Skip to content

Commit 62dc2d4

Browse files
authored
Add note about Intel TME
1 parent 99e993b commit 62dc2d4

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

‎etc/default/grub.d/40_kernel_hardening.cfg#security-misc-shared‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -243,6 +243,7 @@ GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX erst_disable"
243243
## This is hardware-based encryption managed by the proprietary and closed-source AMD Platform Security Processor (PSP).
244244
## Both require a compatible AMD CPU and support for SME to first be enabled in the BIOS/UEFI.
245245
## Likely unavailable in consumer-grade AMD CPUs where Transparent SME (TSME) can be enabled in the BIOS/UEFI to achieve SME.
246+
## Note the corresponding Intel Total Memory Encryption (TME) can also be enabled via the BIOS/UEFI.
246247
## May cause boot failure on certain hardware with incompatible DMA masks.
247248
##
248249
## https://www.kernel.org/doc/html/next/x86/amd-memory-encryption.html

0 commit comments

Comments
 (0)