Received-SPF: pass (google.com: domain of linux-crypto+bounces-4495-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45d1:ec00::1 as permitted sender) client-ip=2604:1380:45d1:ec00::1;
Date: Wed, 29 May 2024 08:07:52 +0000
To: Mario Limonciello <mario.limonciello@amd.com>
From: Richard Hughes <richard@hughsie.com>
Cc: Herbert Xu <herbert@gondor.apana.org.au>, Tom Lendacky <thomas.lendacky@amd.com>, "open list:AMD CRYPTOGRAPHIC COPROCESSOR (CCP) DRIVER - DB..." <linux-crypto@vger.kernel.org>, Richard Hughes <hughsient@gmail.com>, open list <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH v2 0/5] Enable PSP security attributes on more SoCs
Message-ID: <oCZE3H8ZnqlQsatOdb4HH7_0t7E9fsRqVv1QodA3IeUSDCdx9DP1bWsLOVq6T5iGffMjzMequirUJSM4UpcA1y2LZVUvMsffulaArsPy2cs=@hughsie.com>
In-Reply-To: <20240528210712.1268-1-mario.limonciello@amd.com>
References: <20240528210712.1268-1-mario.limonciello@amd.com>
Feedback-ID: 110239754:user:proton
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

On Tuesday, May 28th, 2024 at 10:07 PM, Mario Limonciello <mario.limonciell=
o@amd.com> wrote:
> v1->v2:

Looks great, and the output of "fwupdmgr security" on my pre-production Len=
ovo T14 (AMD Ryzen 7 PRO 4750U) is now a lot more accurate:

 HSI-1
 =E2=9C=94 BIOS firmware updates:         Enabled
+=E2=9C=94 Fused platform:                Locked
+=E2=9C=94 Supported CPU:                 Valid
 =E2=9C=94 TPM empty PCRs:                Valid
 =E2=9C=94 TPM v2.0:                      Found
 =E2=9C=94 UEFI bootservice variables:    Locked
 =E2=9C=94 UEFI platform key:             Valid
=20
 HSI-2
 =E2=9C=94 IOMMU:                         Enabled
+=E2=9C=94 Platform debugging:            Locked
 =E2=9C=94 TPM PCR0 reconstruction:       Valid
+=E2=9C=98 SPI write protection:          Disabled
 =E2=9C=98 BIOS rollback protection:      Disabled
=20
 HSI-3
+=E2=9C=98 SPI replay protection:         Not supported
 =E2=9C=98 CET Platform:                  Not supported
 =E2=9C=98 Pre-boot DMA protection:       Disabled
 =E2=9C=98 Suspend-to-idle:               Disabled
 =E2=9C=98 Suspend-to-ram:                Enabled
=20
 HSI-4
+=E2=9C=94 Encrypted RAM:                 Encrypted
 =E2=9C=94 SMAP:                          Enabled
+=E2=9C=98 Processor rollback protection: Disabled

Tested-by: Richard Hughes <richard@hughsie.com>

Richard