Device Security checks failed

Asked by Andrew Palmer

Device Security Report
======================

Report details
  Date generated: 2025-02-03 17:53:12
  fwupd version: 1.9.16

System details
  Hardware model: Google Teemo
  Processor: Intel(R) Celeron(R) CPU 3865U @ 1.80GHz
  OS: Ubuntu 24.04.1 LTS
  Security level: HSI:0! (v1.9.16)

HSI-1 Tests
  Intel Management Engine Version: ! Fail
  UEFI Bootservice Variables: Pass (Locked)
  UEFI Platform Key: Pass (Valid)
  TPM v2.0: Pass (Found)
  Firmware BIOS Region: ! Fail (Not Locked)
  Firmware Write Protection Lock: Pass (Enabled)
  Platform Debugging: Pass (Not Enabled)
  Intel Management Engine Manufacturing Mode: ! Fail (Not Found)
  BIOS Firmware Updates: ! Fail (Not Enabled)
  UEFI Secure Boot: Pass (Enabled)
  Firmware Write Protection: Pass (Not Enabled)
  Intel Management Engine Override: ! Fail (Not Found)
  TPM Platform Configuration: Pass (Valid)

HSI-2 Tests
  Platform Debugging: Pass (Locked)
  Intel BootGuard ACM Protected: ! Fail (Not Found)
  IOMMU Protection: Pass (Enabled)
  Intel BootGuard Fuse: ! Fail (Not Found)
  Intel GDS Mitigation: Pass (Enabled)
  Intel BootGuard Verified Boot: ! Fail (Not Found)
  TPM Reconstruction: ! Fail (Not Found)
  Intel BootGuard: ! Fail (Not Found)

HSI-3 Tests
  Pre-boot DMA Protection: ! Fail (Not Enabled)
  Intel BootGuard Error Policy: ! Fail (Not Found)
  Control-flow Enforcement Technology: ! Fail (Not Supported)
  Suspend To RAM: Pass (Not Enabled)
  Suspend To Idle: Pass (Enabled)

HSI-4 Tests
  Encrypted RAM: ! Fail (Not Supported)
  Supervisor Mode Access Prevention: Pass (Enabled)

Runtime Tests
  Firmware Updater Verification: Pass (Not Tainted)
  Linux Swap: ! Fail (Not Encrypted)
  Linux Kernel Verification: Pass (Not Tainted)
  Linux Kernel Lockdown: Pass (Enabled)

Host security events

For information on the contents of this report, see https://fwupd.github.io/hsi.html

I'm using mrchromebox bios and secure boot enabled that's showing fine and enabled but checks failed hardware does not pass checks.

Question information

Language:
English Edit question
Status:
Open
For:
Ubuntu Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:

Can you help with this problem?

Provide an answer of your own, or ask Andrew Palmer for more information if necessary.

To post a message you must log in.