Commit Graph

12 Commits

Author SHA1 Message Date
Tim Crawford
105e74b146 edk2: Enable Secure Boot support
This enables *support* for Secure Boot. It is not recommended to enable
Secure Boot. There is no firmware UI for managing the state or keys.

The system will default to disabled in Setup Mode:

    $ mokutil --sb-state
    SecureBoot disabled
    Platform is in Setup Mode

This is sufficient to install Windows 11.

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Jeremy Soller
a1af362c81 Use RPL-H FSP for oryp11 2023-04-03 13:23:12 -06:00
Jeremy Soller
3af1e42200 Apply model renames to configs and readmes 2023-04-03 13:23:12 -06:00
Jeremy Soller
800ff9acda Rename addp3 to oryp11 2023-04-03 13:23:12 -06:00
Jeremy Soller
cff97142e8 Rename oryp11 to serw13 2023-04-03 13:23:12 -06:00
Tim Crawford
955be3aa03 coreboot: Drop RUN_FSP_GOP selection
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
6526291d71 oryp11: Add ec.config, symlink and use FSP
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
8933544389 oryp11: Add config files
- Specify chip.txt for external flashing
- Copy IntelGopDriver.inf so GOP is used
- Copy edk2.config to build with correct configs

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
2a568cfb2e oryp11: Update CSME
- Disable Boot Guard
- Disable PTT
- Disable locking the descriptor

Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
e65a4d4ef5 Add coreboot configs for oryp11, gaze18-3050
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
03ef3bde94 models: Add oryp11 blobs
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00
Tim Crawford
ae90538df1 models: Add oryp11 extract
Signed-off-by: Tim Crawford <tcrawford@system76.com>
2023-04-03 13:23:12 -06:00