diff options
| author | Mike Baiocchi <mbaiocch@us.ibm.com> | 2017-02-10 09:06:46 -0600 |
|---|---|---|
| committer | Daniel M. Crowell <dcrowell@us.ibm.com> | 2017-03-15 17:27:23 -0400 |
| commit | e8b8f27d39f6633ff89f2dc541db77c802988685 (patch) | |
| tree | 5c7c43d099f605881a11ffa7a3cf394220bb76f5 /src/include/usr/secureboot | |
| parent | d5358edf5e5ff7835099e4503e4bcf1518e24024 (diff) | |
| download | talos-hostboot-e8b8f27d39f6633ff89f2dc541db77c802988685.tar.gz talos-hostboot-e8b8f27d39f6633ff89f2dc541db77c802988685.zip | |
Trace Processor Security Registers; add them to Secure Error Logs
This commit adds a trace of the Security Switch and CBS Control/Status
registers for all processors in the system. These registers are also
captured for Security-specific error logs.
Change-Id: I245815c720725a9aaf15a3cbad9a50b3288fc1f9
RTC:165205
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/37290
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com>
Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com>
Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
Diffstat (limited to 'src/include/usr/secureboot')
| -rw-r--r-- | src/include/usr/secureboot/service.H | 11 | ||||
| -rw-r--r-- | src/include/usr/secureboot/settings.H | 3 |
2 files changed, 13 insertions, 1 deletions
diff --git a/src/include/usr/secureboot/service.H b/src/include/usr/secureboot/service.H index 73b254fd8..86da6a64b 100644 --- a/src/include/usr/secureboot/service.H +++ b/src/include/usr/secureboot/service.H @@ -64,6 +64,17 @@ namespace SECUREBOOT */ errlHndl_t initializeSecureRomManager(void); + /** + * @brief Trace the Security Settings on each functional processor + * + * @param[in] i_doConsoleTrace Optional variable that determines if + * register values are traced to the CONSOLE. + * Default is false + * + * @return errlHndl_t nullptr on success, else pointer to error log + */ + errlHndl_t traceSecuritySettings(bool i_doConsoleTrace = false); + /** @brief Determines if Secureboot is enabled. */ diff --git a/src/include/usr/secureboot/settings.H b/src/include/usr/secureboot/settings.H index 08681e08e..1de694948 100644 --- a/src/include/usr/secureboot/settings.H +++ b/src/include/usr/secureboot/settings.H @@ -69,7 +69,8 @@ namespace SECUREBOOT SabBit = 0x0800000000000000ull, // Secure access JumperStateBit = 0x0400000000000000ull, // Secure jumper - StatusRegister = 0x00050001ull, + StatusRegister = 0x00050001ull, // used for SCOM operation + StatusRegisterFsi = 0x00002804ull, // used for FSI operation }; /** @class Settings |
