Secure Boot: Support Phyp debug flag in HDAT

PHYP needs a way to know if SBE security backdoor is enabled
for debug purposes. This change creates a flag in TPM instance
data structure to indicate whether the backdoor is enabled. This
flag is passed by SBE to the hb bootloader; also added the flag
to indicate whether PCR is poisoned (default of 0).
The population of this flag will be implemented on Fleetwood.

Change-Id: I22305dbc9651134ba7dfe3b0bd3c760fe53c2c85
RTC: 188961
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/56045
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com>
Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com>
CI-Ready: Daniel M. Crowell <dcrowell@us.ibm.com>
Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>

1 files changed, 13 insertions, 1 deletions

diff --git a/src/usr/hdat/hdattpmdata.H b/src/usr/hdat/hdattpmdata.H
index f04403e1e..8bb07bcf5 100644
--- a/src/usr/hdat/hdattpmdata.H
+++ b/src/usr/hdat/hdattpmdata.H
@@ -86,6 +86,17 @@ struct hdatTpmData_t
 } __attribute__ ((packed));
 
 /**
+ * @brief Structure definition for TPM Configuration Flags
+ *
+ */
+struct hdatTpmConfigFlags_t
+{
+    uint8_t pcrPoisonedFlag : 1; // Intentionally break remote attestation
+                                 // of this TPM
+    uint8_t reserved : 7;
+} __attribute__ ((packed));
+
+/**
  *  @brief Structure definition for Secureboot TPM Instance Info
  */
 struct hdatSbTpmInstInfo_t
@@ -97,7 +108,8 @@ struct hdatSbTpmInstInfo_t
     uint8_t hdatLocality3Addr;
     uint8_t hdatLocality4Addr;
     uint8_t hdatFunctionalStatus;
-    uint8_t reserved[3];
+    struct hdatTpmConfigFlags_t hdatTpmConfigFlags;
+    uint8_t reserved[2];
     uint32_t hdatTpmSrtmEventLogOffset;
     uint32_t hdatTpmSrtmEventLogEntrySize;
     uint32_t hdatTpmDrtmEventLogOffset;