> Its not really vendor locking by design. It locks to a signing key. I see, so it's basically AMD's implementation of Intel Boot Guard, but on servers instead

> Its not really vendor locking by design. It locks to a signing key. I see, so it's basically AMD's implementation of Intel Boot Guard, but on servers instead of laptops. On boot, the CPU verifies the BIOS's signature from its OTP memory and refuses to boot if verification fails. Theoretically, if you move CPUs between different laptops, you'll find the CPUs are locked to its platform as well, but we don't feel it since they are not replaceable, the only visible effect is that the firmware has been locked and you cannot run coreboot. And now the same thing is coming to servers and it has a bigger visible effect...