Tests/Manufacturing Data

(These tests can only be done with firmware which allows the changing of manufacturing data) e.g. q2c28i.rom

(for how to change manufacturing data, see the team wiki)

Test Write Protect Flag

(this test needs to be done with a laptop that has not been activated)

Actions

1. Get to the ok prompt.
   • With q2c28i, if security is off, just press esc when the "Type Esc Key to interreupt automatic startup" comes up.
   • if security is on, hold the x game button while booting, and then press esc.
2. At the ok prompt, type .mfg-data
   • This will display the manufacturing data.
   • If you're in insecure mode, ww should be the first tag in the list, and if you're in secure mode, wp should be the first tag in the list.
3. If you're in insecure mode, type enable-security. (CAUTION: if using something other than q2c28i.rom, make sure that you will be able to disable security or activate your laptop, otherwise, you could lock up your laptop)
4. Power off the laptop.
5. Turn the laptop on, holding the x button, and press esc to get to the ok prompt.
6. Type .mft-data at the ok prompt.
   • The ww should now be a wp, meaning write protect is on.
7. Power off the laptop.
8. Turn the laptop on without holding any buttons.

To go back to insecure mode

• Turn on the laptop, while holding the x button, and then press the esc key.(unless the back door has changed to something else) At the ok prompt, type disable-security. (this should change the wp back to a ww)

Verify

• Enabling Security changes the manufacturing tag ww to wp.
• The laptop will not boot if the wp flag is set.
• One is not able to get to the ok prompt after enabling security. (NOTE: the x game key back door will be turned off in later firmware builds)

Test KA flag

(This test requires two laptops. One to do the test on, and one Actions

1. Download setka.zip and unzip it onto the root of a usb key
2. Insert the key into a shut down laptop.
3. Boot the laptop into the ok prompt. This is achieved different ways for different versions of firmware.
4. At the ok prompt, type: ok fload u:\setka.fth
   • This will give you a list of keyboard layouts to choose from
5. Enter one of the options.
   • This will change the manufacturing data KA flag value and reboot the laptop.
6. Get into the ok prompt again.
   • Your laptop should now be in the keyboard layout of the configuration you chose.
7. Find the layout of the configuration you chose: OLPC_Keyboard_layouts
8. Type: ok .mfg-data
   • This will display the manufacturing data.
   • There should be a KA flag at the end, with a long set of bits assigned to it.
9. Try each key to make sure that it matches the layout on the wiki page.
   • Some keys are dead keys, and will not type anything.
   • If there is a discrepancy, check the table beneath the picture, as those should be updated; whereas the pictures may not have been.
10. run the setka.fth again, switch to another layout, and repeat the test.

Verify

• The setka.fth script changed the KA flag.
• The layout has been mapped correctly to match that on OLPC_Keyboard_layouts

Test the ak flag

• (this is the activation flag, which when set, should allow the laptop to boot in secure mode)
• (this test was designed to work with firmware which has a backdoor into insecure boot)

Actions

1. Start with an unactivated laptop.
2. Get to the ok prompt.
3. Change the ww flag to wp. (turn on write protect)
4. Try booting a couple times. (should fail)
5. Boot, and use the back door (probably holding x) to get into insecure boot, and press esc, to get to the ok prompt.
6. Add the ak flag to the manufacturing data.
7. Try booting. (should work now)

Verify

• The laptop will not boot once the wp flag is set.
• The laptop does boot once the ak flag is set, and it is the secure boot, as apposed to insecure boot.