erebion/coreboot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security/tcg: add OPAL S3 unlock Kconfig

Browse source 
Add a generic configuration option for SMM-assisted TCG OPAL NVMe
unlock on S3 resume.

This also defines the APMC command IDs and the payload->SMM ABI
structure used to pass the OPAL password into SMM.

TEST=tested with rest of patch train

Change-Id: Id99ace7c17a311b65519023be4118c5b20ddecf9
Signed-off-by: Sean Rhodes <sean@starlabs.systems>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/91043
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
This commit is contained in:
Sean Rhodes 2026-02-01 21:21:57 +00:00 • committed by Matt DeVillier
commit fbd755341a
8 changed files with 78 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/include/cpu/x86/smm.h
View file

@ -28,6 +28,8 @@
#define APM_CNT_MBI_UPDATE 0xeb
#define APM_CNT_SMMINFO 0xec
#define APM_CNT_SMMSTORE 0xed
#define APM_CNT_OPAL_S3_UNLOCK 0xe9
#define APM_CNT_OPAL_SVC 0xee
#define APM_CNT_ELOG_GSMI 0xef
#define APM_STS 0xb3