Intel® Bios Guard
#BiosGuard.1: Intel® Bios Guard SHOULD be used for a firmware update.
#BiosGuard.2: The platform MUST make sure all the processes are in SMM when performing the Intel® Bios Guard update.
#BiosGuard.3: Once Intel® Bios Guard is enabled, there MUST be no way to disable it.