[coreboot-gerrit] [S] Change in coreboot[master]: security/tpm: Add Kconfig to allow payload control of TPM1

[Matt DeVillier (Code Review)]

Attention is currently required from: Christian Walter, Julius Werner.

Matt DeVillier has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/74856 )

Change subject: security/tpm: Add Kconfig to allow payload control of TPM1
......................................................................

Patch Set 2:

(1 comment)

Patchset:

PS2:
> Well, did you rewrite your payload to actually send the TPM_Startup command, then? I'm not saying th […]

currently, edk2 expects coreboot to have initialized the TPM and set up the necessary ACPI tables - it's just providing the front end to manage the TPM state / allow the user to confirm TPM changes initiated by the OS. The only problem which I'm trying to work around is coreboot force-enabling the TPM, since it prevents the user / edk2 from disabling/deactivating it.