summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAngel Pons <th3fanbus@gmail.com>2020-10-15 19:43:33 +0200
committerAngel Pons <th3fanbus@gmail.com>2020-10-22 19:59:30 +0000
commit92eab64a43098849dd0784c11620e3dbe9d8eb35 (patch)
treed548d48907d7cd4cc560ce6c1ba7448ba79ce3af
parent985d956833180679bcd8da8c9bbac7522d1f8b8e (diff)
downloadcoreboot-92eab64a43098849dd0784c11620e3dbe9d8eb35.tar.xz
configs: Add TXT-enabled config for Asrock B85M Pro4
This config selects the necessary options to enable Intel TXT on the Asrock B85M Pro4, and allows the code to be build-tested. Note that the current TXT code will not work, as it was written for Broadwell-DE. Subsequent commits will adapt the code as necessary to work on Haswell. Compatible BIOS and SINIT ACMs can be retrieved from a firmware update for the Supermicro X10SLH. As they are not in the blobs repository, use the STM binary as a placeholder so as to allow build-testing the code. Change-Id: Ibf8db5fdfac5b527520023277c6370f6efa71717 Signed-off-by: Angel Pons <th3fanbus@gmail.com> Reviewed-on: https://review.coreboot.org/c/coreboot/+/46489 Reviewed-by: Arthur Heymans <arthur@aheymans.xyz> Reviewed-by: Paul Menzel <paulepanter@users.sourceforge.net> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
-rw-r--r--configs/config.asrock_b85m_pro4.tpm2_txt_placeholder_acms10
1 files changed, 10 insertions, 0 deletions
diff --git a/configs/config.asrock_b85m_pro4.tpm2_txt_placeholder_acms b/configs/config.asrock_b85m_pro4.tpm2_txt_placeholder_acms
new file mode 100644
index 0000000000..856701fee8
--- /dev/null
+++ b/configs/config.asrock_b85m_pro4.tpm2_txt_placeholder_acms
@@ -0,0 +1,10 @@
+# Known-working configuration to boot with TXT enabled. Since BIOS
+# and SINIT ACM blobs are missing, use something else as placeholder.
+# Used ACMs were extracted from a Supermicro X10SLH firmware update.
+CONFIG_VENDOR_ASROCK=y
+CONFIG_BOARD_ASROCK_B85M_PRO4=y
+CONFIG_USER_TPM2=y
+CONFIG_INTEL_TXT=y
+CONFIG_INTEL_TXT_BIOSACM_FILE="3rdparty/blobs/cpu/intel/stm/stm.bin"
+CONFIG_INTEL_TXT_SINITACM_FILE="3rdparty/blobs/cpu/intel/stm/stm.bin"
+CONFIG_INTEL_TXT_LOGGING=y