From 5fd22b47f8d633b118265bae079793e8d90a51c1 Mon Sep 17 00:00:00 2001 From: Corey Swenson Date: Thu, 2 May 2019 15:20:15 -0500 Subject: NVDIMM encryption HW function support Update random number generation, IPL and runtime. Write encryption regs to enable nvdimm encryption, crypto-erase, disable encryption. Read config-status reg to verify encryption state. Change-Id: I25625b53f90eeb542767fa729ebb47f8f8455a4b RTC:201474 Reviewed-on: http://rchgit01.rchland.ibm.com/gerrit1/77321 Reviewed-by: Nicholas E. Bofferding Tested-by: Jenkins Server Tested-by: Jenkins OP Build CI Tested-by: FSP CI Jenkins Tested-by: Jenkins OP HW Reviewed-by: Matthew Raybuck Reviewed-by: Daniel M. Crowell --- src/usr/isteps/istep14/call_mss_power_cleanup.C | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'src/usr/isteps/istep14/call_mss_power_cleanup.C') diff --git a/src/usr/isteps/istep14/call_mss_power_cleanup.C b/src/usr/isteps/istep14/call_mss_power_cleanup.C index c86d172be..db6bdf228 100644 --- a/src/usr/isteps/istep14/call_mss_power_cleanup.C +++ b/src/usr/isteps/istep14/call_mss_power_cleanup.C @@ -131,9 +131,10 @@ void* call_mss_power_cleanup (void *io_pArgs) // Run the nvdimm management functions if the list is not empty if (!l_nvdimmTargetList.empty()){ - // Must generate encryption keys before the restore - NVDIMM::nvdimm_gen_keys(l_nvdimmTargetList); + NVDIMM::nvdimm_gen_keys(); + NVDIMM::nvdimm_encrypt_unlock(l_nvdimmTargetList); NVDIMM::nvdimm_restore(l_nvdimmTargetList); + NVDIMM::nvdimm_encrypt_enable(l_nvdimmTargetList); } } #endif -- cgit v1.2.1