summaryrefslogtreecommitdiff
path: root/src/drivers/intel/fsp2_0/Kconfig
diff options
context:
space:
mode:
Diffstat (limited to 'src/drivers/intel/fsp2_0/Kconfig')
-rw-r--r--src/drivers/intel/fsp2_0/Kconfig11
1 files changed, 10 insertions, 1 deletions
diff --git a/src/drivers/intel/fsp2_0/Kconfig b/src/drivers/intel/fsp2_0/Kconfig
index 3951e9a959..2b98542057 100644
--- a/src/drivers/intel/fsp2_0/Kconfig
+++ b/src/drivers/intel/fsp2_0/Kconfig
@@ -159,10 +159,19 @@ config DISPLAY_FSP_VERSION_INFO
config FSP2_0_USES_TPM_MRC_HASH
bool
depends on TPM1 || TPM2
- depends on VBOOT
+ depends on VBOOT && VBOOT_STARTS_IN_BOOTBLOCK
default y if HAS_RECOVERY_MRC_CACHE
default n
select VBOOT_HAS_REC_HASH_SPACE
+ help
+ Store hash of trained recovery MRC cache in NVRAM space in TPM.
+ Use the hash to validate recovery MRC cache before using it.
+ This hash needs to be updated every time recovery mode training
+ is recomputed, or if the hash does not match recovery MRC cache.
+ Selecting this option requires that TPM already be setup by this
+ point in time. Thus it is only compatible when the option
+ VBOOT_STARTS_IN_BOOTBLOCK is selected, which causes verstage and
+ TPM setup to occur prior to memory initialization.
config FSP_PLATFORM_MEMORY_SETTINGS_VERSIONS
bool