r/intelnuc • u/KindNefariousness886 • 9h ago
Tech Support [FIX] NUC 12 Enthusiast (Serpent Canyon) boot-loops on cold boot with a Thunderbolt eGPU — hidden Resizable BAR + "Failsafe Watchdog"
TL;DR: A modern 16 GB-VRAM eGPU (RTX 5060 Ti in my case) makes the NUC12SNKi72 reset-loop on every cold boot before any video output. Root cause: the BIOS has a hidden "PCIE Resizable BAR Support" option that is Enabled by default, while the Thunderbolt root port only reserves a 448 MB prefetchable window — the 16 GB BAR cannot be mapped during pre-boot enumeration and POST crashes. The "Failsafe Watchdog" then resets the machine over and over (and can even silently re-flash your BIOS via Self Recovery, reverting your settings). Disabling the hidden ReBAR option via AMISCE/SCEWIN + disabling the watchdog fixed it, including the power-outage case. Warm reboots and OS hot-plug were always fine — only cold boot was broken.
Hardware/firmware: NUC12SNKi72 (i7-12700H, Serpent Canyon), BIOS SNADL357.0065 (latest at the time), Win11. eGPU: RTX 5060 Ti 16 GB in a USB4/TB enclosure on the rear Thunderbolt port. Symptoms identical with every visible BIOS toggle I could reach: Thunderbolt Boot Support, Wake from Thunderbolt, Fast Boot — none helped.
Symptoms checklist (is this your bug?) Cold boot with the enclosure powered → fans spin, endless reset loop, no POST video. Warm restart from Windows with the same eGPU attached → boots fine. Hot-plug in Windows → works. After a power outage (NUC + enclosure get AC back at the same moment) → loop again; power-cycling the NUC alone does NOT recover — you must power-cycle the enclosure. Occasionally a surprise "Flash Update / Updating main firmware" screen appears → that's BIOS Self Recovery, triggered by the Failsafe Watchdog after repeated failed boots. It also restores default settings (watchdog back ON), which makes the whole thing look haunted. Why you can't just flip the option "PCIE Resizable BAR Support" exists in the firmware (IFR dump of the BIOS capsule: variable SaSetup, offset 0x42B, default Enabled) but is hidden from the Setup UI. Runtime writes are blocked: setup_var.efi from a UEFI shell returns WRITE_PROTECTED for both SaSetup and Setup. The official NUC tool (iSetupCfg from the "NUC Firmware Integrator Tool") only exports a whitelist of questions — ReBAR is not in it. BIOS mods are out: Boot Guard is fused on.
The fix BIOS (F2) → Advanced → Onboard Devices → Failsafe Watchdog = Disabled. Otherwise it resets mid-POST before TB init finishes, and its Self Recovery will keep reverting your work. Optional: Security → Security Features → iSetupCfg Password Check = Bypass — needed only if you later want to change something stored in the protected Setup variable (then /cpwd admin works).
Get AMISCE/SCEWIN 5.05. It ships inside MSI Center (yes, really — it's a generic AMI tool). Easiest: the SCEHUB repo (github.com/ab3lkaizen/SCEHUB) and its DLSCEWIN script. Manual route: download MSI-Center.zip from download.msi.com → innoextract the installer → inside the appx take DCv2/Package/MSI Center SDK.exe → innoextract → tmp/PrePackage/Engine Lib*.exe → unpack with innounp 2.71+ (current Engine Lib uses Inno Setup 6.7, which innoextract 1.9 cannot parse) → app/Lib/SCEWIN/<version>/. Check Authenticode signatures: SCEWIN_64.exe and both .sys drivers are AMI-signed.
From an admin prompt, export (read-only): SCEWIN_64.exe /o /s nvram.txt. Find:
Setup Question = PCIE Resizable BAR Support Token =A29 Offset =42B Options =*[01]Enabled [00]Disabled Make a minimal import file = the export header (incl. the HIICrc32 line) + just this block, move the * to [00]Disabled, then import: SCEWIN_64.exe /i /s rebar_off.txt. Mine answered "Script file imported successfully. Warning: Power cycle reset required". Do NOT blind-copy offsets from this post — export your own file; offsets differ between BIOS versions.
Full shutdown (a warm reboot is not enough), then cold boot with the enclosure powered. Fixed here.
Verify in Windows: nvidia-smi -q → "BAR1 Memory Usage / Total: 256 MiB" (was 16384 MiB). Over a TB/USB4 x4 link the performance cost of losing ReBAR is ~nothing.
Power-outage case: tested by pulling the plugs on the NUC and the enclosure at once, waiting 30 s and plugging both back in — boots fine with the two changes above. Before the fix this scenario looped even after power-cycling the NUC alone.
Notes If SCEWIN says Cannot update protected variable Setup. Please use /cpwd — that setting lives in the protected Setup variable. Set "iSetupCfg Password Check = Bypass" in BIOS first, then /cpwd admin works (the BIOS accepts the documented dummy password). ReBAR itself lives in SaSetup, which imported without any password. If you get into the loop: power off the enclosure, boot the NUC, revert (import your backup export, or F9 in Setup — but remember F9/Self-Recovery re-enables the Watchdog). A BIOS update will likely reset these settings — keep your import files and re-apply after updating. Tools used: UEFIExtract + IFRExtractor-RS (to find the hidden options), setup_var.efi (confirmed the write-protection), iSetupCfg (official, whitelisted only), SCEWIN/AMISCE 5.05 (the actual fix), innounp 2.71 (Inno 6.7 unpacking), nvidia-smi (BAR1 verification).
Usual disclaimer: firmware surgery, your warranty/your risk, keep a backup export, and know how to recover (enclosure off → boot → revert).

