[renewiltord]

This is a ridiculously cool blogpost. Thanks for sharing. Lots of detail.

Since you've looked at the firmware there quite a lot would you be able to share if you noticed if ES/QS CPUs have different configurations in the firmware or if it's just a matter of duplicating and renaming so that they're recognized?

[miczyg]

I did not have any encounters with ES CPUs from AMD. I just remember my experience with Intel ES CPUs, which used a different set of keys for blob signing. I connected the dots and assumed that this is also true for AMD.

It is not about the configuration but rather a key burned into the CPU silicon that is used to verify the key used in blobs and the signatures of the blobs.

[renewiltord]

I see. So I need the appropriate BIOS or it won’t have the keys. Got it.