tree 32d21070ab5343979b6f95bae77567d26d6230d6
parent 59a621abc70464352eaf540bd6cb896935b9ba72
author Arthur Heymans <arthur@aheymans.xyz> 1617020633 +0200
committer Arthur Heymans <arthur@aheymans.xyz> 1620289601 +0000

security/tpm: Add option to init TPM in bootblock

When using a hardware assisted root of trust measurement, like Intel
TXT/CBnT, the TPM init needs to happen inside the bootblock to form a
proper chain of trust.

Change-Id: Ifacba5d9ab19b47968b4f2ed5731ded4aac55022
Signed-off-by: Arthur Heymans <arthur@aheymans.xyz>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/51923
Reviewed-by: Christian Walter <christian.walter@9elements.com>
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>