On Fri, 06 Feb 2015 11:16:48 -0600
Timothy Pearson <tpear...@raptorengineeringinc.com> wrote:

> On 02/06/2015 06:29 AM, Zaolin wrote:
> > Hi,
> >
> > new thinkpad's can't be used anymore for coreboot. Especially the U and
> > Y Intel CPU Series.
> > They come with Intel Boot Guard and you are won't be able to boot
> > anything which is unsigned and
> > not approved by OEM. This means the OEM are fusing SHA256 public key
> > hashes into the southbridge.
> >
> > For more details take a look at Intel Boot Guard architecture. It could
> > be also confirmed by Secunet AG and Google.
> >
> > Regards Zaolin
> 
> That's scary to say the least.  No more Thinkpads for us...
> 

Is it used by Lenovo?
I think I can boot a USB-Linux on a new Thinkpad within a friendly Lenovo Store.
How can it tested? What registers must be read?

Best,
lynxis
-- 
Alexander Couzens

mail: lyn...@fe80.eu
jabber: lyn...@jabber.ccc.de
mobile: +4915123277221

Attachment: pgp3dItOfZEaJ.pgp
Description: OpenPGP digital signature

-- 
coreboot mailing list: coreboot@coreboot.org
http://www.coreboot.org/mailman/listinfo/coreboot

Reply via email to