soc/intel/skylake: lock down TCO on pch finalize

Change-Id: I5bd95b3580adc0f4cffa667f8979b7cf08925720
Signed-off-by: Michael Niewöhner <michael.niewoehner@8com.de>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/35448
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Subrata Banik <subrata.banik@intel.com>
diff --git a/src/soc/intel/skylake/finalize.c b/src/soc/intel/skylake/finalize.c
index 8afaf4d..0d6f737 100644
--- a/src/soc/intel/skylake/finalize.c
+++ b/src/soc/intel/skylake/finalize.c
@@ -26,6 +26,7 @@
 #include <intelblocks/lpc_lib.h>
 #include <intelblocks/p2sb.h>
 #include <intelblocks/pcr.h>
+#include <intelblocks/tco.h>
 #include <intelblocks/thermal.h>
 #include <reg_script.h>
 #include <spi-generic.h>
@@ -72,6 +73,8 @@
 	config_t *config;
 	u8 reg8;
 
+	tco_lockdown();
+
 	/* Display me status before we hide it */
 	intel_me_status();