an eeprom programmer) and for sure not supported. It is something you don't want to do unless you are forced somehow or just playing and learning with an old PC.

If the goal is to lower the temperature during normal usage you can lower the CPU Frequency via Dragon Center
View attachment 145074
View attachment 145075
View attachment 145076
You can also lower the Freq per each core ... sure you will loose performance but at least you will have a stable and secure system.
When ever you need performance just go to Dragon Center and select "Extreme Performance" in User Scenario.
This is simple and supported by MSI ... there are other tools if you do not want Dragon Center. Anyway DC should be already installed on your laptop.
Dragon Center has an alternative module called "DPC Latency Tuner" that can be installed that can control a few more parameters (Ratio Mode, EIST, Turbo mode ...).
The finest control is in BIOS anyway you have to reboot ...
All in all DC User Scenario profiles is an easy starting point
Just to be clear ... I am not saying I love DC or that is the best toll ...
Cheers
Best
Click to expand...
this look good ,.,,.but this not notebook ???

edit
as far as possible in new Dragon Center --use this
most better than bad under-volt
MSI advanced BIOS undervolt
// fan curve ,,.and all must be OK

ME fw and microcode --I think only official updates "but all last come only from ASUS"
ME drivers - possitible send
microcode Extension for windows - possitible send ,.,.,only must send windows build name / cpu name

more cannot be done for security :-)