Add a TPM separator during host start_payload

Change-Id: I11736ebe4b44e54584febc05e1dea50dd5304fa4
RTC: 155301
Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/30996
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: Christopher J. Engel <cjengel@us.ibm.com>
Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>

1 files changed, 5 insertions, 0 deletions

diff --git a/src/usr/isteps/istep21/call_host_start_payload.C b/src/usr/isteps/istep21/call_host_start_payload.C
index cd48a87e7..c80ecf1e4 100644
--- a/src/usr/isteps/istep21/call_host_start_payload.C
+++ b/src/usr/isteps/istep21/call_host_start_payload.C
@@ -31,6 +31,7 @@
 #include <isteps/istep_reasoncodes.H>
 #include <initservice/initserviceif.H>
 #include <initservice/istepdispatcherif.H>
+#include <secureboot/trustedbootif.H>
 #include <sys/task.h>
 #include <initservice/extinitserviceif.H>
 #include <hbotcompid.H>
@@ -128,6 +129,10 @@ void* call_host_start_payload (void *io_pArgs)
     TRACDCOMP( ISTEPS_TRACE::g_trac_isteps_trace,
             "call_host_start_payload entry" );
 
+    // Place a separator in the TPM to indicate we are passing control
+    //  to the next level of firmware in the stack
+    l_errl = TRUSTEDBOOT::pcrExtendSeparator();
+
     // For single-node systems, the non-master processors can be in a
     // different logical (powerbus) group.  Need to migrate task to master.
     task_affinity_pin();