[coreboot-gerrit] Change in coreboot[master]: [WIP]soc/intel/car: Add support for bootguard CAR

[Michael Niewöhner (Code Review)]

Michael Niewöhner has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/36682 )

Change subject: [WIP]soc/intel/car: Add support for bootguard CAR
......................................................................

Patch Set 1:

@Subrata I tried to test this but miserably failed :D I have an unfused/uncommited SoC here. The main problem seems to be that I don't know how to create a valid Manifest.

My understanding of the process is:
- Build coreboot bios region image
- Create a manifest and import it to the image using the Manifest Extension Utility
- Sign the manifest with the MEU
- Set the bootguard policy in FIT and add the pubkey hash
- add the signed bios image
- Build the final image with FIT

Can you confirm/correct this, please?