summaryrefslogtreecommitdiffstats
path: root/src/build/buildpnor/genPnorImages.pl
Commit message (Collapse)AuthorAgeFilesLines
* Don't try to add proprietary CAPP microcode image to PNORRaptor Engineering Development Team2020-02-191-1/+0
|
* New Optional Argument to PnorUtils.pm’s loadPnorLayoutLuis Fernandez2019-10-291-1/+5
| | | | | | | | | | | | | | | | | | New Optional Argument to PnorUtils.pm’s loadPnorLayout to declare where to place the newly created layout file. If argument is not given, file will not be saved. Edited scripts and makefiles that use this function. Change-Id: I7b9ee0f7ad33ad88be58598ddf594765eabe29ea Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/85916 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E Bofferding <bofferdn@us.ibm.com> Reviewed-by: Christian R Geddes <crgeddes@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M Crowell <dcrowell@us.ibm.com>
* (Fix for:) Alert when a partition's space utilization exceeds a thresholdLuis Fernandez2019-09-041-2/+2
| | | | | | | | | | | | | | | | Fix for an earlier commit that is failing with a newer version of the PERL interpreter. Change-Id: I193e4712d5ac95f18bb2fe67efc11a955234b579 RTC: 212220 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/83204 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Christian R Geddes <crgeddes@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E Bofferding <bofferdn@us.ibm.com> Reviewed-by: William G Hoffa <wghoffa@us.ibm.com>
* Alert when a partition's space utilization exceeds a thresholdMegan2019-08-281-0/+34
| | | | | | | | | | | | | | | | | Calculate the percentage utilization of a pnor partition by using binary file size + header size + ecc overhead (if used for partition). User is warned when a pnor partition exceeds a specific utilization threshold Change-Id: I00b0b69a039ffefdf086dc470fd0f76b72ee267d RTC: 212220 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/81990 Reviewed-by: Ilya Smirnov <ismirno@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: William G Hoffa <wghoffa@us.ibm.com>
* Add page tables to read only partitionsChen Du2019-05-091-6/+13
| | | | | | | | | | | | | | | | | | Changed partitions (WOFDATA, MEMD) to be signed with a hash page table bit. This generates a hash page table in the protected payload which will be used to validate pages in the unprotected payload Change-Id: I9be4b1f6e65b9a52a8b6ba23affdacc4d89f5295 RTC: 179519 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/72776 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Remove GLOBAL PNOR PartitionMike Baiocchi2019-04-261-0/+8
| | | | | | | | | | | | | | | | | | The GLOBAL PNOR partition is not being used so this commit removes all references to it in PNOR constants, various PNOR layout files, and makefiles. It also has some general changes to improve error handling in builing pnors. Change-Id: I896be8c90c3ad9969c02399d015fa71399220181 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/76218 Reviewed-by: Christian R. Geddes <crgeddes@us.ibm.com> Reviewed-by: Matt Derksen <mderkse1@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Ilya Smirnov <ismirno@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Resize WOF to allow AXONE test pnor to fit inside 64 MBChristian Geddes2019-04-011-3/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | This commit reduces the size of the WOFDATA section in PNOR from 12 MB -> 6 MB in an effort to get axone pnor test image fitting in 64 MB. We also had to move from using the very larg ZZ WOF image to use the smaller Zeppelin WOF image. Due to the way the makefile that generates the pnor image works we always generate "final" versions of all 3 WOF images (ZZ, Zeppelin, Fleetwood) regardless of what we are actually building. There were some checks in the genPnorImages script that would ensure the layout you are using was big enough for any binary that we generate. I have removed this restriction so you can now generate binaries that are larger then the space allotted (we will not use the larger binaries but they still get generated). The alternative is to edit the makefile to only generate the "final" images of the sections we want. That is possible but would require a larger rewrite of the makefile. Change-Id: Ib52572ad5e3d58accb49f414b6a0c61babf3cefd Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/75257 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Matt Derksen <mderkse1@us.ibm.com> Reviewed-by: Ilya Smirnov <ismirno@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Revert "SMF: Create New UVBWLIST Partition"Ilya Smirnov2019-03-051-1/+0
| | | | | | | | | | | | | | | | | | | This reverts commit 9de9d8f7c5b5c73247dc69925a594fcd07ce060c. The logic for passing the XSCOM white/blacklist to Ultravisor will change drastically. The change in logic makes the UVBWLIST partition unneeded. This commit reverts all changes associated with UVBWLIST partition. Change-Id: Ife2b983a90be766f494c12bd60f5ac8cb394aa24 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/72487 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Matthew Raybuck <matthew.raybuck@ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Revert "Enhance RAS for case where boot firmware image is too big to load"Daniel M. Crowell2019-02-231-1/+1
| | | | | | | | | | This reverts commit ee1cd5b0adfaf133abe846ccbaebe48d7dbded0f. We overran our size constraint in the bootloader. Change-Id: Ib579b5971e5f03131a0b6580cd698e7f725dd383 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/72401 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* SMF: Create New UVBWLIST PartitionIlya Smirnov2019-01-241-1/+2
| | | | | | | | | | | | | | | | | | | A new partition was added for the contents of the XSCOM white/blacklist called UVBWLIST. When the time comes, this partition will hold the binary representation of the aforementioned lists. The partition is dumped into hostboot reserved memory for Ultravisor consumption. Change-Id: I06ebce74aae3c0df987e5a057967842042db2bae RTC: 192422 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/68869 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* PRD: Make room for Axone prf files in HostbootZane Shelley2018-11-161-1/+1
| | | | | | | | | | | | | Change-Id: Ic0f4fda42326f714538b392c4599398d9dfc65e5 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/68811 Reviewed-by: Brian J. Stegmiller <bjs@us.ibm.com> Reviewed-by: Caleb N. Palmer <cnpalmer@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Zane C. Shelley <zshelle@us.ibm.com>
* genPnorImages: Add VERSION to signed partitionsSamuel Mendoza-Jonas2018-10-161-0/+1
| | | | | | | | | | | | | | | | | Mark VERSION as a signed partition and also check for it in the IPMI FRU setup. Change-Id: I6e8690c4f34d1f5ce92750960e6c73afcbf0a8e9 CQ:SW416159 Signed-off-by: Samuel Mendoza-Jonas <sjonas@au1.ibm.com> Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/61439 Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Don't override user setting of SB_KEEP_CACHEDave Heller2018-07-241-1/+7
| | | | | | | | | | | | | | | | | | | The previous patch set SB_KEEP_CACHE=true in genPnorImages.pl in a way that would override the user setting. This was a bad idea. The desired behavior is to set SB_KEEP_CACHE=true but only if it has not already been set (through environment) by the user. Signed-off-by: Dave Heller <hellerda@us.ibm.com> Resolves #144 Change-Id: I5bf04bd1c8501695eccbb5e7229101cb9dab7078 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/62362 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Support Independent signing mode in genPnorImages.plDave Heller2018-07-051-9/+19
| | | | | | | | | | | | | | | | This changes signMode() from a tuple to a triple, supporting 'independent' as an allowable value, and passing this value to crtSignedContaner.sh as appropriate. For simplicity, Independent mode is not considered in the setting of the LAB_SECURITY_OVERRIDE_FLAG or for transition containers. Change-Id: Ibda46b963805f378e37d271e31ed31dff36daaf8 Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com> Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/61782 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Disable-CI: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Secure Boot: Run signtool with keepcache=trueDave Heller2018-06-301-1/+1
| | | | | | | | | | | | | | | | | | | I have changed sb-signing-utls to remove the cache by default but it's important to preserve the current behavior under op-build, as features that rely on cache re-use depend on it. Resolves #134 Signed-off-by: Dave Heller <hellerda@linux.vnet.ibm.com> Change-Id: Ic379a0766cd7da3351a572281063f02a2810a37b Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/61619 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: ILYA SMIRNOV <ismirno@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Purge SW signature cache for multinode binariesNick Bofferding2018-05-311-13/+14
| | | | | | | | | | | | | | | | | | When signing targeting binaries for multinode systems, the build process erroneously reuses the SW signature for node 0 when creating the secure header for other nodes. This change moves the signature purge logic into the loop that handles multiple nodes worth of content Change-Id: I1e1154cbfb06375c3b62e3710c9bd2384b961076 CQ: SW430711 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/59548 Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: ILYA SMIRNOV <ismirno@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Reset Security Override Flag During Key TransitionIlya Smirnov2018-04-061-0/+1
| | | | | | | | | | | | | | | | | During key transition to production keys, the banner on the console shows lab security override as being enabled, while it really isn't. This change updates the security override flag correctly during the key transition. Change-Id: Ib1afd6ff71e540abea25648d2f53ee3814b5bf3f Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/56571 Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Close SBE Security BackdoorIlya Smirnov2018-03-301-3/+15
| | | | | | | | | | | | | | | | | | | | | During a key transition process from dev to prod keys the lab override bit does not get unset and does not get customized into SBE at the time of the transition. Only when the system reaches istep 10.2 with prod keys does the bit get reset. This change customizes the bit at the time of the transition, which ensures the system is secure all the way through IPL with prod keys. Change-Id: I1343d2dd95aa4549b92e46ebcb9df142303c1f0b RTC: 188958 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/56127 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Remove code flows that use non-open signing toolsJaymes Wilks2018-03-071-199/+48
| | | | | | | | | | | | | | | | | | | | The environment variable SIGNING_TOOL_EDITION=community is no longer needed by genPnorImages.pl as open signing tools are the default and all code paths formerly exercised by its absence have been taken out. References to SIGNING_TOOL_EDITION have also been removed from the makefiles. Change-Id: I1f8a525fa5eb25bf8365e73e8546cd4e7b23b135 RTC:183183 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/54898 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: ILYA SMIRNOV <ismirno@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Collect better FFDC on ROM verification errorsStephen Cprek2018-01-311-1/+12
| | | | | | | | | | | | | | | | | | | | Collect both the UTIL and RUNTIME component traces on a ROM verify failure Added a new Errlog User Details sections "Verify Info" containing the component name, ID(s), measured, and expected hashes Change-Id: I0d0408128e05807bb906be5ee365d56d1416693f CQ:SW413889 Backport:release-fips910 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/52593 Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Remove Secure Boot workaroundsStephen Cprek2017-12-181-7/+7
| | | | | | | | | | | | | | | | | | | | | | | - Removing the magic number checks that would block sb functionality if things didn't appear secure - Remove Best Effort Policy and all of its related code - Remove the legacy PCR extension - Remove the non-secure header preservation path. - Always load HB base image header from the bl to hb data path vs settings unsecurely out of pnor Change-Id: Ie638384ac50ed47850985c959ea7a32e5757d64e RTC: 178520 RTC: 155374 RTC: 173489 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49925 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Change FIPS build genPnorImages.pl constant back to 0x40000000Jaymes Wilks2017-12-121-4/+1
| | | | | | | | | | | | | | | | | | | Update the FIPS build genPnorImages.pl build type constant back to correct value of 0x40000000 now that key signers have delivered the correct keys. Change-Id: Ie339072b958b6e64ef9bba751833328f192d5bb8 CMVC-Coreq: 1040274 RTC:182357 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/50777 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Add multi node support for genPnorImages and add HBD Fleetwood filesStephen Cprek2017-12-081-274/+294
| | | | | | | | | | | | Change-Id: Ia50daca41d7aa4dc4a741fa4a1a8d1880b065a92 CQ:SW410093 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/50448 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Martin Gloff <mgloff@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Add new pnor section for Centaur hw ref imageRichard J. Knight2017-12-071-0/+1
| | | | | | | | | | | | Change-Id: Id5b75f4a929456efa5da7f173ecba71af513744f RTC:144141 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49369 Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Fix standalone compile and simics when secureboot compiled outStephen Cprek2017-11-191-0/+4
| | | | | | | | | | | | | Change-Id: Ia5e50817208eee672c7899441166add7af718c02 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49329 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Purge dev SW signing cache before reuseNick Bofferding2017-11-161-1/+1
| | | | | | | | | | | | | Change-Id: I769da123b8ed95123dfd3a6c4b60cbd888657da5 CQ: SW407324 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49761 Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Create new test only PNOR section to test secure Load/UnloadsJaymes Wilks2017-11-151-0/+1
| | | | | | | | | | | | | | | | | | Created a test PNOR section called TESTLOAD that only exists in standalone solely for the purpose of testing loadSecureSection and unloadSecureSection functions of secure boot. Change-Id: I8d397f96c9199b46a20dae0263822eaf3766f83f RTC:181598 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49501 Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Secure Boot: SBKT partition support [FSP]Jaymes Wilks2017-11-141-0/+5
| | | | | | | | | | | | | | | | SBKT partition support for FSP systems. Change-Id: Ic2118a047e5e46d6f8e1289ade0cff0a7cbc4987 RTC:171681 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49086 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Fix parallel and multiple pass image signing issuesNick Bofferding2017-11-141-0/+13
| | | | | | | | | | | | | Change-Id: Id88717a7647cf916a4aaad652d70807d5027cb33 RTC: 180781 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/49655 Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Support selecting fips or op-build for signing processJaymes Wilks2017-11-091-4/+20
| | | | | | | | | | | | | | | | | Adds a new '--build-type' option to genPnorImages.pl to specify either fspbuild or opbuild, which adds the appropriate magic value to the secure header during the signing process. Change-Id: I46a97f88666a5cc925797d3ad0e870a5f5bac89a RTC:163655 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/48930 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Add Header to TESTRO PNOR section for testing Secure Lid transferStephen Cprek2017-11-011-10/+17
| | | | | | | | | | | | | | Change-Id: I7f7080697f1447e094cb202f9dcd4853538e8d96 RTC: 125304 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/46839 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Secure Boot: Support __getkey option in production signingNick Bofferding2017-10-101-1/+5
| | | | | | | | | | | | | | RTC: 177220 Change-Id: I6cb9d15a9285ad176ed966c9e876828fe4efd772 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/47104 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Remove requirement to specify production config fileNick Bofferding2017-10-101-12/+2
| | | | | | | | | | | | | | RTC: 177220 Change-Id: I6dde362df4d8a441d950071333b64f014e819267 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/46916 Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Direct signature temp files to specific scratch dirNick Bofferding2017-09-251-1/+2
| | | | | | | | | | | | | RTC: 177220 Change-Id: I2a2c17ad89af97f302800dc3cb0f33687ec8f7c5 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/46624 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Support open signing with component IDsNick Bofferding2017-09-251-7/+34
| | | | | | | | | | | | | Change-Id: Ic817a045128e7f7c64b342f4f3682a1bb5930468 RTC: 177220 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/46247 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Support secure load of MEMD partitionNick Bofferding2017-08-221-0/+1
| | | | | | | | | | | | | | | | | | - Added secure load of MEMD partition in istep 7 - Added sha512 header to MEMD partition - Marked MEMD as enforced secureboot section in PNOR code and image generator Change-Id: I5de934da7e50ad0de6674e2674869d1356f5232d RTC: 176189 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/44606 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Support IMA_CATALOG partition signingNick Bofferding2017-08-141-0/+1
| | | | | | | | | | | | | | Change-Id: Ibf8256406cf2ae6442b6e84f3fcffe354813f322 RTC: 176189 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/44525 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Move genPnorImage dependency hash into sort functionNick Bofferding2017-08-041-4/+8
| | | | | | | | | | | | | | | - Some platforms/perl versions don't work unless hash is inside sort function Change-Id: If2c7d9f32a9f500272107acd188a317816be9516 RTC: 174017 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/43914 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Emit signature-less header in non-secure compileNick Bofferding2017-08-041-11/+38
| | | | | | | | | | | | | | | - Relevant for open signing only at this time RTC: 174017 Change-Id: I6c16f2c06785debaae3006ef66e54fa7102f27da Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/43825 Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Remove SBEC pnor partition from p9 codeStephen Cprek2017-07-241-2/+0
| | | | | | | | | | | | | Change-Id: I13e79a6542353e42ac809cc60295947dfb1acb96 RTC: 163810 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/43048 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Martin Gloff <mgloff@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure Boot: Mark PAYLOAD and CAPP PNOR partitions as securedNick Bofferding2017-07-111-2/+2
| | | | | | | | | | | | | | Change-Id: I076e1fb883253c01553fef6764617d6e4c83708e RTC: 174017 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/42629 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Support open signing tool when inserting a zeroed partitionNick Bofferding2017-07-111-3/+12
| | | | | | | | | | | | | Change-Id: I043f740fdcb529af81a3c74e01d84613fb1769b0 RTC: 174017 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/42626 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Support open signing tool argument changesNick Bofferding2017-07-111-21/+20
| | | | | | | | | | | | | | | - Added extra dash to open signing tool command line arguments Change-Id: I2aad97868455da7ae8daa6d8effa6ad385fee057 RTC: 174017 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/42562 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP HW <op-hw-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Secure WOF data support in HB standaloneJaymes Wilks2017-05-311-0/+1
| | | | | | | | | | | | | | | | Adds secure signing of WOF data for HB standalone and ensures the section is loaded when needed and available for reuse more than once during the IPL. Change-Id: Idd5f611030033ea165cde51ace987fa6847b78e7 RTC:170715 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/41172 Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Sign and Verify the HCODE partitionMike Baiocchi2017-05-151-0/+1
| | | | | | | | | | | | Change-Id: If594c350ed52ee6b40a5aa9e021c8e5ede8fb8aa RTC:51086 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/40294 Reviewed-by: Marshall J. Wilks <mjwilks@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Support gracefully adding signing headers to PNOR sectionsNick Bofferding2017-05-081-27/+43
| | | | | | | | | | | | | Change-Id: Ie8ce7672a41c0b6230918911f59ada5443c552f5 RTC: 170650 CMVC-Coreq: 1022416 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/39869 Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Sign and Verify the OCC partition (port from P8)Mike Baiocchi2017-05-021-1/+1
| | | | | | | | | | | | Change-Id: Id7e8668f92a8a702f709d15647f2a288783730a0 RTC: 167671 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/39774 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
* Port P8 HBI page verification functionalityStephen Cprek2017-05-011-6/+4
| | | | | | | | | | | | | | Verify HBI pages via its securely signed hash page table Change-Id: I86d29ee393c19aa0d9c5270b0b6c561a9fc4ab51 RTC: 167668 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/39071 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Add option to additionally emit ECC-less content when building PNOR partitionsNick Bofferding2017-05-011-8/+19
| | | | | | | | | | | | Change-Id: I27d5b0b90322f250f53f73ce0f62e4a2ee5a96ca RTC: 170650 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/39575 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Reviewed-by: Stephen M. Cprek <smcprek@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: William G. Hoffa <wghoffa@us.ibm.com>
* Sign and Verify the hostboot runtime partition (port from p8)Stephen Cprek2017-04-281-4/+7
| | | | | | | | | | | | Change-Id: I04d303b2fe08a9c3fff4e9f3cc0be9768279637d RTC: 171706 Reviewed-on: http://ralgit01.raleigh.ibm.com/gerrit1/39521 Tested-by: Jenkins Server <pfd-jenkins+hostboot@us.ibm.com> Reviewed-by: Nicholas E. Bofferding <bofferdn@us.ibm.com> Tested-by: Jenkins OP Build CI <op-jenkins+hostboot@us.ibm.com> Tested-by: FSP CI Jenkins <fsp-CI-jenkins+hostboot@us.ibm.com> Reviewed-by: Michael Baiocchi <mbaiocch@us.ibm.com> Reviewed-by: Daniel M. Crowell <dcrowell@us.ibm.com>
OpenPOWER on IntegriCloud