coreboot: check Cr50 PM mode on normal boot
Under some scenarios the key ladder on the Cr50 can get disabled. If this state is detected, trigger a reboot of the Cr50 to restore full TPM functionality. BUG=b:121463033 BRANCH=none TEST=Built coreboot on sarien and grunt platforms. TEST=Ran 'gsctool -a -m disable' and reboot. Verified coreboot sends VENDOR_CC_IMMEDIATE_RESET command to Cr50 and that the Cr50 resets and then the platform boots normally. TEST=Performed Cr50 rollback to 0.0.22 which does not support the VENDOR_CC_TPM_MODE command, confirmed that platform boots normally and the coreboot log captures the unsupported command. Tested-by: Keith Short <keithshort@chromium.org> Change-Id: I70e012efaf1079d43890e909bc6b5015bef6835a Signed-off-by: Keith Short <keithshort@chromium.org> Reviewed-on: https://review.coreboot.org/c/31260 Tested-by: build bot (Jenkins) <no-reply@coreboot.org> Reviewed-by: Julius Werner <jwerner@chromium.org>
This commit is contained in:
committed by
Patrick Georgi
parent
91be00ef1b
commit
e0f3400547
@@ -33,8 +33,11 @@ static inline void mark_watchdog_tombstone(void) { return; }
|
||||
static inline void reboot_from_watchdog(void) { return; }
|
||||
#endif /* CONFIG_CHROMEOS */
|
||||
|
||||
/* Defined as weak function in cr50_enable_update.c */
|
||||
void mainboard_cr50_update_reset(void);
|
||||
/**
|
||||
* Perform any platform specific actions required prior to resetting the Cr50.
|
||||
* Defined as weak function in cr50_enable_update.c
|
||||
*/
|
||||
void mainboard_prepare_cr50_reset(void);
|
||||
|
||||
struct romstage_handoff;
|
||||
|
||||
|
Reference in New Issue
Block a user