From eb73e5f4a4db631957acbb7bf5f9721f2d297439 Mon Sep 17 00:00:00 2001
From: Arthur Heymans <arthur@aheymans.xyz>
Date: Thu, 6 May 2021 10:28:26 +0200
Subject: security/intel/txt: Set up TPM in bootblock if using measured boot

Change-Id: I1225757dbc4c6fb5a30d1aa12987661a0a6eb538
Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/52969
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Philipp Deppenwiese <zaolin.daisuki@gmail.com>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
---
 src/security/intel/txt/Kconfig | 1 +
 1 file changed, 1 insertion(+)

(limited to 'src/security/intel/txt')

diff --git a/src/security/intel/txt/Kconfig b/src/security/intel/txt/Kconfig
index c1442c86ee..14b4f6a722 100644
--- a/src/security/intel/txt/Kconfig
+++ b/src/security/intel/txt/Kconfig
@@ -6,6 +6,7 @@ config INTEL_TXT
 	select MRC_SETTINGS_PROTECT if CACHE_MRC_SETTINGS
 	select ENABLE_VMX if CPU_INTEL_COMMON
 	select AP_IN_SIPI_WAIT
+	select TPM_MEASURED_BOOT_INIT_BOOTBLOCK if TPM_MEASURED_BOOT
 	depends on (TPM1 || TPM2)
 	depends on CPU_INTEL_FIRMWARE_INTERFACE_TABLE
 	depends on PLATFORM_HAS_DRAM_CLEAR
-- 
cgit v1.2.3