I tried the BMC route, it didn't help.

As far as I can tell, the jumper dance was to enable the main BIOS to use the Management Engine controller to perform some other part of the flash, which would ordinarily be locked out with the jumpers in their normal position. But now that it's tried and failed, it won't try again, maybe?