SecurityPkg: Add EnrollFromDefaultKeys application.

This application allows user to force key enrollment from
Secure Boot default variables.

Signed-off-by: Grzegorz Bernacki <gjb@semihalf.com>
Reviewed-by: Jiewen Yao <Jiewen.yao@intel.com>
Reviewed-by: Sunny Wang <sunny.wang@arm.com>
This commit is contained in:
Grzegorz Bernacki
2021-08-02 12:46:31 +02:00
committed by mergify[bot]
parent 94e065582b
commit 19107590b6
2 changed files with 163 additions and 0 deletions

View File

@@ -0,0 +1,48 @@
## @file
# Enroll PK, KEK, db, dbx from Default variables
#
# Copyright (c) 2021, ARM Ltd. All rights reserved.<BR>
# Copyright (c) 2021, Semihalf All rights reserved.<BR>
# SPDX-License-Identifier: BSD-2-Clause-Patent
##
[Defines]
INF_VERSION = 1.28
BASE_NAME = EnrollFromDefaultKeysApp
FILE_GUID = 6F18CB2F-1293-4BC1-ABB8-35F84C71812E
MODULE_TYPE = UEFI_APPLICATION
VERSION_STRING = 0.1
ENTRY_POINT = UefiMain
[Sources]
EnrollFromDefaultKeysApp.c
[Packages]
MdeModulePkg/MdeModulePkg.dec
MdePkg/MdePkg.dec
SecurityPkg/SecurityPkg.dec
[Guids]
gEfiCertPkcs7Guid
gEfiCertSha256Guid
gEfiCertX509Guid
gEfiCustomModeEnableGuid
gEfiGlobalVariableGuid
gEfiImageSecurityDatabaseGuid
gEfiSecureBootEnableDisableGuid
[Protocols]
gEfiSmbiosProtocolGuid ## CONSUMES
[LibraryClasses]
BaseLib
BaseMemoryLib
DebugLib
MemoryAllocationLib
PrintLib
UefiApplicationEntryPoint
UefiBootServicesTableLib
UefiLib
UefiRuntimeServicesTableLib
SecureBootVariableLib
SecureBootVariableProvisionLib