Is there a coreboot BIOS flash available for an unknown motherboard in a customized PC? The motherboard is more than 10 years old. If there is a coreboot BIOS flash for it, will it add secure boot and TPM 2.0?
--
Disclaimer
The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful.
This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast, a leader in email security and cyber resilience. Mimecast integrates email defenses with brand protection, security awareness training, web security, compliance and other essential capabilities. Mimecast helps protect large and small organizations from malicious activity, human error and technology failure; and to lead the movement toward building a more resilient world. To find out more, visit our website.
Hi Orion,
On 2024-04-09 18:25, Orion Brewer wrote:
Is there a coreboot BIOS flash available for an unknown motherboard in a customized PC? The motherboard is more than 10 years old. If there is a coreboot BIOS flash for it, will it add secure boot and TPM 2.0?
It's impossible to say without more information about exactly what board it is. coreboot (and firmware in general) is board specific, and must be ported to each one individually. For a board port to be possible, coreboot also needs to have code to support critical components like the processor family and chipset.
Whether or not it will add secure boot depends on the payload. coreboot itself is only responsible for initializing the hardware, and then it hands off control to a payload, which is typically something capable of booting the operating system. Secure boot is part of UEFI, so you would need the edk2 payload, which is an implementation of the UEFI specification. As for the TPM, technically software or firmware based TPMs are possible, but I'm not aware of any implementation that works with coreboot. Often TPMs are dedicated chips soldered to the mainboard.
Cheers, Nicholas