BIOS-based SINIT ACM is a server TXT requirement, not a vPro requirement. We contacting HP to find the reason why SINIT ACM is not embedded in BIOS for their workstation SKU Z240
Regards, -ning From: Jan Schermer [mailto:j...@schermer.cz] Sent: Friday, November 18, 2016 9:52 AM To: Justin King-Lacroix <justin.king-lacr...@cs.ox.ac.uk> Cc: tboot-devel@lists.sourceforge.net Subject: Re: [tboot-devel] SINIT ACM not present on a Workstation-class computer? Ah! I thought BIOS ACM = SINIT ACM embedded in BIOS... Now I see it's a pre-BIOS code actually. In any case, TXT works on this system when I load the SINIT module manually, but I was hoping it would have it embedded in BIOS like the M900... It's PITA because I use those systems to test server deployment (where SINIT is always provided by the platform AFAIK), it's gonna be hard to make it universal. Any tips how to best handle SINIT provisioning? Should I detect the platform and guess the right SINIT? Or should I simply load few of them and hope it works with one of them? Thanks Jan On 18 Nov 2016, at 18:39, Justin King-Lacroix <justin.king-lacr...@cs.ox.ac.uk<mailto:justin.king-lacr...@cs.ox.ac.uk>> wrote: IIRC aren't the BIOS ACM and SINIT ACM separate? (And the BIOS may or may not contain an SINIT ACM.) Of course, there might also be a bug in HP's BIOS, in which whatever pointer/register needs to be initialised isn't. Wouldn't be the first. On 18 November 2016 at 12:27, Jan Schermer <j...@schermer.cz<mailto:j...@schermer.cz>> wrote: Hi, I just got HP Z240 workstation (i7-6700 cpu) and it seems to lack SINIT ACM embedded in the BIOS I see this in one of the BIOS changelogs: • Updates Intel TXT BIOS ACM to v1.3. ^ shouldn't this mean it is there? tboot says: TBOOT: checking if module is an SINIT for this platform... TBOOT: ACM size is too small: acmod_size=30c, sizeof(acm_hdr)=4 TBOOT: checking if module is an SINIT for this platform... TBOOT: ACM size is too small: acmod_size=15, sizeof(acm_hdr)=4 TBOOT: checking if module is an SINIT for this platform... TBOOT: ACM size is too small: acmod_size=66c5200, acm_hdr->size*4=c0c0c0c0 TBOOT: no SINIT AC module found TBOOT: TXT.SINIT.BASE: 0xb1ed0000 TBOOT: TXT.SINIT.SIZE: 0x50000 (327680) TBOOT: SINIT ACM not provided. Is there really no embedded AC module here? I know I can sideload it, but I was expecting it to be there (it is there on my other Workstation - Lenovo M900, more-or-less the same specs and the same CPU). It claims to support vPro and I thought one of the requirements was embedded SINIT AC module, but maybe I am wrong here... Thanks Jan ------------------------------------------------------------------------------ _______________________________________________ tboot-devel mailing list tboot-devel@lists.sourceforge.net<mailto:tboot-devel@lists.sourceforge.net> https://lists.sourceforge.net/lists/listinfo/tboot-devel
------------------------------------------------------------------------------
_______________________________________________ tboot-devel mailing list tboot-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tboot-devel
