From c880d7566c413cfbeaf5681363c1f62d14fac093 Mon Sep 17 00:00:00 2001
From: Francis Rowe <info@gluglug.org.uk>
Date: Tue, 20 Oct 2015 18:15:52 +0100
Subject: docs/hcl/kgpe-d16: warn about IPMI iKVM module

---
 docs/hcl/kgpe-d16.html | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/docs/hcl/kgpe-d16.html b/docs/hcl/kgpe-d16.html
index be649031..5139109b 100644
--- a/docs/hcl/kgpe-d16.html
+++ b/docs/hcl/kgpe-d16.html
@@ -60,6 +60,16 @@
 			</p>
 	</div>
 	
+	<div class="section">
+		<h1 id="ipmi">IPMI iKVM module add-on</h1>
+			<p>
+				Don't use it. It uses proprietary firmware and adds a backdoor (remote out-of-band management chip,
+				similar to the <a href="http://libreboot.org/faq/#intelme">Intel Management Engine</a>. Fortunately,
+				the firmware is unsigned (possibly to replace) and physically separate from the mainboard since it's
+				on the add-on module, which you don't have to install.
+			</p>
+	</div>
+	
 	<div class="section">
 		<h1 id="flashchips">Flash chips</h1>
 			<p>
-- 
cgit v1.2.3-70-g09d2