Attention is currently required from: Michał Żygowski. Hello build bot (Jenkins), Angel Pons, Patrick Rudolph,
I'd like you to reexamine a change. Please visit
https://review.coreboot.org/c/coreboot/+/59513
to look at the new patch set (#3).
Change subject: security/intel/txt: Allow to set TXT BIOS Data Region version ......................................................................
security/intel/txt: Allow to set TXT BIOS Data Region version
TXT BIOS Data region version is checked by Trusted Boot code. Older versions of TBoot (e.g. 1.8.2) may refuse to set up the MLE if BDR version is not known. Provide an option to set the BDR version in case an older TBoot code is used. This is very useful for platforms with TPM 1.2.
TEST=Set BDR version to 4 and successfully boot QubesOS 4.0 with TBoot 1.8.2 on Dell OptiPlex 9010
Signed-off-by: Michał Żygowski michal.zygowski@3mdeb.com Change-Id: Ic2550bd4008559bd47de9e35f8b1c7b52e6e0f5f --- M src/security/intel/txt/Kconfig M src/security/intel/txt/ramstage.c 2 files changed, 13 insertions(+), 4 deletions(-)
git pull ssh://review.coreboot.org:29418/coreboot refs/changes/13/59513/3