Page 1 of 1
X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 1:47 pm
by sillysirslyfox
I was going over the part list and looking at the i7. Why do some show aes and tmp while others don't when is the same chip? I looked on the Intel site and they all should support it. Is this simply a bios configuration that can easily be changed later?
Re: X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 2:42 pm
by jdrou
Where are you seeing those specs? If it's the same CPU it should have all the same features (note that TPM is not part of the CPU but AFAIK all versions of X220 should have it). Also, Sandy Bridge i3 CPUs don't have AES-NI though in case you might be looking at that.
Re: X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 3:01 pm
by sillysirslyfox
You are correct. What I meant was why do some have AMT, and AES. I saw the various chips and weather they had AMT, AES, TPM support on the HMM. Sadly I can't find an updated version which contains the i7-2640M, only one showing the i7-2620M.
I'm want to buy an X220 with an i7-2640M, and TPM, AMT, and AES-NI. I've found an 4290-CTO I like but I'm not sure if it has the features.
Re: X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 3:51 pm
by RealBlackStuff
Search Google for Lenovo's ltwbook_2013.pdf, they're in there.
Re: X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 3:57 pm
by sillysirslyfox
That's the one I have. I'm looking for an updated HMM so I see the load out for the 2640 boards.
Re: X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 4:22 pm
by RealBlackStuff
I see 4 i7-2640 models in there
Once you get the S/N, look up the parts:
https://support.lenovo.com/us/en/partslookup and compare the mobo P/N with the HMM.
Re: X220: why do some have tpm and aes and others don't?
Posted: Mon Apr 04, 2016 5:54 pm
by sillysirslyfox
The HMM does not contain any of the part numbers for the i7-2640M. The part numbers for the i7-2640M are -when I used the Lenovo Model lookup for 4290- 04Y1834, 04Y1835, and 04Y1836. The model of the X220 I'm looking at is an 4290-CTO (custom to order) I've searched the serial number associated with it, and looked up every part number. None of them are associated with the system board.
Does the serial number contain any information about the included parts for CTO Thinkpads?
Re: X220: why do some have tpm and aes and others don't?
Posted: Tue Apr 05, 2016 6:15 am
by jaspen-meyer
Are you asking about 'aes' or 'aes-ni'? Please clarify.
In otherwords, do you need just 'aes' or (AESENC, AESENCLAST, AESDEC, AESDECLAST, AESIMC, AESKEYGENASSIST, CLMUL)?
For what it's worth here's the output from my i5-2420m
(edit: corrected lshw output)
output of lshw:
Code: Select all
*-cpu
description: CPU
product: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
vendor: Intel Corp.
physical id: 1
bus info: cpu@0
version: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
serial: Not Supported by CPU
slot: CPU
size: 2217MHz
capacity: 2217MHz
width: 64 bits
clock: 100MHz
capabilities: x86-64 fpu fpu_exception wp vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36
clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp constant_tsc arch_perfmon pebs bts nopl xtopology
nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm pcid
sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb pln pts dtherm tpr_shadow
vnmi flexpriority ept vpid xsaveopt cpufreq
configuration: cores=2 enabledcores=2 threads=4
output of `cat /proc/cpuinfo`
Code: Select all
processor : 3
vendor_id : GenuineIntel
cpu family : 6
model : 42
model name : Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
stepping : 7
microcode : 0x1a
cpu MHz : 821.441
cache size : 3072 KB
physical id : 0
siblings : 4
core id : 1
cpu cores : 2
apicid : 3
initial apicid : 3
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2
ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts nopl xtopology nonstop_tsc aperfmperf eagerfpu pni
pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer
aes xsave avx lahf_lm ida arat epb pln pts dtherm tpr_shadow vnmi flexpriority ept vpid xsaveopt
bugs :
bogomips : 4585.40
clflush size : 64
cache_alignment : 64
address sizes : 36 bits physical, 48 bits virtual
power management:
Re: X220: why do some have tpm and aes and others don't?
Posted: Tue Apr 05, 2016 9:01 am
by RealBlackStuff
Re: X220: why do some have tpm and aes and others don't?
Posted: Tue Apr 05, 2016 11:59 am
by jdrou
From wikipedia: "AMT is designed into a secondary (service) processor located on the motherboard" so that is apparently something that requires motherboard design as well as vPro on the CPU.
I'm curious what the "AES" or "non-AES" designation means on those motherboard part numbers though (and the 2640M ones don't show either one). I'd suspect it was tied to presence of TPM chip but there are both "non-TPM AES" and "TPM non-AES" parts.
Re: X220: why do some have tpm and aes and others don't?
Posted: Thu Apr 07, 2016 2:11 am
by jaspen-meyer
I assume Lenovo blocked AES on some motherboards.
See, for example, the features of this modified bios:
https://www.bios-mods.com/forum/Thread- ... 2-83uj05us
Code: Select all
- whitelist removal
- Unblocked AES
- Unblocked advanced menu
- Unlocked memory speed
- Unblocked AES_MSR_0xE2
- new vbios Intel 2119