diff options
| author | Mike Baiocchi <mbaiocch@us.ibm.com> | 2019-07-19 15:37:48 -0500 |
|---|---|---|
| committer | William G Hoffa <wghoffa@us.ibm.com> | 2019-07-26 20:17:59 -0500 |
| commit | bcd6d6f29b70fa9714ea7b211c0b1435a59cb956 (patch) | |
| tree | 7b14236cb2eafdb6f3b8b7e67173f3573cb769df /src/usr/isteps | |
| parent | beeb7f5f9c0a6b9b443058d3d3a24f936291d3e0 (diff) | |
| download | talos-hostboot-bcd6d6f29b70fa9714ea7b211c0b1435a59cb956.tar.gz talos-hostboot-bcd6d6f29b70fa9714ea7b211c0b1435a59cb956.zip | |
Secureboot: Enable verifying OPAL Payload before starting instructions
For Enterprise systems that will boot OPAL, hostboot code will now
securely verify the OPAL payload before starting instructions if
secureboot is enabled.
Change-Id: I1c392758f90c4a886d2a7731d78980bdaa21837f
RTC:187304
Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/80818
Reviewed-by: Ilya Smirnov <ismirno@us.ibm.com>
Reviewed-by: Zachary Clark <zach@ibm.com>
Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com>
Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com>
Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com>
Reviewed-by: William G Hoffa <wghoffa@us.ibm.com>
Diffstat (limited to 'src/usr/isteps')
| -rw-r--r-- | src/usr/isteps/istep21/call_host_runtime_setup.C | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/usr/isteps/istep21/call_host_runtime_setup.C b/src/usr/isteps/istep21/call_host_runtime_setup.C index 4a87ddefd..55d46e1d3 100644 --- a/src/usr/isteps/istep21/call_host_runtime_setup.C +++ b/src/usr/isteps/istep21/call_host_runtime_setup.C @@ -290,8 +290,8 @@ errlHndl_t verifyAndMovePayload(void) break; } - // If in Secure Mode Verify PHYP at Temporary TCE-related Memory Location - if (SECUREBOOT::enabled() && is_phyp) + // If in Secure Mode Verify Payload at Temporary TCE-related Memory Location + if (SECUREBOOT::enabled()) { TRACDCOMP( ISTEPS_TRACE::g_trac_isteps_trace,"verifyAndMovePayload() " "Verifying PAYLOAD: physAddr=0x%.16llX, virtAddr=0x%.16llX", |
