summaryrefslogtreecommitdiff
path: root/meta-ibm/recipes-phosphor/settings/phosphor-settings-manager
diff options
context:
space:
mode:
authorJayashankar Padath <jayashankar.padath@in.ibm.com>2020-01-28 08:13:35 +0300
committerBrad Bishop <bradleyb@fuzziesquirrel.com>2020-02-06 20:18:41 +0300
commitaef8d92c297eb88f04032ce0b24e2b522be04f16 (patch)
tree90fb5f004efdfbe7abfb5f8964e274507ceee49f /meta-ibm/recipes-phosphor/settings/phosphor-settings-manager
parent99215cc2d1f78c8bff3a6b3e40d8ab5d0c4d45bd (diff)
downloadopenbmc-aef8d92c297eb88f04032ce0b24e2b522be04f16.tar.xz
Value setting for IPMI clear security keys
Support to set the value for ClearSecurityKeys property which can be used to indicate when certain security keys need to be cleared or reset those values back to its default state from the system by the host. This property is mapped to an IPMI sensor and default value will be zero. Setting this property does not gurantee a successful operation as additional conditions like the physical presence pin or jumper settings will be checked by the host to clear/reset the sensitive data. Tested: Verified that the property is getting created with the expected default value as zero and can be updated to different values using ipmitool or busctl command. 1. Default value output: busctl get-property xyz.openbmc_project.Settings /org/open_power/control/host0/ClearHostSecurityKeys org.open_power.Control.TPM.SecurityKeys ClearHostSecurityKeys y 0 ipmitool -I lanplus -H 9.3.185.33 -U root -P 0penBmc raw 0x04 0x2D 0xE8 00 40 00 00 2. Set to a new value as 5 using busctl command: busctl set-property xyz.openbmc_project.Settings /org/open_power/control/host0/ClearHostSecurityKeys org.open_power.Control.TPM.SecurityKeys ClearHostSecurityKeys y 5 3. After setting to a new value as 5: ipmitool -I lanplus -H 9.3.185.33 -U root -P 0penBmc raw 0x04 0x2D 0xE8 05 40 00 00 4. ipmitool command to set the value as 4 ipmitool -I lanplus -H 9.3.185.33 -U root -P 0penBmc raw 0x04 0x30 0xE8 0x00 0x04 0x00 0x00 0x00 0x00 0x00 0x00 0x00 ipmitool -I lanplus -H 9.3.185.33 -U root -P 0penBmc raw 0x04 0x2D 0xE8 09 40 00 00 5. Invalid value test o/p: ipmitool -I lanplus -H 9.3.185.33 -U root -P 0penBmc raw 0x04 0x30 0xE8 0x00 0x12C 0x00 0x00 0x00 0x00 0x00 0x00 0x00 Given data "0x12C" is invalid. (From meta-ibm rev: 81a9143100d5d4a7d97350afa1794be694d45590) Signed-off-by: Jayashankar Padath <jayashankar.padath@in.ibm.com> Change-Id: I9e12b6e5abb3a9b198921847605a74b771fd9945 Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>
Diffstat (limited to 'meta-ibm/recipes-phosphor/settings/phosphor-settings-manager')
0 files changed, 0 insertions, 0 deletions