Re: [Thunderbolt-Software] Thunderbolt security issue (NUC & CL)
by Richard Thornton
1. The directory exists but is empty
2. I have tried every way,
On 15 Sep. 2017 4:36 pm, "Bernat, Yehezkel" <yehezkel.bernat(a)intel.com>
wrote:
> -----Original Message-----
> From: Thunderbolt-Software [mailto:thunderbolt-software-
> bounces(a)lists.01.org] On Behalf Of Richard Thornton
> Sent: Friday, September 15, 2017 05:37
> To: thunderbolt-software(a)lists.01.org
> Subject: [Thunderbolt-Software] Thunderbolt security issue (NUC & CL)
>
> Arjan added TB support to Clear Linux for me, TB is detected now.
>
> My NUC7i5BNK (latest 51 BIOS) has the Thunderbolt Security set to
> Legacy Mode but the actual devices are not being detected (Akitio
> Thunder3 Quad, Akitio Thunder3 PCIe with e1000 installed and a Promise
> Sanlink 2 on Apple TB3 to TB2 converter, two of those three worked in
> Linux on Skull Canyon), the device powers on when the TB3 cable is
> detected but nothing shows up in Linux, I'm starting to suspect the
> BIOS.
>
> In dmesg I see: "ICM firmware is in wrong mode: 15"
>
> I couldn't find what mode 15 is but I have triple checked the BIOS is
> Legacy for TB security.
>
1. Is the host controller exposed in sysfs? Look for the content of
/sys/bus/thunderbolt/devices directory, if exists.
2. Do you connect the devices before the OS is up?
There is a known issue in the order of initialization of PCI that
causes issues when devices are connected before the OS is up.
This issue was fixed already in kernel v4.14-rc1.
To make sure you aren't affected by this issue, simply wait with the
device connection until the OS is up and running.
3. BTW, when the BIOS is set to Legacy mode, you don't really need this
kernel
module for devices to be connected (if you don't mind the possible
security
gap of this mode, depending on your use-case). It still allows you to do
FW
update if needed and helps investigating issues, as we can see here :)
Hi Yehezkel,
1. The directory exists but is empty.
2. I have tried every way, when I get back to my desk I will try again and
update if anything changes.
Thanks.
Richard
3 years, 5 months
Thunderbolt security issue (NUC & CL)
by Richard Thornton
Hi,
Sorry to bother you all.
Arjan added TB support to Clear Linux for me, TB is detected now.
My NUC7i5BNK (latest 51 BIOS) has the Thunderbolt Security set to
Legacy Mode but the actual devices are not being detected (Akitio
Thunder3 Quad, Akitio Thunder3 PCIe with e1000 installed and a Promise
Sanlink 2 on Apple TB3 to TB2 converter, two of those three worked in
Linux on Skull Canyon), the device powers on when the TB3 cable is
detected but nothing shows up in Linux, I'm starting to suspect the
BIOS.
In dmesg I see: "ICM firmware is in wrong mode: 15"
I couldn't find what mode 15 is but I have triple checked the BIOS is
Legacy for TB security.
Please help.
Thanks.
3 years, 5 months