Attention is currently required from: Angel Pons. Michał Żygowski has posted comments on this change. ( https://review.coreboot.org/c/coreboot/+/59520 )
Change subject: security/intel/txt: Fix GETSEC checks in romstage ......................................................................
Patch Set 3:
(1 comment)
Commit Message:
https://review.coreboot.org/c/coreboot/+/59520/comment/57916b2b_4a7579eb PS3, Line 11: Also noticed that the lock bit : of IA32_FEATURE_CONTROL cannot be cleared by issuing neither global : reset nor full reset on Sandybridge/Ivybridge platforms which results : in a reset loop.
Huh, this is very unusual. SNB BWG says the MSR is locked "until an S5 reset occurs".
Well, I was also surprised I cannot unlock this MSR with full_reset on Dell OptiPlex 9010. Fortunately, this MSR does not need to be set to call GETSEC CAPABILITIES or ENTERACCS according to Intel SDM
-
Michał Żygowski (Code Review)