soc/intel/xeon_sp/cpx: Add locking of IA32_FEATURE_CONTROL and VMX

Change-Id: Ib329648f77acecccb0ced1806f61be252d03f2f4
Signed-off-by: Christian Walter <christian.walter@9elements.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/45869
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Reviewed-by: Patrick Rudolph <siro@das-labor.org>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>

src/soc/intel/xeon_sp/cpx/cpu.c

@@ -16,6 +16,7 @@
 #include <soc/msr.h>
 #include <soc/soc_util.h>
 #include "chip.h"
+#include <cpu/intel/common/common.h>
 
 static const void *microcode_patch;
 
@@ -91,6 +92,9 @@ static void each_cpu_init(struct device *cpu)
 
 	/* Clear out pending MCEs */
 	xeon_configure_mca();
+
+	/* Enable Vmx */
+	set_vmx_and_lock();
 }
 
 static struct device_operations cpu_dev_ops = {