Hi,
new thinkpad's can't be used anymore for coreboot. Especially the U and Y Intel CPU Series. They come with Intel Boot Guard and you are won't be able to boot anything which is unsigned and not approved by OEM. This means the OEM are fusing SHA256 public key hashes into the southbridge.
For more details take a look at Intel Boot Guard architecture. It could be also confirmed by Secunet AG and Google.
Regards Zaolin
I should probably not post about any Thinkpads till I get to test the T410s port... but anyway has anybody considered a port for the incoming Broadwell Thinkpads - especially the T450s? It would definitely be a plus to know that there will be others hacking at it as well before buying ;)
On 02/06/2015 06:29 AM, Zaolin wrote:
Hi,
new thinkpad's can't be used anymore for coreboot. Especially the U and Y Intel CPU Series. They come with Intel Boot Guard and you are won't be able to boot anything which is unsigned and not approved by OEM. This means the OEM are fusing SHA256 public key hashes into the southbridge.
For more details take a look at Intel Boot Guard architecture. It could be also confirmed by Secunet AG and Google.
Regards Zaolin
That's scary to say the least. No more Thinkpads for us...
On Fri, 06 Feb 2015 11:16:48 -0600 Timothy Pearson tpearson@raptorengineeringinc.com wrote:
On 02/06/2015 06:29 AM, Zaolin wrote:
Hi,
new thinkpad's can't be used anymore for coreboot. Especially the U and Y Intel CPU Series. They come with Intel Boot Guard and you are won't be able to boot anything which is unsigned and not approved by OEM. This means the OEM are fusing SHA256 public key hashes into the southbridge.
For more details take a look at Intel Boot Guard architecture. It could be also confirmed by Secunet AG and Google.
Regards Zaolin
That's scary to say the least. No more Thinkpads for us...
Is it used by Lenovo? I think I can boot a USB-Linux on a new Thinkpad within a friendly Lenovo Store. How can it tested? What registers must be read?
Best, lynxis
-
Alexander Couzens -
Timothy Pearson -
Zaolin