util/intelmetool: Union Point support?

[Pete Smith]

Hi,

I have disabled the Intel ME firmware on a motherboard with Union Point
chipset, and wanted to use intelmetool to confirm that the ME indeed
has been disabled:

# intelmetool -m
Can't find ME PCI device

I have tried to create a patch that adds Union Point support:

=======================================================================
--- a/intelmetool.h
+++ b/intelmetool.h
@@ -437,6 +437,7 @@
 #define PCI_DEVICE_ID_INTEL_LEWISBURG_IE2 0xA1F9 /* IE Lewisburg #2 */
 #define PCI_DEVICE_ID_INTEL_LEWISBURG_IE3 0xA1FC /* IE Lewisburg #3 */
 #define PCI_DEVICE_ID_INTEL_CANNONLAKE 0xA360 /* Cannon Lake */
+#define PCI_DEVICE_ID_INTEL_UNIONPOINT 0xA2BA /* Union Point */

#define PCI_DEV_HAS_SUPPORTED_ME(x) ( \
    ((x) ==  PCI_DEVICE_ID_INTEL_COUGARPOINT_1) || \
@@ -491,4 +492,5 @@
    ((x) ==  PCI_DEVICE_ID_INTEL_LEWISBURG_IE2) || \
    ((x) ==  PCI_DEVICE_ID_INTEL_LEWISBURG_IE3) || \
    ((x) ==  PCI_DEVICE_ID_INTEL_CANNONLAKE) || \
+	((x) ==  PCI_DEVICE_ID_INTEL_UNIONPOINT) || \
    0)
=======================================================================

However, this does not seem to work:

# intelmetool -d -m
ME PCI device is hidden
RCBA addr: 0x00000000
Can't find ME PCI device

I got the information for the patch by running lspci -nn on another
completely identical system, as the HECI device is not showing on the
one I'm talking about here, after the ME has been disabled.

00:16.0 Communication controller [0780]: Intel Corporation 200 Series
PCH CSME HECI #1 [8086:a2ba]

Any ideas on what I can do to make intelmetool work with the Union
Point chipset?

Thanks in advance.

Best regards,
Pete Smith

[Michał Żygowski]

Hi Pete,
> However, this does not seem to work:
>
> # intelmetool -d -m
> ME PCI device is hidden
> RCBA addr: 0x00000000
> Can't find ME PCI device
>
> I got the information for the patch by running lspci -nn on another
> completely identical system, as the HECI device is not showing on the
> one I'm talking about here, after the ME has been disabled.
>
> 00:16.0 Communication controller [0780]: Intel Corporation 200 Series
> PCH CSME HECI #1 [8086:a2ba]

That's the side effect of disabling ME. Since ME is not functional after 
disabling, the HECI device is not discoverable either is hidden by BIOS.
Typically it is done by FSP so you have no control over it.

So when you disable the ME, AFAIK you have no software way to prove it 
on a running system.
> Any ideas on what I can do to make intelmetool work with the Union
> Point chipset?

intelmetool is not well suited for newer PCHs, because it looks for RCBA 
address which is no longer implemented on newer chipsets (it was on 
older microarchitectures pre-Skylake). intelmetool tried to unhide the 
HECI device through RCBA, but it is only possible to do via IOSF-SB PCR 
access on Skylake+ systems. I already have tried to implement it, 
however ran into a wall where IOSF_SB access is not working for the 
required register to unhide HECI when the ME is disabled. It looked like 
a dead end to me.
> Thanks in advance.
>
> Best regards,
> Pete Smith
> _______________________________________________
> coreboot mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]

Best regards,