Building a Bootable USB drive with UEFI Shell (x64)

1. Format your media as FAT32

2. Create the following directory structure in the root of the new media

   • /efi/boot

3. Download the UEFI Shell (Shell.efi) from the following link

   • https://github.com/tianocore/edk2/blob/UDK2018/ShellBinPkg/UefiShell/X64/Shell.efi

4. Rename the UEFI shell file to Bootx64.efi

5. Copy the UEFI shell (now Bootx64.efi) to the /efi/boot directory

Installing CHIPSEC

1. Extract the contents of __install__/UEFI/chipsec_py368_uefi_x64.zip to the USB drive, as appropriate.

   • This will create a /efi/Tools directory with Python368.efi and /efi/StdLib with subdirectories for dependencies.

2. Copy the contents of CHIPSEC to the USB drive.

   The contents of your drive should look like follows:

   -  fs0:
      -  efi
         -  boot
            -  bootx64.efi (optional)
         -  StdLib
            -  lib
               -  python36.8
                  -  [lots of python files and directories]
         -  Tools
            -  Python368.efi
      -  chipsec
         -  chipsec
            -  …
         -  chipsec_main.py
         -  chipsec_util.py
         -  …
   

3. Reboot to the USB drive (this will boot to UEFI shell).

   • You may need to enable booting from USB in BIOS setup.

   • You will need to disable UEFI Secure Boot to boot to the UEFI Shell.

Run CHIPSEC in UEFI Shell

fs0:

cd chipsec

python368.efi chipsec_main.py or python368.efi chipsec_util.py

Next follow steps in section “Basic Usage” of Running CHIPSEC

(OPTIONAL) Extending CHIPSEC UEFI Python 3.6.8 functionality

Skip this section if you don’t plan on extending native UEFI functionality for CHIPSEC.

Native functions accessing HW resources are built directly into Python UEFI port in built-in edk2 module. If you want to add more native functionality to Python UEFI port for CHIPSEC, you’ll need to re-build Python for UEFI:

1. Start with Py368Readme.txt

   • Latest EDK2, visit Tianocore EDK2 Github (Make sure to update submodules)

   • Latest EDK2-LIBC, visit Tianocore EDK2-LIBC Github

   • Follow setup steps described in the Py368Readme.txt

2. Import files from the CHIPSEC Python 3.6.8 port for EFI Shell

   • Replace existing AppPkg/Applications/Python/Python-3.6.8/PyMod-3.6.8/Modules/edk2module.c file with edk2module.c

   • Copy cpu.asm file to AppPkg/Applications/Python/Python-3.6.8/PyMode-3.6.8/Modules/

   • Add PyMod-$(PYTHON_VERSION)/Modules/cpu.asm line under the [Sources.X64] section in AppPkg/Applications/Python/Python-3.6.8/Python368.inf

3. Make modifications as needed

   • All CHIPSEC related functions are in edk2module.c (#ifdef CHIPSEC)

   • Asm functions are in cpu.asm

4. Build and directory creation steps are covered in the Py368ReadMe.txt