Commit Graph

4 Commits

Author SHA1 Message Date
Tim Crawford
105e74b146 edk2: Enable Secure Boot support
This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.

The system will default to disabled in Setup Mode:

    $ mokutil --sb-state
    SecureBoot disabled
    Platform is in Setup Mode

This is sufficient to install Windows 11.

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
ce389aab14 coreboot: Drop RUN_FSP_GOP selection
This choice is the default for boards that select INTEL_GMA_HAVE_VBT and
do not use libgfxinit.

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-02-10 15:45:26 -07:00
Tim Crawford
280f061470 oryp10: Update CSME
- Disable Boot Guard
- Disable PTT
- Disable locking the descriptor

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2022-09-06 09:48:49 -06:00
Tim Crawford
1169a60ca5 oryp10: Add Oryx Pro 10
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2022-09-06 09:48:49 -06:00