.. | .. |
---|
21 | 21 | If a device is authorized automatically during boot its |
---|
22 | 22 | boot attribute is set to 1. |
---|
23 | 23 | |
---|
| 24 | +What: /sys/bus/thunderbolt/devices/.../domainX/iommu_dma_protection |
---|
| 25 | +Date: Mar 2019 |
---|
| 26 | +KernelVersion: 4.21 |
---|
| 27 | +Contact: thunderbolt-software@lists.01.org |
---|
| 28 | +Description: This attribute tells whether the system uses IOMMU |
---|
| 29 | + for DMA protection. Value of 1 means IOMMU is used 0 means |
---|
| 30 | + it is not (DMA protection is solely based on Thunderbolt |
---|
| 31 | + security levels). |
---|
| 32 | + |
---|
24 | 33 | What: /sys/bus/thunderbolt/devices/.../domainX/security |
---|
25 | 34 | Date: Sep 2017 |
---|
26 | 35 | KernelVersion: 4.13 |
---|
.. | .. |
---|
28 | 37 | Description: This attribute holds current Thunderbolt security level |
---|
29 | 38 | set by the system BIOS. Possible values are: |
---|
30 | 39 | |
---|
31 | | - none: All devices are automatically authorized |
---|
32 | | - user: Devices are only authorized based on writing |
---|
33 | | - appropriate value to the authorized attribute |
---|
34 | | - secure: Require devices that support secure connect at |
---|
35 | | - minimum. User needs to authorize each device. |
---|
36 | | - dponly: Automatically tunnel Display port (and USB). No |
---|
37 | | - PCIe tunnels are created. |
---|
38 | | - usbonly: Automatically tunnel USB controller of the |
---|
| 40 | + ======= ================================================== |
---|
| 41 | + none All devices are automatically authorized |
---|
| 42 | + user Devices are only authorized based on writing |
---|
| 43 | + appropriate value to the authorized attribute |
---|
| 44 | + secure Require devices that support secure connect at |
---|
| 45 | + minimum. User needs to authorize each device. |
---|
| 46 | + dponly Automatically tunnel Display port (and USB). No |
---|
| 47 | + PCIe tunnels are created. |
---|
| 48 | + usbonly Automatically tunnel USB controller of the |
---|
39 | 49 | connected Thunderbolt dock (and Display Port). All |
---|
40 | 50 | PCIe links downstream of the dock are removed. |
---|
| 51 | + ======= ================================================== |
---|
41 | 52 | |
---|
42 | 53 | What: /sys/bus/thunderbolt/devices/.../authorized |
---|
43 | 54 | Date: Sep 2017 |
---|
.. | .. |
---|
52 | 63 | yet authorized. |
---|
53 | 64 | |
---|
54 | 65 | Possible values are supported: |
---|
55 | | - 1: The device will be authorized and connected |
---|
| 66 | + |
---|
| 67 | + == =========================================== |
---|
| 68 | + 1 The device will be authorized and connected |
---|
| 69 | + == =========================================== |
---|
56 | 70 | |
---|
57 | 71 | When key attribute contains 32 byte hex string the possible |
---|
58 | 72 | values are: |
---|
59 | | - 1: The 32 byte hex string is added to the device NVM and |
---|
60 | | - the device is authorized. |
---|
61 | | - 2: Send a challenge based on the 32 byte hex string. If the |
---|
62 | | - challenge response from device is valid, the device is |
---|
63 | | - authorized. In case of failure errno will be ENOKEY if |
---|
64 | | - the device did not contain a key at all, and |
---|
65 | | - EKEYREJECTED if the challenge response did not match. |
---|
| 73 | + |
---|
| 74 | + == ======================================================== |
---|
| 75 | + 1 The 32 byte hex string is added to the device NVM and |
---|
| 76 | + the device is authorized. |
---|
| 77 | + 2 Send a challenge based on the 32 byte hex string. If the |
---|
| 78 | + challenge response from device is valid, the device is |
---|
| 79 | + authorized. In case of failure errno will be ENOKEY if |
---|
| 80 | + the device did not contain a key at all, and |
---|
| 81 | + EKEYREJECTED if the challenge response did not match. |
---|
| 82 | + == ======================================================== |
---|
66 | 83 | |
---|
67 | 84 | What: /sys/bus/thunderbolt/devices/.../boot |
---|
68 | 85 | Date: Jun 2018 |
---|
.. | .. |
---|
70 | 87 | Contact: thunderbolt-software@lists.01.org |
---|
71 | 88 | Description: This attribute contains 1 if Thunderbolt device was already |
---|
72 | 89 | authorized on boot and 0 otherwise. |
---|
| 90 | + |
---|
| 91 | +What: /sys/bus/thunderbolt/devices/.../generation |
---|
| 92 | +Date: Jan 2020 |
---|
| 93 | +KernelVersion: 5.5 |
---|
| 94 | +Contact: Christian Kellner <christian@kellner.me> |
---|
| 95 | +Description: This attribute contains the generation of the Thunderbolt |
---|
| 96 | + controller associated with the device. It will contain 4 |
---|
| 97 | + for USB4. |
---|
73 | 98 | |
---|
74 | 99 | What: /sys/bus/thunderbolt/devices/.../key |
---|
75 | 100 | Date: Sep 2017 |
---|
.. | .. |
---|
94 | 119 | Contact: thunderbolt-software@lists.01.org |
---|
95 | 120 | Description: This attribute contains name of this device extracted from |
---|
96 | 121 | the device DROM. |
---|
| 122 | + |
---|
| 123 | +What: /sys/bus/thunderbolt/devices/.../rx_speed |
---|
| 124 | +Date: Jan 2020 |
---|
| 125 | +KernelVersion: 5.5 |
---|
| 126 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 127 | +Description: This attribute reports the device RX speed per lane. |
---|
| 128 | + All RX lanes run at the same speed. |
---|
| 129 | + |
---|
| 130 | +What: /sys/bus/thunderbolt/devices/.../rx_lanes |
---|
| 131 | +Date: Jan 2020 |
---|
| 132 | +KernelVersion: 5.5 |
---|
| 133 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 134 | +Description: This attribute reports number of RX lanes the device is |
---|
| 135 | + using simultaneusly through its upstream port. |
---|
| 136 | + |
---|
| 137 | +What: /sys/bus/thunderbolt/devices/.../tx_speed |
---|
| 138 | +Date: Jan 2020 |
---|
| 139 | +KernelVersion: 5.5 |
---|
| 140 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 141 | +Description: This attribute reports the TX speed per lane. |
---|
| 142 | + All TX lanes run at the same speed. |
---|
| 143 | + |
---|
| 144 | +What: /sys/bus/thunderbolt/devices/.../tx_lanes |
---|
| 145 | +Date: Jan 2020 |
---|
| 146 | +KernelVersion: 5.5 |
---|
| 147 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 148 | +Description: This attribute reports number of TX lanes the device is |
---|
| 149 | + using simultaneusly through its upstream port. |
---|
97 | 150 | |
---|
98 | 151 | What: /sys/bus/thunderbolt/devices/.../vendor |
---|
99 | 152 | Date: Sep 2017 |
---|
.. | .. |
---|
133 | 186 | Contact: thunderbolt-software@lists.01.org |
---|
134 | 187 | Description: When new NVM image is written to the non-active NVM |
---|
135 | 188 | area (through non_activeX NVMem device), the |
---|
136 | | - authentication procedure is started by writing 1 to |
---|
137 | | - this file. If everything goes well, the device is |
---|
| 189 | + authentication procedure is started by writing to |
---|
| 190 | + this file. |
---|
| 191 | + If everything goes well, the device is |
---|
138 | 192 | restarted with the new NVM firmware. If the image |
---|
139 | 193 | verification fails an error code is returned instead. |
---|
| 194 | + |
---|
| 195 | + This file will accept writing values "1" or "2" |
---|
| 196 | + |
---|
| 197 | + - Writing "1" will flush the image to the storage |
---|
| 198 | + area and authenticate the image in one action. |
---|
| 199 | + - Writing "2" will run some basic validation on the image |
---|
| 200 | + and flush it to the storage area. |
---|
140 | 201 | |
---|
141 | 202 | When read holds status of the last authentication |
---|
142 | 203 | operation if an error occurred during the process. This |
---|
.. | .. |
---|
153 | 214 | question. Following directories are already reserved by |
---|
154 | 215 | the Apple XDomain specification: |
---|
155 | 216 | |
---|
156 | | - network: IP/ethernet over Thunderbolt |
---|
157 | | - targetdm: Target disk mode protocol over Thunderbolt |
---|
158 | | - extdisp: External display mode protocol over Thunderbolt |
---|
| 217 | + ======== =============================================== |
---|
| 218 | + network IP/ethernet over Thunderbolt |
---|
| 219 | + targetdm Target disk mode protocol over Thunderbolt |
---|
| 220 | + extdisp External display mode protocol over Thunderbolt |
---|
| 221 | + ======== =============================================== |
---|
159 | 222 | |
---|
160 | 223 | What: /sys/bus/thunderbolt/devices/<xdomain>.<service>/modalias |
---|
161 | 224 | Date: Jan 2018 |
---|
.. | .. |
---|
191 | 254 | Contact: thunderbolt-software@lists.01.org |
---|
192 | 255 | Description: This contains XDomain service specific settings as |
---|
193 | 256 | bitmask. Format: %x |
---|
| 257 | + |
---|
| 258 | +What: /sys/bus/thunderbolt/devices/<device>:<port>.<index>/device |
---|
| 259 | +Date: Oct 2020 |
---|
| 260 | +KernelVersion: v5.9 |
---|
| 261 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 262 | +Description: Retimer device identifier read from the hardware. |
---|
| 263 | + |
---|
| 264 | +What: /sys/bus/thunderbolt/devices/<device>:<port>.<index>/nvm_authenticate |
---|
| 265 | +Date: Oct 2020 |
---|
| 266 | +KernelVersion: v5.9 |
---|
| 267 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 268 | +Description: When new NVM image is written to the non-active NVM |
---|
| 269 | + area (through non_activeX NVMem device), the |
---|
| 270 | + authentication procedure is started by writing 1 to |
---|
| 271 | + this file. If everything goes well, the device is |
---|
| 272 | + restarted with the new NVM firmware. If the image |
---|
| 273 | + verification fails an error code is returned instead. |
---|
| 274 | + |
---|
| 275 | + When read holds status of the last authentication |
---|
| 276 | + operation if an error occurred during the process. |
---|
| 277 | + Format: %x. |
---|
| 278 | + |
---|
| 279 | +What: /sys/bus/thunderbolt/devices/<device>:<port>.<index>/nvm_version |
---|
| 280 | +Date: Oct 2020 |
---|
| 281 | +KernelVersion: v5.9 |
---|
| 282 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 283 | +Description: Holds retimer NVM version number. Format: %x.%x, major.minor. |
---|
| 284 | + |
---|
| 285 | +What: /sys/bus/thunderbolt/devices/<device>:<port>.<index>/vendor |
---|
| 286 | +Date: Oct 2020 |
---|
| 287 | +KernelVersion: v5.9 |
---|
| 288 | +Contact: Mika Westerberg <mika.westerberg@linux.intel.com> |
---|
| 289 | +Description: Retimer vendor identifier read from the hardware. |
---|
| 290 | + |
---|
| 291 | +What: /sys/bus/thunderbolt/devices/.../nvm_authenticate_on_disconnect |
---|
| 292 | +Date: Oct 2020 |
---|
| 293 | +KernelVersion: v5.9 |
---|
| 294 | +Contact: Mario Limonciello <mario.limonciello@dell.com> |
---|
| 295 | +Description: For supported devices, automatically authenticate the new Thunderbolt |
---|
| 296 | + image when the device is disconnected from the host system. |
---|
| 297 | + |
---|
| 298 | + This file will accept writing values "1" or "2" |
---|
| 299 | + |
---|
| 300 | + - Writing "1" will flush the image to the storage |
---|
| 301 | + area and prepare the device for authentication on disconnect. |
---|
| 302 | + - Writing "2" will run some basic validation on the image |
---|
| 303 | + and flush it to the storage area. |
---|