memlock module

This module checks if memory configuration is locked to protect SMM

Reference:

• https://github.com/coreboot/coreboot/blob/master/src/cpu/intel/model_206ax/finalize.c

• https://github.com/coreboot/coreboot/blob/master/src/soc/intel/broadwell/include/soc/msr.h

This module checks the following: - MSR_LT_LOCK_MEMORY MSR (0x2E7) - Bit [0]

The module returns the following results:

• FAILED : MSR_LT_LOCK_MEMORY[0] is not set

• PASSED : MSR_LT_LOCK_MEMORY[0] is set

• ERROR : Problem reading MSR_LT_LOCK_MEMORY values

Usage:

chipsec_main -m common.memlock

Example:

>>> chipsec_main.py -m common.memlock

Registers used:

• MSR_LT_LOCK_MEMORY

Note

• This module will not run on Atom based platforms.