How do you disable Intel ME?

I saw Nitrokey was selling this: NitroPC | www.nitrokey.com

On their product page they mention that they disabled the Intel Management Engine. How did they go about doing that?

It is much easier for OEMs to do this than end users. One possible avenue is similar to what me_cleaner does.
Note: me_cleaner does not work on recent processor generations, and development is presently on hold.

System76 and Purism also sell computers with Intel ME disabled.

On the AMD side, PSP (the analog to Intel ME) is much more restricted in the first place and can be almost entirely disabled with a BIOS setting, by design (it still needs to run for the very earliest parts of the boot process). Some ASRock motherboards have been confirmed to include this BIOS setting, but not all motherboards do.

1 Like

related just in case: Intel ME: Myths and reality

I encourage you to read this post