Thank you very much. It's not a server so that's probably why they didn't bother.
Have a nice weekend Jan > On 18 Nov 2016, at 20:36, Sun, Ning <ning....@intel.com> wrote: > > BIOS-based SINIT ACM is a server TXT requirement, not a vPro requirement. > We contacting HP to find the reason why SINIT ACM is not embedded in BIOS for > their workstation SKU Z240 > > Regards, > -ning > > <>From: Jan Schermer [mailto:j...@schermer.cz <mailto:j...@schermer.cz>] > Sent: Friday, November 18, 2016 9:52 AM > To: Justin King-Lacroix <justin.king-lacr...@cs.ox.ac.uk > <mailto:justin.king-lacr...@cs.ox.ac.uk>> > Cc: tboot-devel@lists.sourceforge.net > <mailto:tboot-devel@lists.sourceforge.net> > Subject: Re: [tboot-devel] SINIT ACM not present on a Workstation-class > computer? > > Ah! > I thought BIOS ACM = SINIT ACM embedded in BIOS... > Now I see it's a pre-BIOS code actually. > > In any case, TXT works on this system when I load the SINIT module manually, > but I was hoping it would have it embedded in BIOS like the M900... > It's PITA because I use those systems to test server deployment (where SINIT > is always provided by the platform AFAIK), it's gonna be hard to make it > universal. > > Any tips how to best handle SINIT provisioning? Should I detect the platform > and guess the right SINIT? Or should I simply load few of them and hope it > works with one of them? > > Thanks > Jan > > On 18 Nov 2016, at 18:39, Justin King-Lacroix > <justin.king-lacr...@cs.ox.ac.uk <mailto:justin.king-lacr...@cs.ox.ac.uk>> > wrote: > > IIRC aren't the BIOS ACM and SINIT ACM separate? (And the BIOS may or may not > contain an SINIT ACM.) > > Of course, there might also be a bug in HP's BIOS, in which whatever > pointer/register needs to be initialised isn't. Wouldn't be the first. > > On 18 November 2016 at 12:27, Jan Schermer <j...@schermer.cz > <mailto:j...@schermer.cz>> wrote: > Hi, > I just got HP Z240 workstation (i7-6700 cpu) and it seems to lack SINIT ACM > embedded in the BIOS > I see this in one of the BIOS changelogs: > • Updates Intel TXT BIOS ACM to v1.3. > ^ shouldn't this mean it is there? > > tboot says: > TBOOT: checking if module is an SINIT for this platform... > TBOOT: ACM size is too small: acmod_size=30c, sizeof(acm_hdr)=4 > TBOOT: checking if module is an SINIT for this platform... > TBOOT: ACM size is too small: acmod_size=15, sizeof(acm_hdr)=4 > TBOOT: checking if module is an SINIT for this platform... > TBOOT: ACM size is too small: acmod_size=66c5200, acm_hdr->size*4=c0c0c0c0 > TBOOT: no SINIT AC module found > TBOOT: TXT.SINIT.BASE: 0xb1ed0000 > TBOOT: TXT.SINIT.SIZE: 0x50000 (327680) > TBOOT: SINIT ACM not provided. > > > Is there really no embedded AC module here? I know I can sideload it, but I > was expecting it to be there (it is there on my other Workstation - Lenovo > M900, more-or-less the same specs and the same CPU). > It claims to support vPro and I thought one of the requirements was embedded > SINIT AC module, but maybe I am wrong here... > > > Thanks > Jan > > > ------------------------------------------------------------------------------ > _______________________________________________ > tboot-devel mailing list > tboot-devel@lists.sourceforge.net <mailto:tboot-devel@lists.sourceforge.net> > https://lists.sourceforge.net/lists/listinfo/tboot-devel > <https://lists.sourceforge.net/lists/listinfo/tboot-devel>
------------------------------------------------------------------------------
_______________________________________________ tboot-devel mailing list tboot-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/tboot-devel
