chipsec.modules.common.bios_smi module

The module checks that SMI events configuration is locked down - Global SMI Enable/SMI Lock - TCO SMI Enable/TCO Lock

References:

• Setup for Failure: Defeating SecureBoot by Corey Kallenberg, Xeno Kovah, John Butterworth, Sam Cornwell

• Summary of Attacks Against BIOS and Secure Boot

Usage:

chipsec_main -m common.bios_smi

Examples:

>>> chipsec_main.py -m common.bios_smi

Registers used:

• SmmBiosWriteProtection (Control)

• TCOSMILock (Control)

• SMILock (Control)

• BiosWriteEnable (Control)