BIOS Guard Security Configuration

Tal Lubko <[email protected]> Thu, 28 Oct 2021 17:42:04 +0000
Newsgroups dev.linux.lists.oe-chipsec
Message-ID <[email protected]>
--===============3420637443590156281==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Hi
I'm looking at "Skylake and Kaby Lake Platform Secure Configuration Specifi=
cation".It has a section named "BIOS Guard Security Configuration" with sev=
eral recommendations.For example:=C2=A0Test "BIOS Guard Lock" (this is MSR =
bit).Why chipsec doesn't verify this bit?
Regards,Tal

--===============3420637443590156281==
Content-Type: text/html
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.htm"

PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5PjxkaXYgY2xhc3M9InlhaG9vLXN0eWxlLXdyYXAiIHN0
eWxlPSJmb250LWZhbWlseTpIZWx2ZXRpY2EgTmV1ZSwgSGVsdmV0aWNhLCBBcmlhbCwgc2Fucy1z
ZXJpZjtmb250LXNpemU6MTZweDsiPjxkaXYgZGlyPSJsdHIiIGRhdGEtc2V0ZGlyPSJmYWxzZSI+
PGRpdj48ZGl2IGRpcj0ibHRyIiBkYXRhLXNldGRpcj0iZmFsc2UiPkhpPC9kaXY+PGRpdiBkaXI9
Imx0ciIgZGF0YS1zZXRkaXI9ImZhbHNlIj48YnI+PC9kaXY+PGRpdiBkaXI9Imx0ciIgZGF0YS1z
ZXRkaXI9ImZhbHNlIj5JJ20gbG9va2luZyBhdCAiU2t5bGFrZSBhbmQgS2FieSBMYWtlIFBsYXRm
b3JtIFNlY3VyZSBDb25maWd1cmF0aW9uIFNwZWNpZmljYXRpb24iLjwvZGl2PjwvZGl2PjxkaXYg
ZGlyPSJsdHIiIGRhdGEtc2V0ZGlyPSJmYWxzZSI+SXQgaGFzIGEgc2VjdGlvbiBuYW1lZCAiPHNw
YW4+QklPUyBHdWFyZCBTZWN1cml0eSBDb25maWd1cmF0aW9uIiB3aXRoIHNldmVyYWwgcmVjb21t
ZW5kYXRpb25zLjwvc3Bhbj48L2Rpdj48ZGl2IGRpcj0ibHRyIiBkYXRhLXNldGRpcj0iZmFsc2Ui
PjxzcGFuPkZvciBleGFtcGxlOiZuYnNwOzwvc3Bhbj5UZXN0ICJCSU9TIEd1YXJkIExvY2siICh0
aGlzIGlzIE1TUiBiaXQpLjwvZGl2PjxkaXYgZGlyPSJsdHIiIGRhdGEtc2V0ZGlyPSJmYWxzZSI+
V2h5IGNoaXBzZWMgZG9lc24ndCB2ZXJpZnkgdGhpcyBiaXQ/PC9kaXY+PGRpdiBkaXI9Imx0ciIg
ZGF0YS1zZXRkaXI9ImZhbHNlIj48YnI+PC9kaXY+PGRpdiBkaXI9Imx0ciIgZGF0YS1zZXRkaXI9
ImZhbHNlIj5SZWdhcmRzLDwvZGl2PjxkaXYgZGlyPSJsdHIiIGRhdGEtc2V0ZGlyPSJmYWxzZSI+
VGFsPC9kaXY+PGJyPjwvZGl2PjwvZGl2PjwvYm9keT48L2h0bWw+
--===============3420637443590156281==--