ASRock Forums : Tracking X370 UEFI issues

Tracking X370 UEFI issues : shmerl wrote:@basedmeezus:...

Sat, 13 Oct 2018 05:44:16 +0000

Author: basedmeezus
Subject: 9853
Posted: 13 Oct 2018 at 5:44am

shmerl wrote:

@basedmeezus: Just updated to UEFI 4.81, enabled SVM and all is working now! So newer kernel fixed it as you mentioned, even with older qemu. Thanks again for the hint!

Awesome, that's great to hear! For anyone else having this issue, I'd recommend updating your kernel to 4.18.13 + and also email asrock to fix this issue. The more people that contact Asrock with this issue, the sooner we'll be able to fix this.

Usually support will reply saying they don't have support for Linux OS, but reiterate that this is not a Linux issue, it is an issue with Agesa PinnaclePI-AM4_1.0.0.4 and Asrock Bios/UEFI saying supports Secure Encrypted Virtualization(SEV) when the hardware does not. To my knowledge Only AMD EPYC processors support SEV, SME, TSME, and Ryzen Pro Processors supporting only TSME.

Bios/UEFI need to stop advertising SEV when the hardware does not even support it.

For anyone who wants to get into the nitty gritty of this issue, I'd recommend checking out this Redhat Bug tracker related to this issue: https://bugzilla.redhat.com/show_bug.cgi?id=1608242

Edited by basedmeezus - 13 Oct 2018 at 5:44am

Tracking X370 UEFI issues : @basedmeezus: Just updated to...

Sat, 13 Oct 2018 05:25:57 +0000

Author: shmerl
Subject: 9853
Posted: 13 Oct 2018 at 5:25am

@basedmeezus: Just updated to UEFI 4.81, enabled SVM and all is working now! So newer kernel fixed it as you mentioned, even with older qemu. Thanks again for the hint!

Edited by shmerl - 13 Oct 2018 at 5:26am

Tracking X370 UEFI issues : From my current config: grep...

Sat, 13 Oct 2018 05:11:01 +0000

Author: shmerl
Subject: 9853
Posted: 13 Oct 2018 at 5:11am

From my current config:


grep PSP /boot/config-4.19.0-rc7-amd64 
CONFIG_CRYPTO_DEV_SP_PSP=y

So I suppose it can work now. I'll give it another try.

Tracking X370 UEFI issues : Yes, I'm already in touch...

Sat, 13 Oct 2018 04:49:22 +0000

Author: basedmeezus
Subject: 9853
Posted: 13 Oct 2018 at 4:49am

Yes, I'm already in touch with Asrock support to hopefully upgrade Bios to fix this, but it seem's like the person replying back to me is a bot :/ (pablo medina). I've asked them to escalate the issue to the dev team if possible.

I haven't used debian in a while, but I'm gonna take a wild guess and say the reason why you weren't able use kvm was maybe possibly debian recompiled the kernel with the following line of code: CONFIG_CRYPTO_DEV_SP_PSP=N which completely disables virtualization, but at the same time fixes shutdown hang time/feeze.

If hopefully that was the case, kernels 4.18.13+ added a timeout call which gets rid of hang time and re-enables kvm.

Tracking X370 UEFI issues : basedmeezus wrote:Bios/uefi...

Sat, 13 Oct 2018 04:29:46 +0000

Author: shmerl
Subject: 9853
Posted: 13 Oct 2018 at 4:29am

basedmeezus wrote:

Bios/uefi advertises that it supports secured encrypted virtualization but does not answer kernel calls requesting if the hardware supports it.

Does it mean it's still a bug in UEFI?

Tracking X370 UEFI issues : Debian testing. I haven't...

Sat, 13 Oct 2018 04:28:28 +0000

Author: shmerl
Subject: 9853
Posted: 13 Oct 2018 at 4:28am

Debian testing. I haven't tried the UEFI update recently, but I'll give it a try with the recent 4.19 kernel.

Tracking X370 UEFI issues : I'm on mobile at the moment...

Sat, 13 Oct 2018 04:14:37 +0000

Author: basedmeezus
Subject: 9853
Posted: 13 Oct 2018 at 4:14am

I'm on mobile at the moment and can't really check. What version of Debian are you running?

EDIT: QEMU 3.0.0 can be built from source from here: https://www.qemu.org/download/#source

EDIT2: Not sure if your UEFI will have this option, but try disabling PSP. I'm currently at work, but once I get home, I can tell you where it resides in my B450 Fatal1ty gaming k4

Edited by basedmeezus - 13 Oct 2018 at 4:26am

Tracking X370 UEFI issues : basedmeezus wrote:For anyone...

Sat, 13 Oct 2018 03:17:48 +0000

Author: shmerl
Subject: 9853
Posted: 13 Oct 2018 at 3:17am

basedmeezus wrote:

For anyone else, this is due to agesa pinnacle_pi 1.0.0.4. Bios/uefi advertises that it supports secured encrypted virtualization but does not answer kernel calls requesting if the hardware supports it.

As for op, if you update your kernel to latest stable build, it should fix ur kvm issue. Also update kvm and qemu.

Interesting, thanks for the info! So newest kernel works around this problem? I'm now on 4.19.0-rc7, due to 4.18 having a ton of problems with AMD Vega and DisplayPort. Debian testing is shipping Qemu 2.12. Newer one (3.0) wasn't packaged yet. Should 2.12 work with it?

Edited by shmerl - 13 Oct 2018 at 3:28am

Tracking X370 UEFI issues : For anyone else, this is due to...

Sat, 13 Oct 2018 02:35:32 +0000

Author: basedmeezus
Subject: 9853
Posted: 13 Oct 2018 at 2:35am

As for op, if you update your kernel to latest stable build, it should fix ur kvm issue. Also update kvm and qemu.

EDIT: there's some incorrect info here for anyone else reading this, I'll fix up all my mistakes once i get home. but overall, updating to kernel 4.18.13 + should resolve any issue

Edited by basedmeezus - 13 Oct 2018 at 5:55am

Tracking X370 UEFI issues : I stopped caring anymore. Since...

Wed, 10 Oct 2018 02:16:32 +0000

Author: xhue
Subject: 9853
Posted: 10 Oct 2018 at 2:16am

I stopped caring anymore. Since I'm way beyond RMA I ordered a new X470 from ASUS. As soon as it arrives I'm dumping this PoS on fleabay.

ASRock stopped caring about their customers the second they took your money form the purchase. I say give them NO more money. We can talk again in 5-10 years.