I'm looking at "Skylake and Kaby Lake Platform Secure Configuration Specification".

It has a section named "BIOS Guard Security Configuration" with several recommendations.

For example: Test "BIOS Guard Lock" (this is MSR bit).

Why chipsec doesn't verify this bit?

Regards,

Tal