config SOC_INTEL_COMMON_BLOCK_CSE bool default n help Driver for communication with Converged Security Engine (CSE) over Host Embedded Controller Interface (HECI) config SOC_INTEL_COMMON_BLOCK_HECI_DISABLE_IN_SMM bool default y if HECI_DISABLE_USING_SMM select SOC_INTEL_COMMON_BLOCK_P2SB help Use this config to include common CSE block to make HECI function disable in SMM mode config SOC_INTEL_CSE_LITE_SKU bool default n help Enables CSE Lite SKU config SOC_INTEL_CSE_RW_UPDATE bool "Enable the CSE RW Update Feature" default n depends on SOC_INTEL_CSE_LITE_SKU help This config will enable CSE RW firmware update feature and also will be used ensure all the required configs are provided by mainboard. config SOC_INTEL_CSE_FMAP_NAME string "Name of CSE Region in FMAP" if SOC_INTEL_CSE_RW_UPDATE default "SI_ME" help Name of CSE region in FMAP config SOC_INTEL_CSE_RW_A_FMAP_NAME string "Location of CSE RW A in FMAP" if SOC_INTEL_CSE_RW_UPDATE default "ME_RW_A" help Name of CSE RW A region in FMAP config SOC_INTEL_CSE_RW_B_FMAP_NAME string "Location of CSE RW B in FMAP" if SOC_INTEL_CSE_RW_UPDATE default "ME_RW_B" help Name of CSE RW B region in FMAP config SOC_INTEL_CSE_RW_CBFS_NAME string "CBFS entry name for CSE RW blob" if SOC_INTEL_CSE_RW_UPDATE default "me_rw" help CBFS entry name for Intel CSE CBFS RW blob config SOC_INTEL_CSE_RW_METADATA_CBFS_NAME string "CBFS name for CSE RW metadata file" if SOC_INTEL_CSE_RW_UPDATE default "me_rw.metadata" help CBFS name for Intel CSE CBFS RW metadata file config SOC_INTEL_CSE_RW_FILE string "Intel CSE CBFS RW path and filename" if SOC_INTEL_CSE_RW_UPDATE default "" help Intel CSE CBFS RW blob path and file name config SOC_INTEL_CSE_RW_VERSION string "Intel CSE RW firmware version" if SOC_INTEL_CSE_RW_UPDATE default "" help This config contains the Intel CSE RW version of the blob that is provided by SOC_INTEL_CSE_RW_FILE config and the version must be set in the format major.minor.hotfix.build (ex: 14.0.40.1209). config SOC_INTEL_CSE_SET_EOP bool default n select PMC_IPC_ACPI_INTERFACE help This config ensures coreboot will send the CSE the End-of-POST message just prior to loading the payload. This is a security feature so the CSE will no longer respond to Pre-Boot commands.