[coreboot-gerrit] Change in coreboot[master]: nb/intel/nehalem: Add a VBOOT TPM init workaround

[Julius Werner (Code Review)]

Julius Werner has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/36027 )

Change subject: nb/intel/nehalem: Add a VBOOT TPM init workaround
......................................................................

Patch Set 5: Code-Review-1

This is really undermining basic assumptions in vboot (e.g. that the firmware TPM NVRAM space is always writable during firmware verification, so I would rather not go in this direction, even behind a Kconfig. One of the vboot platform requirements is that the platform can reset itself, including the TPM. If a platform can't do that, then it can't fully run vboot (it should set MOCK_SECDATA instead).

Can you explain more about why/when this reset is needed? Why can't you just reset the whole board (including TPM) in that case instead?