Ah!
I thought BIOS ACM = SINIT ACM embedded in BIOS...
Now I see it's a pre-BIOS code actually.

In any case, TXT works on this system when I load the SINIT module manually, 
but I was hoping it would have it embedded in BIOS like the M900...
It's PITA because I use those systems to test server deployment (where SINIT is 
always provided by the platform AFAIK), it's gonna be hard to make it universal.

Any tips how to best handle SINIT provisioning? Should I detect the platform 
and guess the right SINIT? Or should I simply load few of them and hope it 
works with one of them?

Thanks
Jan

> On 18 Nov 2016, at 18:39, Justin King-Lacroix 
> <justin.king-lacr...@cs.ox.ac.uk> wrote:
> 
> IIRC aren't the BIOS ACM and SINIT ACM separate? (And the BIOS may or may not 
> contain an SINIT ACM.)
> 
> Of course, there might also be a bug in HP's BIOS, in which whatever 
> pointer/register needs to be initialised isn't. Wouldn't be the first.
> 
> On 18 November 2016 at 12:27, Jan Schermer <j...@schermer.cz 
> <mailto:j...@schermer.cz>> wrote:
> Hi,
> I just got HP Z240 workstation (i7-6700 cpu) and it seems to lack SINIT ACM 
> embedded in the BIOS
> I see this in one of the BIOS changelogs:
> • Updates Intel TXT BIOS ACM to v1.3.
> ^ shouldn't this mean it is there?
> 
> tboot says:
> TBOOT: checking if module  is an SINIT for this platform...
> TBOOT:   ACM size is too small: acmod_size=30c, sizeof(acm_hdr)=4
> TBOOT: checking if module  is an SINIT for this platform...
> TBOOT:   ACM size is too small: acmod_size=15, sizeof(acm_hdr)=4
> TBOOT: checking if module  is an SINIT for this platform...
> TBOOT:   ACM size is too small: acmod_size=66c5200, acm_hdr->size*4=c0c0c0c0
> TBOOT: no SINIT AC module found
> TBOOT: TXT.SINIT.BASE: 0xb1ed0000
> TBOOT: TXT.SINIT.SIZE: 0x50000 (327680)
> TBOOT: SINIT ACM not provided.
> 
> 
> Is there really no embedded AC module here? I know I can sideload it, but I 
> was expecting it to be there (it is there on my other Workstation - Lenovo 
> M900, more-or-less the same specs and the same CPU).
> It claims to support vPro and I thought one of the requirements was embedded 
> SINIT AC module, but maybe I am wrong here...
> 
> 
> Thanks
> Jan
> 
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> tboot-devel mailing list
> tboot-devel@lists.sourceforge.net <mailto:tboot-devel@lists.sourceforge.net>
> https://lists.sourceforge.net/lists/listinfo/tboot-devel 
> <https://lists.sourceforge.net/lists/listinfo/tboot-devel>
> 

------------------------------------------------------------------------------
_______________________________________________
tboot-devel mailing list
tboot-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/tboot-devel

Reply via email to