Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WIP] Z690 Wifi - Msi ms7d25 ddr5 tpm2 #1489

Draft
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

ThePlexus
Copy link
Contributor

@ThePlexus ThePlexus commented Sep 1, 2023

This is a WIP. There was some older discussion, with pertinent detail around the way we can may get dTPM supported. Please see #1371

status:
Serial works, it boots and we see hello world on the monitor, but no TPM as yet (see below)
The board seems to have all regions unlocked for internal programmer.
Not added circleci yet.

connections

ME

  • Cant me_clean and reduce ME firmware on this generation of CPU. just how it is. We can use ME hap bit to disable ME 6d6178667269747a/me_cleaner@d6b313a
  • I set HAP the bit in download_BIOS_clean.sh by flipping 0x1DE to 0x11 - validated that setting this bit on factory firmware shows ME version 0.0.0.0 in factory BIOS.
  • As we cant shrink ME, it may be an idea to use VSCC mod by default on this board
  • could we make a patch and have coreboot measure the ME region for changes as part of measured boot?
  • the fTPM is not available with HAP set, though thats probably a good thing ;)
  • With HAP set we should be able to use dTPM module, with coreboot patches

Findings/WIP stuff

  • Switched to using kernet 5.9.17 tied to the x230 maximised config. This is because existing versions do not support the GPU. There are some versions before 5.9 which do support the GPU but require a kernel command switch which taints.
  • This is interesting for putting something on the screen during RAM training, which can take a bit of time - uGOP.
  • Coreboot VBOOT seems to use the onboard fTPM even with a dTPM attached. The above mentioned error still remains. This is going to take a bit more work. Please see WIP - Z690 A DDR5 / Msi ms7d25 TPM2 #1371 for possible pathway
    -Network at boot is untested and unlikely. dashro extract a binary blob to use in a UEFI payload https://github.com/Dasharo/coreboot/blob/msi_ms7d25/release/build.sh#L16

@tlaurion
Copy link
Collaborator

@ThePlexus This is sold so should be upstreamed and merged. Newer version of this code somewhere?

@ThePlexus
Copy link
Contributor Author

@ThePlexus This is sold so should be upstreamed and merged. Newer version of this code somewhere?

Hi @tlaurion - ive not been involved in any development since the code in this PR. New job and new baby have given me no time to work on much of anything not working hours or family time. I was super happy to see the Dasharo tech preview as the folks there and I did speak some time ago about taking this work forward, which is really great to see happening. Im looking forward to trying it out in the near future. I'd recommend reaching out to those folks about any upstreaming

@tlaurion
Copy link
Collaborator

tlaurion commented Aug 7, 2024

@ThePlexus @macpijan : putting as draft. Ideal would be 3mdeb/Dasharo creating PR matching Dasharo coreboot+Heads release so Head can be the rolling/testing upstream for next release.

Can you both interact and decide what is the best path forward so this can happen?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants