Attention is currently required from: Miriam Polzer, Yu-Ping Wu. Andrey Pronin has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59097 )
Change subject: security/vboot: Add NVRAM counter for TPM 2.0 ......................................................................
Patch Set 6:
(2 comments)
File src/security/vboot/secdata_tpm.c:
https://review.coreboot.org/c/coreboot/+/59097/comment/9860b778_48281ba2 PS6, Line 120: TPMA_NV_WRITE_STCLEAR do we need the ability to WriteLock until reboot?
https://review.coreboot.org/c/coreboot/+/59097/comment/43bf9498_e0a10335 PS6, Line 385: enterprise_rollback_create_counter adding it here only creates the counter on new devices, which didn't pass factory_initialize yet (happens on the first boot with coreboot normally). is it what's expected?