ChipSec

Run ChipSec on the DUT. The DUT needs chipsec_main with the chipsec kernel driver, and sudo. See Test Images for the supported kernel versions.

AttributeTypeRequiredDefaultDescription
cmdconstYeschipsecCommand Name
namestringYesName to uniquely identify the teststep. This name will show up in reports, logs and the WebUI
transportTransportObjectNoAdditional transport options
optionsOptionsObjectNoAdditional command options
parametersChipSecOptionsYesOptions passed into ChipSec

ChipSec Options

AttributeTypeRequiredDefaultDescription
modules[]stringYesList of modules that get executed from the ChipSec test suite
pchstringNoPCH parameter that gets passed into ChipSec as --pch parameter
platformstringNoPlatform parameter that gets passed into ChipSec as --platform parameter

ChipSec Example

cmd: chipsec
name: Run chipsec tests
transport:
  proto: ssh
  options:
    host: "[[attributes.Host]]"
    user: root
    password: root
parameters:
  modules:
    [
      common.bios_kbrd_buffer,
      common.bios_smi,
      common.bios_ts,
      common.bios_wp,
      common.ia32cfg,
      common.me_mfg_mode,
      common.memlock,
      common.rtclock,
      common.smm,
      common.smrr,
      common.spi_access,
      common.spi_desc,
      common.spi_fdopss,
      common.spi_lock,
      common.uefi.access_uefispec,
      common.memconfig,
      common.remap,
      common.smm_dma,
    ]