X220: why do some have tpm and aes and others don't?

[sillysirslyfox]

I was going over the part list and looking at the i7. Why do some show aes and tmp while others don't when is the same chip? I looked on the Intel site and they all should support it. Is this simply a bios configuration that can easily be changed later?

[jdrou]

Where are you seeing those specs? If it's the same CPU it should have all the same features (note that TPM is not part of the CPU but AFAIK all versions of X220 should have it). Also, Sandy Bridge i3 CPUs don't have AES-NI though in case you might be looking at that.

[sillysirslyfox]

You are correct. What I meant was why do some have AMT, and AES. I saw the various chips and weather they had AMT, AES, TPM support on the HMM. Sadly I can't find an updated version which contains the i7-2640M, only one showing the i7-2620M.

I'm want to buy an X220 with an i7-2640M, and TPM, AMT, and AES-NI. I've found an 4290-CTO I like but I'm not sure if it has the features.

[RealBlackStuff]

Search Google for Lenovo's ltwbook_2013.pdf, they're in there.

[sillysirslyfox]

That's the one I have. I'm looking for an updated HMM so I see the load out for the 2640 boards.

[RealBlackStuff]

I see 4 i7-2640 models in there
Once you get the S/N, look up the parts: https://support.lenovo.com/us/en/partslookup and compare the mobo P/N with the HMM.

[sillysirslyfox]

The HMM does not contain any of the part numbers for the i7-2640M. The part numbers for the i7-2640M are -when I used the Lenovo Model lookup for 4290- 04Y1834, 04Y1835, and 04Y1836. The model of the X220 I'm looking at is an 4290-CTO (custom to order) I've searched the serial number associated with it, and looked up every part number. None of them are associated with the system board.

Does the serial number contain any information about the included parts for CTO Thinkpads?

[jaspen-meyer]

Are you asking about 'aes' or 'aes-ni'? Please clarify.

In otherwords, do you need just 'aes' or (AESENC, AESENCLAST, AESDEC, AESDECLAST, AESIMC, AESKEYGENASSIST, CLMUL)?

For what it's worth here's the output from my i5-2420m

(edit: corrected lshw output)

output of lshw:

Code: Select all

      *-cpu
          description: CPU
          product: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
          vendor: Intel Corp.
          physical id: 1
          bus info: cpu@0
          version: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
          serial: Not Supported by CPU
          slot: CPU
          size: 2217MHz
          capacity: 2217MHz
          width: 64 bits
          clock: 100MHz
          capabilities: x86-64 fpu fpu_exception wp vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 
          clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp constant_tsc arch_perfmon pebs bts nopl xtopology 
          nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm pcid 
          sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb pln pts dtherm tpr_shadow 
          vnmi flexpriority ept vpid xsaveopt cpufreq
          configuration: cores=2 enabledcores=2 threads=4

output of `cat /proc/cpuinfo`

Code: Select all

processor	: 3
vendor_id	: GenuineIntel
cpu family	: 6
model		: 42
model name	: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
stepping	: 7
microcode	: 0x1a
cpu MHz		: 821.441
cache size	: 3072 KB
physical id	: 0
siblings	: 4
core id		: 1
cpu cores	: 2
apicid		: 3
initial apicid	: 3
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2
 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts nopl xtopology nonstop_tsc aperfmperf eagerfpu pni
  pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer 
  aes xsave avx lahf_lm ida arat epb pln pts dtherm tpr_shadow vnmi flexpriority ept vpid xsaveopt
bugs		:
bogomips	: 4585.40
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

[RealBlackStuff]

I guess you'll want the X220 HMM version 4: https://download.lenovo.com/ibmdl/pub/p ... 739_04.pdf

[jdrou]

From wikipedia: "AMT is designed into a secondary (service) processor located on the motherboard" so that is apparently something that requires motherboard design as well as vPro on the CPU.

I'm curious what the "AES" or "non-AES" designation means on those motherboard part numbers though (and the 2640M ones don't show either one). I'd suspect it was tied to presence of TPM chip but there are both "non-TPM AES" and "TPM non-AES" parts.

[jaspen-meyer]

I assume Lenovo blocked AES on some motherboards.

See, for example, the features of this modified bios:
https://www.bios-mods.com/forum/Thread- ... 2-83uj05us

Code: Select all

- whitelist removal
- Unblocked AES
- Unblocked advanced menu
- Unlocked memory speed
- Unblocked AES_MSR_0xE2
- new vbios Intel 2119