Commit Graph

12 Commits

Author SHA1 Message Date
Tim Crawford
ec114b2385 edk2: Enable Secure Boot support
This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.

The system will default to disabled in Setup Mode:

    $ mokutil --sb-state
    SecureBoot disabled
    Platform is in Setup Mode

This is sufficient to install Windows 11.

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-03-07 10:22:09 -07:00
Jeremy Soller
2dda038952 Use RPL-H FSP for oryp11 2023-02-22 11:31:13 -07:00
Jeremy Soller
9d7ef8fb3a Apply model renames to configs and readmes 2023-02-22 08:09:24 -07:00
Jeremy Soller
c30161a28a Rename addp3 to oryp11 2023-02-22 08:05:25 -07:00
Jeremy Soller
94e6d375fa Rename oryp11 to serw13 2023-02-22 08:05:15 -07:00
Tim Crawford
ab7600f44d coreboot: Drop RUN_FSP_GOP selection
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-16 10:37:01 -07:00
Tim Crawford
afe6fc5f73 oryp11: Add ec.config, symlink and use FSP
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-10 11:53:20 -07:00
Tim Crawford
8e90fec1ea oryp11: Add config files
- Specify chip.txt for external flashing
- Copy IntelGopDriver.inf so GOP is used
- Copy edk2.config to build with correct configs

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-09 09:22:58 -07:00
Tim Crawford
836cbb0720 oryp11: Update CSME
- Disable Boot Guard
- Disable PTT
- Disable locking the descriptor

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-08 13:07:19 -07:00
Tim Crawford
e74b939c4b Add coreboot configs for oryp11, gaze18-3050
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-08 09:54:08 -07:00
Tim Crawford
bd4b768ef2 models: Add oryp11 blobs
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-03 11:22:33 -07:00
Tim Crawford
d5001a6b6f models: Add oryp11 extract
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-03 11:20:04 -07:00