From d8fc4fa4e642a407f0fb0f365e1ea7227662a167 Mon Sep 17 00:00:00 2001
From: Subrata Banik <subratabanik@google.com>
Date: Sat, 1 Apr 2023 20:36:15 +0530
Subject: [PATCH] soc/intel/meteorlake: Set AES-NI Lock

This function performs locking of the AES-NI enablement state.

TEST=Able to build and boot google/rex.

Signed-off-by: Subrata Banik <subratabanik@google.com>
Change-Id: I16f1c14d8a0ca927a34c295cb95311bd4972d691
Reviewed-on: https://review.coreboot.org/c/coreboot/+/74160
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Kapil Porwal <kapilporwal@google.com>
Reviewed-by: Eric Lai <eric_lai@quanta.corp-partner.google.com>
---
 src/soc/intel/meteorlake/cpu.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/soc/intel/meteorlake/cpu.c b/src/soc/intel/meteorlake/cpu.c
index 6d64e5bb18..fa1b83f49c 100644
--- a/src/soc/intel/meteorlake/cpu.c
+++ b/src/soc/intel/meteorlake/cpu.c
@@ -143,6 +143,8 @@ void soc_core_init(struct device *cpu)
 	if (CONFIG(DROP_CPU_FEATURE_PROGRAM_IN_FSP)) {
 		/* Disable 3-strike error */
 		disable_three_strike_error();
+
+		set_aesni_lock();
 	}
 }