From b1c1b2cc5e78267fadb9001587f66566cf19159e Mon Sep 17 00:00:00 2001 From: Ilya Smirnov Date: Tue, 19 Feb 2019 09:19:35 -0600 Subject: Secureboot: Enhanced Multinode Comm: TPM_POISONED This commit introduces a new attribute TPM_POISONED used to indicate that a certain TPM was poisoned during the boot. This attribute is also used to adjust the trustedboot flag in HDAT: if the primary TPM was poisoned during the IPL, the trustedboot setting is turned off in HDAT. Change-Id: I32ff6e79ebba0e38c0e8b4b9bd4aa0f52a250d9a RTC: 203645 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/72129 Reviewed-by: Michael Baiocchi Tested-by: Jenkins Server Tested-by: Jenkins OP Build CI Tested-by: Jenkins OP HW Tested-by: FSP CI Jenkins Reviewed-by: Nicholas E. Bofferding Reviewed-by: Daniel M. Crowell --- src/include/usr/secureboot/trustedbootif.H | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/include/usr/secureboot') diff --git a/src/include/usr/secureboot/trustedbootif.H b/src/include/usr/secureboot/trustedbootif.H index 72849c2eb..66d44852e 100644 --- a/src/include/usr/secureboot/trustedbootif.H +++ b/src/include/usr/secureboot/trustedbootif.H @@ -322,7 +322,7 @@ namespace TRUSTEDBOOT * @return errlHndl_t nullptr if successful or error log otherwise. Failure * to poison a TPM will result in deconfiguring the TPM. */ - errlHndl_t poisonTpm(const TpmTarget* i_pTpm); + errlHndl_t poisonTpm(TpmTarget* i_pTpm); /** * @brief Poison all functional TPMs on the node. Calls poisonTpm for -- cgit v1.2.1