aboutsummaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
authorArthur Heymans <arthur@aheymans.xyz>2021-06-24 11:30:32 +0200
committerPatrick Georgi <pgeorgi@google.com>2021-06-25 15:52:05 +0000
commite243a60efea1393e9f888fb5839a681739322669 (patch)
tree71356f245a3f30ff5fd3756aac55cf91801acace /src
parent8a85a84fac7157927612cd638cf67c061d959bd8 (diff)
security/intel/cbnt: Remove fixed size requirement
The CBnT provisioning tooling in intel-sec-tools are now cbfs aware and don't need to have a fixed size at buildtime. Tested on OCP/Deltalake with CBnT enabled. Change-Id: I446b5045fe65f51c5fa011895cd56dbd25b6ccc7 Signed-off-by: Arthur Heymans <arthur@aheymans.xyz> Reviewed-on: https://review.coreboot.org/c/coreboot/+/55821 Reviewed-by: Angel Pons <th3fanbus@gmail.com> Reviewed-by: Christopher Meis <christopher.meis@9elements.com> Reviewed-by: Christian Walter <christian.walter@9elements.com> Reviewed-by: Kyösti Mälkki <kyosti.malkki@gmail.com> Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Diffstat (limited to 'src')
-rw-r--r--src/mainboard/ocp/deltalake/Kconfig7
-rw-r--r--src/security/intel/cbnt/Kconfig1
2 files changed, 0 insertions, 8 deletions
diff --git a/src/mainboard/ocp/deltalake/Kconfig b/src/mainboard/ocp/deltalake/Kconfig
index b92bd96ebe..316149567e 100644
--- a/src/mainboard/ocp/deltalake/Kconfig
+++ b/src/mainboard/ocp/deltalake/Kconfig
@@ -58,11 +58,4 @@ config CONSOLE_POST
bool
default y
-config C_ENV_BOOTBLOCK_SIZE
- hex
- default 0xc000 if FIXED_BOOTBLOCK_SIZE
- help
- This matches the IBB size used for CBnT. Adjust this to the
- used CBnT settings.
-
endif # BOARD_OCP_DELTALAKE
diff --git a/src/security/intel/cbnt/Kconfig b/src/security/intel/cbnt/Kconfig
index d16e6852a6..c430123fcb 100644
--- a/src/security/intel/cbnt/Kconfig
+++ b/src/security/intel/cbnt/Kconfig
@@ -7,7 +7,6 @@ config INTEL_CBNT_SUPPORT
#depends on PLATFORM_HAS_DRAM_CLEAR
select INTEL_TXT
# With CBnT the bootblock is set up as a CBnT IBB and needs a fixed size
- select FIXED_BOOTBLOCK_SIZE
select TPM_MEASURED_BOOT_INIT_BOOTBLOCK if TPM_MEASURED_BOOT
help
Enables Intel Converged Bootguard and Trusted Execution Technology