94fe086a06
Actual support CBnT will be added later on. Change-Id: Icc35c5e6c74d002efee43cc05ecc8023e00631e0 Signed-off-by: Arthur Heymans <arthur@aheymans.xyz> Reviewed-on: https://review.coreboot.org/c/coreboot/+/46456 Reviewed-by: Angel Pons <th3fanbus@gmail.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
74 lines
2.1 KiB
Plaintext
74 lines
2.1 KiB
Plaintext
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
config INTEL_TXT
|
|
bool "Intel TXT support"
|
|
default n
|
|
select MRC_SETTINGS_PROTECT if CACHE_MRC_SETTINGS
|
|
select ENABLE_VMX if CPU_INTEL_COMMON
|
|
select AP_IN_SIPI_WAIT
|
|
depends on (TPM1 || TPM2)
|
|
depends on CPU_INTEL_FIRMWARE_INTERFACE_TABLE
|
|
depends on PLATFORM_HAS_DRAM_CLEAR
|
|
depends on (SOC_INTEL_COMMON_BLOCK_SA || HAVE_CF9_RESET)
|
|
|
|
if INTEL_TXT
|
|
|
|
config INTEL_TXT_BIOSACM_FILE
|
|
string "BIOS ACM file"
|
|
default "3rdparty/blobs/soc/intel/skylake/biosacm.bin" if SOC_INTEL_COMMON_SKYLAKE_BASE
|
|
help
|
|
Intel TXT BIOS ACM file. This file can be obtained through privileged
|
|
access to Intel resources. Or for some platforms found inside the
|
|
blob repository.
|
|
|
|
config INTEL_TXT_SINITACM_FILE
|
|
string "SINIT ACM file"
|
|
default "3rdparty/blobs/soc/intel/skylake/sinitacm.bin" if SOC_INTEL_COMMON_SKYLAKE_BASE
|
|
help
|
|
Intel TXT SINIT ACM file. This file can be obtained through privileged
|
|
access to Intel resources. Or for some platforms found inside the
|
|
blob repository.
|
|
|
|
config INTEL_TXT_DPR_SIZE
|
|
int
|
|
range 0 255
|
|
default 3
|
|
help
|
|
Specify the size the DPR region needs to have. On at least Haswell,
|
|
the MRC does not have an input to specify the size of DPR, so this
|
|
field is only used to check if the programmed size is large enough.
|
|
|
|
config INTEL_TXT_TEST_BIOS_ACM_CALLING_CODE
|
|
bool "Test BIOS ACM calling code with NOP function"
|
|
help
|
|
Run a NOP function of the BIOS ACM to check that the ACM calling code
|
|
is functioning properly. Use in pre-production environments only!
|
|
|
|
config INTEL_TXT_LOGGING
|
|
bool "Enable verbose logging"
|
|
help
|
|
Print more TXT related debug output.
|
|
Use in pre-production environments only!
|
|
|
|
config INTEL_TXT_BIOSACM_ALIGNMENT
|
|
hex
|
|
default 0x40000 if INTEL_CBNT_SUPPORT
|
|
default 0x20000 # 128 KiB
|
|
help
|
|
Exceptions are Ivy and Sandy Bridge with 64 KiB and Purley with 256 KiB
|
|
alignment size. If necessary, override from platform-specific Kconfig.
|
|
|
|
config INTEL_TXT_CBFS_BIOS_POLICY
|
|
string
|
|
default "txt_bios_policy.bin"
|
|
|
|
config INTEL_TXT_CBFS_BIOS_ACM
|
|
string
|
|
default "txt_bios_acm.bin"
|
|
|
|
config INTEL_TXT_CBFS_SINIT_ACM
|
|
string
|
|
default "txt_sinit_acm.bin"
|
|
|
|
endif
|