## SPDX-License-Identifier: GPL-2.0-only config CPU_INTEL_COMMON bool select RESERVED_PHYSICAL_ADDRESS_BITS_SUPPORT if CPU_INTEL_COMMON config ENABLE_VMX bool "Enable VMX for virtualization" default y config SET_IA32_FC_LOCK_BIT bool "Set IA32_FEATURE_CONTROL lock bit" default y help Although the Intel manual says you must set the lock bit in addition to the VMX bit in order for VMX to work, this isn't strictly true, so we have the option to leave it unlocked and allow the OS (e.g. Linux) to manage things itself. This is beneficial for testing purposes as there is no need to reflash the firmware just to toggle the lock bit. However, leaving the lock bit unset will break Windows' detection of VMX support and built-in virtualization features like Hyper-V. config SET_MSR_AESNI_LOCK_BIT bool "Lock the AES-NI enablement state" default y help This config sets the AES-NI lock bit, if available, to prevent any further change of AES-NI enablement. This may be disabled for e.g. testing or debugging. config CPU_INTEL_COMMON_TIMEBASE bool endif config CPU_INTEL_COMMON_VOLTAGE bool config CPU_INTEL_COMMON_SMM bool default y if CPU_INTEL_COMMON