4 ms·
The feature was implemented in 2017 the only vendors that are using it are lenovo and dell. With lenovo being the only one using it on lower tier cpus than epyc
by YXNjaGVyZWdlbgo 5y ago
The feature was implemented in 2017 the only vendors that are using it are lenovo and dell. With lenovo being the only one using it on lower tier cpus than epyc.
- rasz 5y agoI imagine its Lenovo asking for lower prices on Chinese market bound CPUs and AMD being super happy killing secondary market after seeing Intel server/workstation CPUs flooding out of Asia.
- YXNjaGVyZWdlbgo 5y agoIt makes sense for server security as discussed by the same source as the op https://www.servethehome.com/amd-psb-vendor-locks-epyc-cpus-for-enhanced-security-at-a-cost/ https://www.servethehome.com/amd-psb-vendor-locks-epyc-cpus-...
- rasz 5y agoexcept those arent server chips
- YXNjaGVyZWdlbgo 5y agoThat's why I said in my initial comment that lenovo is the first vendor that uses it on workstation cpus. ie. Threadripper epyc is very much a server chip.
- monocasa 5y agoIt's probably both of their fault. Lenovo wouldn't do it unless there was something in it for them. I wouldn't be surprised if they get a better deal from AMD on these CPUs for being locked to a specific board (killing off their ability to be used in the parts reseller market).
- YXNjaGVyZWdlbgo 5y agoIt makes sense for server security as discussed by the same source as the op https://www.servethehome.com/amd-psb-vendor-locks-epyc-cpus-for-enhanced-security-at-a-cost/ https://www.servethehome.com/amd-psb-vendor-locks-epyc-cpus-...
- captainmuon 5y agoThat link doesn't explain how it improves security, as all mainboards of the vendor have the same key. All it does is prevent somebody from sneakily replacing the mainboard with a different brand! It would make more sense if the board was bound to the specific CPU (assuming the CPU is the root of trust). But then you could just encase it in some kind of thermal epoxy... It's obvious that this is supposed to limit the second hand server parts market.
- YXNjaGVyZWdlbgo 5y agoIf you read the two pages and you concluded that both AMD with their statement on Page 1 nor servethehome on Page 1 and Page 2 provided any information about how PSB works I can't help you.
- monocasa 5y agoOr that commenter read and understood the description of how it works, and failed to see how it increases security in a meaningful way. I also struggle to think of a threat model that this protects against.
- YXNjaGVyZWdlbgo 5y agoIf something is not on your level of expertise you can always have a look for people that have the required level. It's just one search away. https://blog.cloudflare.com/anchoring-trust-a-hardware-secure-boot-story/ https://blog.cloudflare.com/anchoring-trust-a-hardware-secur...
- newsclues 5y agoWas it OEMs that asked for the feature or did three letter agencies pay AMD and Intel to back door all CPUs?
- monocasa 5y agoCPUs being backdoored is orthogonal to this.
- newsclues 5y agoThe security processor is a black box. If the nsa wants a back door, could this functionality not be the justification for the security weakness created by installing the security processor? It’s what I’d do..,
- monocasa 5y agoThe security processor is there and starting the boot process whether or not it's checking a per CPU key on die.
- chiph 5y agoPerhaps not to back-door them, but to ensure when they (the government agencies) buy from Dell that the supply chain is intact and the BIOS hasn't been tampered with during shipping by a foreign agency. Like the NSA did to Cisco routers destined for international customers.