Hi,

let's say goodbye to all Intel notebooks produced by OEM's which are not
Google ( Chromebooks ). Maybe the haswell/broadwell notebooks of Lenovo
without U/Y processor can be used ( Thinkpad tXX xXX ). It depends if
they are supporting Intel Boot Guard on the southbridge...  

Regards Zaolin
> On 02/06/2015 06:29 AM, Zaolin wrote:
> > Hi,
> >
> > new thinkpad's can't be used anymore for coreboot. Especially the U and
> > Y Intel CPU Series.
> > They come with Intel Boot Guard and you are won't be able to boot
> > anything which is unsigned and
> > not approved by OEM. This means the OEM are fusing SHA256 public key
> > hashes into the southbridge.
> >
> > For more details take a look at Intel Boot Guard architecture. It could
> > be also confirmed by Secunet AG and Google.
> >
> > Regards Zaolin
> 
> That's scary to say the least.  No more Thinkpads for us...
> 



Attachment: signature.asc
Description: This is a digitally signed message part

-- 
coreboot mailing list: coreboot@coreboot.org
http://www.coreboot.org/mailman/listinfo/coreboot

Reply via email to