soc/intel/skylake: lock down TCO on pch finalize

Change-Id: I5bd95b3580adc0f4cffa667f8979b7cf08925720
Signed-off-by: Michael Niewöhner <michael.niewoehner@8com.de>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/35448
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Subrata Banik <subrata.banik@intel.com>

src/soc/intel/skylake/finalize.c

@@ -26,6 +26,7 @@
 #include <intelblocks/lpc_lib.h>
 #include <intelblocks/p2sb.h>
 #include <intelblocks/pcr.h>
+#include <intelblocks/tco.h>
 #include <intelblocks/thermal.h>
 #include <reg_script.h>
 #include <spi-generic.h>
@@ -72,6 +73,8 @@ static void pch_finalize_script(struct device *dev)
 	config_t *config;
 	u8 reg8;
 
+	tco_lockdown();
+
 	/* Display me status before we hide it */
 	intel_me_status();