| ## This file is part of the coreboot project. |
| ## |
| ## Copyright (c) 2013 The Chromium OS Authors. All rights reserved. |
| ## Copyright (C) 2018 Facebook Inc. |
| ## |
| ## This program is free software; you can redistribute it and/or modify |
| ## it under the terms of the GNU General Public License as published by |
| ## the Free Software Foundation; version 2 of the License. |
| ## |
| ## This program is distributed in the hope that it will be useful, |
| ## but WITHOUT ANY WARRANTY; without even the implied warranty of |
| ## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| ## GNU General Public License for more details. |
| ## |
| |
| source "src/security/tpm/tss/vendor/cr50/Kconfig" |
| |
| menu "Trusted Platform Module" |
| |
| config TPM1 |
| bool |
| default y if MAINBOARD_HAS_TPM1 || USER_TPM1 |
| depends on MAINBOARD_HAS_LPC_TPM || MAINBOARD_HAS_I2C_TPM_GENERIC \ |
| || MAINBOARD_HAS_I2C_TPM_ATMEL |
| |
| config TPM2 |
| bool |
| default y if MAINBOARD_HAS_TPM2 || USER_TPM2 |
| depends on MAINBOARD_HAS_I2C_TPM_GENERIC || MAINBOARD_HAS_LPC_TPM \ |
| || MAINBOARD_HAS_I2C_TPM_ATMEL || MAINBOARD_HAS_I2C_TPM_CR50 \ |
| || MAINBOARD_HAS_SPI_TPM_CR50 |
| |
| config MAINBOARD_HAS_TPM1 |
| bool |
| |
| config MAINBOARD_HAS_TPM2 |
| bool |
| |
| if !MAINBOARD_HAS_TPM1 && !MAINBOARD_HAS_TPM2 |
| |
| choice |
| prompt "Trusted Platform Module" |
| default USER_NO_TPM |
| |
| config USER_NO_TPM |
| bool "disabled" |
| |
| config USER_TPM1 |
| bool "1.2" |
| depends on MAINBOARD_HAS_LPC_TPM || MAINBOARD_HAS_I2C_TPM_GENERIC \ |
| || MAINBOARD_HAS_I2C_TPM_ATMEL |
| help |
| Enable this option to enable TPM 1.0 - 1.2 support in coreboot. |
| |
| If unsure, say N. |
| |
| config USER_TPM2 |
| bool "2.0" |
| depends on MAINBOARD_HAS_I2C_TPM_GENERIC || MAINBOARD_HAS_LPC_TPM \ |
| || MAINBOARD_HAS_I2C_TPM_ATMEL || MAINBOARD_HAS_I2C_TPM_CR50 \ |
| || MAINBOARD_HAS_SPI_TPM_CR50 |
| help |
| Enable this option to enable TPM 2.0 support in coreboot. |
| |
| If unsure, say N. |
| |
| endchoice |
| |
| endif |
| |
| config TPM_DEACTIVATE |
| bool "Deactivate TPM" |
| default n |
| depends on !VBOOT |
| depends on TPM1 |
| help |
| Deactivate TPM by issuing deactivate command. |
| |
| config DEBUG_TPM |
| bool "Output verbose TPM debug messages" |
| default n |
| select DRIVER_TPM_DISPLAY_TIS_BYTES if I2C_TPM |
| depends on TPM1 || TPM2 |
| help |
| This option enables additional TPM related debug messages. |
| |
| config TPM_RDRESP_NEED_DELAY |
| bool "Enable Delay Workaround for TPM" |
| default n |
| depends on LPC_TPM |
| help |
| Certain TPMs seem to need some delay when reading response |
| to work around a race-condition-related issue, possibly |
| caused by ill-programmed TPM firmware. |
| |
| endmenu # Trusted Platform Module (tpm) |
