sravan/system76-edk2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SecurityPkg: INF/DEC file updates to EDK II packages

Browse Source 
1. Usage information in INF file comment blocks are either incomplete or incorrect.  
This includes usage information for Protocols/PPIs/GUIDs/PCDs/HOBs/Events/BootModes.  
The syntax for usage information in comment blocks is defined in the EDK II Module Information (INF) Specification

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Dong, Guo <guo.dong@intel.com>
Reviewed-by: Gao, Liming <liming.gao@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@15950 6f19259b-4bc3-4df7-8a09-765794883524
This commit is contained in:
Dong, Guo
2014-08-28 05:31:09 +00:00
committed by lgao4
parent 5841ba45f2
commit 60c944c7d6
48 changed files with 881 additions and 450 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
SecurityPkg/Application/RngTest/RngTest.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# UEFI RNG (Random Number Generator) Protocol test application. # UEFI RNG (Random Number Generator) Protocol test application.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This application can print out the supported RNG algorithm in UEFI RNG Protocol.
# And then it will do a generation test on the supported RNG algorithm.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -19,6 +22,7 @@
MODULE_TYPE = UEFI_APPLICATION MODULE_TYPE = UEFI_APPLICATION
VERSION_STRING = 1.0 VERSION_STRING = 1.0
ENTRY_POINT = UefiMain ENTRY_POINT = UefiMain
MODULE_UNI_FILE = RngTest.uni
# #
# The following information is for reference only and not required by the build tools. # The following information is for reference only and not required by the build tools.
@ -39,12 +43,15 @@
UefiLib UefiLib
[Protocols] [Protocols]
gEfiRngProtocolGuid gEfiRngProtocolGuid ## CONSUMES
[Guids] [Guids]
gEfiRngAlgorithmSp80090Hash256Guid gEfiRngAlgorithmSp80090Hash256Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmSp80090Hmac256Guid gEfiRngAlgorithmSp80090Hmac256Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmSp80090Ctr256Guid gEfiRngAlgorithmSp80090Ctr256Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmX9313DesGuid gEfiRngAlgorithmX9313DesGuid ## SOMETIMES_CONSUMES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmX931AesGuid gEfiRngAlgorithmX931AesGuid ## SOMETIMES_CONSUMES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmRaw gEfiRngAlgorithmRaw ## SOMETIMES_CONSUMES ## GUID # Unique ID of the algorithm for RNG
[UserExtensions.TianoCore."ExtraFiles"]
RngTestExtra.uni

27
SecurityPkg/Application/VariableInfo/VariableInfo.inf
View File

@ -1,11 +1,12 @@
## @file ## @file
# This is a shell application that will display statistical information # A shell application that displays statistical information about variable usage
# about variable usage.
# Note that if Variable Dxe driver doesn't enable the feature by setting
# PcdVariableCollectStatistics as TRUE, The application will not display
# variable statistical information.
# #
# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR> # This application can display statistical information about variable usage for SMM variable
# driver and non-SMM variable driver.
# Note that if Variable Dxe driver doesn't enable the feature by setting PcdVariableCollectStatistics
# as TRUE, the application will not display variable statistical information.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -18,6 +19,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = VariableInfo BASE_NAME = VariableInfo
MODULE_UNI_FILE = VariableInfo.uni
FILE_GUID = B9EF901F-A2A2-4fc8-8D2B-3A2E07B301CC FILE_GUID = B9EF901F-A2A2-4fc8-8D2B-3A2E07B301CC
MODULE_TYPE = UEFI_APPLICATION MODULE_TYPE = UEFI_APPLICATION
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -46,9 +48,16 @@
MemoryAllocationLib MemoryAllocationLib
[Protocols] [Protocols]
gEfiSmmCommunicationProtocolGuid gEfiSmmCommunicationProtocolGuid ## SOMETIMES_CONSUMES
## UNDEFINED # Used to do smm communication
## SOMETIMES_CONSUMES
gEfiSmmVariableProtocolGuid gEfiSmmVariableProtocolGuid
[Guids] [Guids]
gEfiAuthenticatedVariableGuid ## CONSUMES ## Configuration Table Guid gEfiAuthenticatedVariableGuid ## SOMETIMES_CONSUMES ## SystemTable
gEfiVariableGuid ## CONSUMES ## Configuration Table Guid gEfiVariableGuid ## CONSUMES ## SystemTable
[UserExtensions.TianoCore."ExtraFiles"]
VariableInfoExtra.uni

23
SecurityPkg/Library/DxeDeferImageLoadLib/DxeDeferImageLoadLib.inf
View File

@ -1,7 +1,11 @@
## @file ## @file
# The library instance provides security service of deferring image load. # Provides security service of deferred image load
# #
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR> # The platform may need to defer the execution of an image because of security
# considerations. These deferred images will be recorded and then reported by
# installing an instance of the EFI_DEFERRED_IMAGE_LOAD_PROTOCOL.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeDeferImageLoadLib BASE_NAME = DxeDeferImageLoadLib
MODULE_UNI_FILE = DxeDeferImageLoadLib.uni
FILE_GUID = 5E2FAE1F-41DA-4fbd-BC81-603CE5CD8497 FILE_GUID = 5E2FAE1F-41DA-4fbd-BC81-603CE5CD8497
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -48,14 +53,16 @@
PcdLib PcdLib
[Protocols] [Protocols]
gEfiFirmwareVolume2ProtocolGuid gEfiFirmwareVolume2ProtocolGuid ## SOMETIMES_CONSUMES
gEfiBlockIoProtocolGuid gEfiBlockIoProtocolGuid ## SOMETIMES_CONSUMES
gEfiSimpleFileSystemProtocolGuid gEfiSimpleFileSystemProtocolGuid ## SOMETIMES_CONSUMES
gEfiDeferredImageLoadProtocolGuid ## SOMETIMES_PRODUCES
## SOMETIMES_CONSUMES
## NOTIFY
gEfiUserManagerProtocolGuid gEfiUserManagerProtocolGuid
gEfiDeferredImageLoadProtocolGuid
[Guids] [Guids]
gEfiGlobalVariableGuid gEfiGlobalVariableGuid ## SOMETIMES_CONSUMES ## Variable:L"BootOrder"
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdDeferImageLoadPolicy gEfiSecurityPkgTokenSpaceGuid.PcdDeferImageLoadPolicy ## SOMETIMES_CONSUMES

7
SecurityPkg/Library/DxeImageAuthenticationStatusLib/DxeImageAuthenticationStatusLib.inf
View File

@ -1,9 +1,9 @@
## @file ## @file
# The library instance provides security service of image authentication # Provides security service of image authentication status check
# status check in UEFI2.3.1. #
# Authentication Status Library module supports UEFI2.3.1 # Authentication Status Library module supports UEFI2.3.1
# #
# Copyright (c) 2012, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2012 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -16,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeImageAuthenticationStatusLib BASE_NAME = DxeImageAuthenticationStatusLib
MODULE_UNI_FILE = DxeImageAuthenticationStatusLib.uni
FILE_GUID = EB92D1DE-7C36-4680-BB88-A67E96049F72 FILE_GUID = EB92D1DE-7C36-4680-BB88-A67E96049F72
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0

42
SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.inf
View File

@ -1,13 +1,14 @@
## @file ## @file
# The library instance provides security service of image verification. # Provides security service of image verification
# Image verification Library module supports UEFI2.3.1 #
# This library hooks LoadImage() API to verify every image by the verification policy.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This library will have external input - PE/COFF image. # This library will have external input - PE/COFF image.
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issues such as
# buffer overflow, integer overflow. # buffer overflow or integer overflow.
# #
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -20,6 +21,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeImageVerificationLib BASE_NAME = DxeImageVerificationLib
MODULE_UNI_FILE = DxeImageVerificationLib.uni
FILE_GUID = 0CA970E1-43FA-4402-BC0A-81AF336BFFD6 FILE_GUID = 0CA970E1-43FA-4402-BC0A-81AF336BFFD6
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -58,20 +60,30 @@
TpmMeasurementLib TpmMeasurementLib
[Protocols] [Protocols]
gEfiFirmwareVolume2ProtocolGuid gEfiFirmwareVolume2ProtocolGuid ## SOMETIMES_CONSUMES
gEfiBlockIoProtocolGuid gEfiBlockIoProtocolGuid ## SOMETIMES_CONSUMES
gEfiSimpleFileSystemProtocolGuid gEfiSimpleFileSystemProtocolGuid ## SOMETIMES_CONSUMES
[Guids] [Guids]
gEfiCertTypeRsa2048Sha256Guid ## SOMETIMES_CONSUMES ## Variable:L"DB"
## SOMETIMES_CONSUMES ## Variable:L"DBX"
## PRODUCES ## SystemTable
## CONSUMES ## SystemTable
gEfiImageSecurityDatabaseGuid gEfiImageSecurityDatabaseGuid
## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the signature.
gEfiCertSha1Guid gEfiCertSha1Guid
## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the signature.
gEfiCertSha256Guid gEfiCertSha256Guid
gEfiCertX509Guid
gEfiCertRsa2048Guid gEfiCertX509Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
gEfiCertPkcs7Guid gEfiCertPkcs7Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the certificate.
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdOptionRomImageVerificationPolicy gEfiSecurityPkgTokenSpaceGuid.PcdOptionRomImageVerificationPolicy ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdRemovableMediaImageVerificationPolicy gEfiSecurityPkgTokenSpaceGuid.PcdRemovableMediaImageVerificationPolicy ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdFixedMediaImageVerificationPolicy gEfiSecurityPkgTokenSpaceGuid.PcdFixedMediaImageVerificationPolicy ## SOMETIMES_CONSUMES

19
SecurityPkg/Library/DxeTcgPhysicalPresenceLib/DxeTcgPhysicalPresenceLib.inf
View File

@ -1,12 +1,15 @@
## @file ## @file
# TCG physical presence library instance. This library will lock # Executes pending TPM 1.2 requests from OS or BIOS and Locks TPM
# TPM after executing TPM request. #
# This library will check and execute TPM 1.2 request from OS or BIOS. The request may
# ask for user confirmation before execution. This Library will also lock TPM physical
# presence at last.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This driver will have external input - variable. # This driver will have external input - variable.
# This external input must be validated carefully to avoid security issue. # This external input must be validated carefully to avoid security issue.
# #
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -19,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeTcgPhysicalPresenceLib BASE_NAME = DxeTcgPhysicalPresenceLib
MODULE_UNI_FILE = DxeTcgPhysicalPresenceLib.uni
FILE_GUID = EBC43A46-34AC-4F07-A7F5-A5394619361C FILE_GUID = EBC43A46-34AC-4F07-A7F5-A5394619361C
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -52,8 +56,13 @@
HiiLib HiiLib
[Protocols] [Protocols]
gEfiTcgProtocolGuid gEfiTcgProtocolGuid ## CONSUMES
gEdkiiVariableLockProtocolGuid gEdkiiVariableLockProtocolGuid ## CONSUMES
[Guids] [Guids]
## CONSUMES ## HII
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresence"
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresenceFlags"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresenceFlags"
gEfiPhysicalPresenceGuid gEfiPhysicalPresenceGuid

22
SecurityPkg/Library/DxeTpm2MeasureBootLib/DxeTpm2MeasureBootLib.inf
View File

@ -1,12 +1,15 @@
## @file ## @file
# The library instance provides security service of TPM2 measure boot. # Provides security service for TPM 2.0 measured boot
#
# This library instance hooks LoadImage() API to measure every image that
# is not measured in PEI phase. And, it will also measure GPT partition.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This library will have external input - PE/COFF image and GPT partition. # This library will have external input - PE/COFF image and GPT partition.
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issues such
# buffer overflow, integer overflow. # as buffer overflow or integer overflow.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -19,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeTpm2MeasureBootLib BASE_NAME = DxeTpm2MeasureBootLib
MODULE_UNI_FILE = DxeTpm2MeasureBootLib.uni
FILE_GUID = 778CE4F4-36BD-4ae7-B8F0-10B420B0D174 FILE_GUID = 778CE4F4-36BD-4ae7-B8F0-10B420B0D174
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -53,11 +57,11 @@
HobLib HobLib
[Guids] [Guids]
gMeasuredFvHobGuid gMeasuredFvHobGuid ## SOMETIMES_CONSUMES ## HOB
[Protocols] [Protocols]
gEfiTrEEProtocolGuid ## CONSUMES gEfiTrEEProtocolGuid ## SOMETIMES_CONSUMES
gEfiFirmwareVolumeBlockProtocolGuid ## CONSUMES gEfiFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES
gEfiBlockIoProtocolGuid ## CONSUMES gEfiBlockIoProtocolGuid ## SOMETIMES_CONSUMES
gEfiDiskIoProtocolGuid ## CONSUMES gEfiDiskIoProtocolGuid ## SOMETIMES_CONSUMES

22
SecurityPkg/Library/DxeTpmMeasureBootLib/DxeTpmMeasureBootLib.inf
View File

@ -1,12 +1,15 @@
## @file ## @file
# The library instance provides security service of TPM measure boot. # Provides security service for TPM 1.2 measured boot
#
# This library instance hooks LoadImage() API to measure every image that
# is not measured in PEI phase. And, it will also measure GPT partition.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This library will have external input - PE/COFF image and GPT partition. # This library will have external input - PE/COFF image and GPT partition.
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issues such
# buffer overflow, integer overflow. # as buffer overflow or integer overflow.
# #
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -19,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeTpmMeasureBootLib BASE_NAME = DxeTpmMeasureBootLib
MODULE_UNI_FILE = DxeTpmMeasureBootLib.uni
FILE_GUID = 6C60C7D0-922A-4b7c-87D7-E503EDD73BBF FILE_GUID = 6C60C7D0-922A-4b7c-87D7-E503EDD73BBF
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -53,11 +57,11 @@
HobLib HobLib
[Guids] [Guids]
gMeasuredFvHobGuid gMeasuredFvHobGuid ## SOMETIMES_CONSUMES ## HOB
[Protocols] [Protocols]
gEfiTcgProtocolGuid ## CONSUMES gEfiTcgProtocolGuid ## SOMETIMES_CONSUMES
gEfiFirmwareVolumeBlockProtocolGuid ## CONSUMES gEfiFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES
gEfiBlockIoProtocolGuid ## CONSUMES gEfiBlockIoProtocolGuid ## SOMETIMES_CONSUMES
gEfiDiskIoProtocolGuid ## CONSUMES gEfiDiskIoProtocolGuid ## SOMETIMES_CONSUMES

12
SecurityPkg/Library/DxeTpmMeasurementLib/DxeTpmMeasurementLib.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# This library is used by other modules to measure data to TPM 1.2 or TPM 2.0. # Provides TPM measurement functions for TPM1.2 and TPM 2.0
# #
# Copyright (c) 2012 - 2013, Intel Corporation. All rights reserved.<BR> # This library provides TpmMeasureAndLogData() to to measure and log data, and
# extend the measurement result into a specific PCR.
#
# Copyright (c) 2012 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -18,6 +21,7 @@
MODULE_TYPE = UEFI_DRIVER MODULE_TYPE = UEFI_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
LIBRARY_CLASS = TpmMeasurementLib|DXE_DRIVER DXE_RUNTIME_DRIVER DXE_SAL_DRIVER DXE_SMM_DRIVER UEFI_APPLICATION UEFI_DRIVER LIBRARY_CLASS = TpmMeasurementLib|DXE_DRIVER DXE_RUNTIME_DRIVER DXE_SAL_DRIVER DXE_SMM_DRIVER UEFI_APPLICATION UEFI_DRIVER
MODULE_UNI_FILE = DxeTpmMeasurementLib.uni
# #
# The following information is for reference only and not required by the build tools. # The following information is for reference only and not required by the build tools.
@ -40,5 +44,5 @@
UefiBootServicesTableLib UefiBootServicesTableLib
[Protocols] [Protocols]
gEfiTcgProtocolGuid gEfiTcgProtocolGuid ## SOMETIMES_CONSUMES
gEfiTrEEProtocolGuid gEfiTrEEProtocolGuid ## SOMETIMES_CONSUMES

17
SecurityPkg/Library/DxeTrEEPhysicalPresenceLib/DxeTrEEPhysicalPresenceLib.inf
View File

@ -1,11 +1,14 @@
## @file ## @file
# TrEE physical presence library instance. This library will execute TPM2 request. # Executes TPM 2.0 requests from OS or BIOS
#
# This library will check and execute TPM 2.0 request from OS or BIOS. The request may
# ask for user confirmation before execution.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This driver will have external input - variable. # This driver will have external input - variable.
# This external input must be validated carefully to avoid security issue. # This external input must be validated carefully to avoid security issue.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -18,6 +21,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = DxeTrEEPhysicalPresenceLib BASE_NAME = DxeTrEEPhysicalPresenceLib
MODULE_UNI_FILE = DxeTrEEPhysicalPresenceLib.uni
FILE_GUID = 601ECB06-7874-489e-A280-805780F6C861 FILE_GUID = 601ECB06-7874-489e-A280-805780F6C861
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -52,8 +56,13 @@
Tpm2CommandLib Tpm2CommandLib
[Protocols] [Protocols]
gEfiTrEEProtocolGuid gEfiTrEEProtocolGuid ## CONSUMES
gEdkiiVariableLockProtocolGuid gEdkiiVariableLockProtocolGuid ## CONSUMES
[Guids] [Guids]
## CONSUMES ## HII
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresence"
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresenceFlags"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresenceFlags"
gEfiTrEEPhysicalPresenceGuid gEfiTrEEPhysicalPresenceGuid

8
SecurityPkg/Library/HashInstanceLibSha1/HashInstanceLibSha1.inf
View File

@ -1,8 +1,9 @@
## @file ## @file
# Ihis library is BaseCrypto SHA1 hash instance. # Provides BaseCrypto SHA1 hash service
# It can be registered to BaseCrypto router, to serve as hash engine.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library can be registered to BaseCrypto router, to serve as hash engine.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = HashInstanceLibSha1 BASE_NAME = HashInstanceLibSha1
MODULE_UNI_FILE = HashInstanceLibSha1.uni
FILE_GUID = 9A7A6AB4-9DA6-4aa4-90CB-6D4B79EDA7B9 FILE_GUID = 9A7A6AB4-9DA6-4aa4-90CB-6D4B79EDA7B9
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0

8
SecurityPkg/Library/HashInstanceLibSha256/HashInstanceLibSha256.inf
View File

@ -1,8 +1,9 @@
## @file ## @file
# Ihis library is BaseCrypto SHA256 hash instance. # Provides BaseCrypto SHA256 hash service
# It can be registered to BaseCrypto router, to serve as hash engine.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library can be registered to BaseCrypto router, to serve as hash engine.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = HashInstanceLibSha256 BASE_NAME = HashInstanceLibSha256
MODULE_UNI_FILE = HashInstanceLibSha256.uni
FILE_GUID = 5810798A-ED30-4080-8DD7-B9667A748C02 FILE_GUID = 5810798A-ED30-4080-8DD7-B9667A748C02
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0

13
SecurityPkg/Library/HashLibBaseCryptoRouter/HashLibBaseCryptoRouterDxe.inf
View File

@ -1,9 +1,11 @@
## @file ## @file
# Ihis library is BaseCrypto router. It will redirect hash request to each individual # Provides hash service by registered hash handler
# hash handler registerd, such as SHA1, SHA256.
# Platform can use PcdTpm2HashMask to mask some hash engines.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Ihis library is BaseCrypto router. It will redirect hash request to each individual
# hash handler registered, such as SHA1, SHA256. Platform can use PcdTpm2HashMask to
# mask some hash engines.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -16,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = HashLibBaseCryptoRouterDxe BASE_NAME = HashLibBaseCryptoRouterDxe
MODULE_UNI_FILE = HashLibBaseCryptoRouterDxe.uni
FILE_GUID = 158DC712-F15A-44dc-93BB-1675045BE066 FILE_GUID = 158DC712-F15A-44dc-93BB-1675045BE066
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -45,5 +48,5 @@
PcdLib PcdLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask ## CONSUMES

9
SecurityPkg/Library/HashLibBaseCryptoRouter/HashLibBaseCryptoRouterPei.inf
View File

@ -1,7 +1,9 @@
## @file ## @file
# Provides hash service by registered hash handler
#
# Ihis library is BaseCrypto router. It will redirect hash request to each individual # Ihis library is BaseCrypto router. It will redirect hash request to each individual
# hash handler registerd, such as SHA1, SHA256. # hash handler registered, such as SHA1, SHA256. Platform can use PcdTpm2HashMask to
# Platform can use PcdTpm2HashMask to mask some hash engines. # mask some hash engines.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -16,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = HashLibBaseCryptoRouterPei BASE_NAME = HashLibBaseCryptoRouterPei
MODULE_UNI_FILE = HashLibBaseCryptoRouterPei.uni
FILE_GUID = DDCBCFBA-8EEB-488a-96D6-097831A6E50B FILE_GUID = DDCBCFBA-8EEB-488a-96D6-097831A6E50B
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -46,5 +49,5 @@
HobLib HobLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask ## CONSUMES

10
SecurityPkg/Library/HashLibTpm2/HashLibTpm2.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# Ihis library uses TPM2 device to calculation hash. # Provides hash service using TPM2 device
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library uses TPM2 device to calculate hash. Platform can use PcdTpm2HashMask to
# mask some hash calculation.
#
# Copyright (c) 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = HashLibTpm2 BASE_NAME = HashLibTpm2
MODULE_UNI_FILE = HashLibTpm2.uni
FILE_GUID = 1317F0D5-7842-475c-B1CA-6EDC20DCBE7D FILE_GUID = 1317F0D5-7842-475c-B1CA-6EDC20DCBE7D
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -42,4 +46,4 @@
PcdLib PcdLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask ## CONSUMES

7
SecurityPkg/Library/PlatformSecureLibNull/PlatformSecureLibNull.inf
View File

@ -1,10 +1,12 @@
## @file ## @file
# NULL platform secure library instance that alway returns TRUE for a user physical present
#
# NULL PlatformSecureLib instance does NOT really detect whether a physical present # NULL PlatformSecureLib instance does NOT really detect whether a physical present
# user exists but return TRUE directly. This instance can be used to verify security # user exists but returns TRUE directly. This instance can be used to verify security
# related features during platform enabling and development. It should be replaced # related features during platform enabling and development. It should be replaced
# by a platform-specific method(e.g. Button pressed) in a real platform for product. # by a platform-specific method(e.g. Button pressed) in a real platform for product.
# #
# Copyright (c) 2011, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2011 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -17,6 +19,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = PlatformSecureLibNull BASE_NAME = PlatformSecureLibNull
MODULE_UNI_FILE = PlatformSecureLibNull.uni
FILE_GUID = 7FA68D82-10A4-4e71-9524-D3D9500D3CDF FILE_GUID = 7FA68D82-10A4-4e71-9524-D3D9500D3CDF
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0

7
SecurityPkg/Library/Tpm12CommandLib/Tpm12CommandLib.inf
View File

@ -1,7 +1,9 @@
## @file ## @file
# This library is used by other modules to send TPM12 command. # Provides some TPM 1.2 commands
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library is used by other modules to send TPM 1.2 command.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm12CommandLib BASE_NAME = Tpm12CommandLib
MODULE_UNI_FILE = Tpm12CommandLib.uni
FILE_GUID = C595047C-70B3-4731-99CC-A014E956D7A7 FILE_GUID = C595047C-70B3-4731-99CC-A014E956D7A7
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0

12
SecurityPkg/Library/Tpm12DeviceLibDTpm/Tpm12DeviceLibDTpm.inf
View File

@ -1,8 +1,11 @@
## @file ## @file
# Ihis library is TPM2 DTPM device lib. # Provides TPM 1.2 TIS functions
# Choosing this library means platform uses and only uses DTPM device as TPM2 engine.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library implements TIS (TPM Interface Specification) functions which is
# used for every TPM 1.2 command. Choosing this library means platform uses and
# only uses TPM 1.2 device.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm12DeviceLibDTpm BASE_NAME = Tpm12DeviceLibDTpm
MODULE_UNI_FILE = Tpm12DeviceLibDTpm.uni
FILE_GUID = BC2B7672-A48B-4d58-B39E-AEE3707B5A23 FILE_GUID = BC2B7672-A48B-4d58-B39E-AEE3707B5A23
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -41,4 +45,4 @@
DebugLib DebugLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress ## CONSUMES

8
SecurityPkg/Library/Tpm12DeviceLibTcg/Tpm12DeviceLibTcg.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# Ihis library is TPM12 TCG protocol lib. # Provides function interfaces to communicate with TPM 1.2 device
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library helps to use TPM 1.2 device in library function API
# based on TCG protocol.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm12DeviceLibTcg BASE_NAME = Tpm12DeviceLibTcg
MODULE_UNI_FILE = Tpm12DeviceLibTcg.uni
FILE_GUID = 4D8B77D9-E923-48f8-B070-4053D78B7E56 FILE_GUID = 4D8B77D9-E923-48f8-B070-4053D78B7E56
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0

7
SecurityPkg/Library/Tpm2CommandLib/Tpm2CommandLib.inf
View File

@ -1,7 +1,9 @@
## @file ## @file
# This library is used by other modules to send TPM2 command. # Provides some TPM 2.0 commands
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library is used by other modules to send TPM 2.0 command.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm2CommandLib BASE_NAME = Tpm2CommandLib
MODULE_UNI_FILE = Tpm2CommandLib.uni
FILE_GUID = 2F572F32-8BE5-4868-BD1D-7438AD97DC27 FILE_GUID = 2F572F32-8BE5-4868-BD1D-7438AD97DC27
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0

12
SecurityPkg/Library/Tpm2DeviceLibDTpm/Tpm2DeviceLibDTpm.inf
View File

@ -1,8 +1,11 @@
## @file ## @file
# Ihis library is TPM2 DTPM device lib. # Provides TPM 2.0 TIS functions for DTPM
# Choosing this library means platform uses and only uses DTPM device as TPM2 engine.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library implements TIS (TPM Interface Specification) functions which is
# used for every TPM 2.0 command. Choosing this library means platform uses and
# only uses TPM 2.0 DTPM device.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm2DeviceLibDTpm BASE_NAME = Tpm2DeviceLibDTpm
MODULE_UNI_FILE = Tpm2DeviceLibDTpm.uni
FILE_GUID = E54A3327-A345-4068-8842-70AC0D519855 FILE_GUID = E54A3327-A345-4068-8842-70AC0D519855
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -42,4 +46,4 @@
DebugLib DebugLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress ## CONSUMES

12
SecurityPkg/Library/Tpm2DeviceLibDTpm/Tpm2InstanceLibDTpm.inf
View File

@ -1,9 +1,10 @@
## @file ## @file
# Ihis library is TPM2 DTPM instance. # Provides a DTPM instance for TPM 2.0
# It can be registered to Tpm2 Device router, to be active TPM2 engine,
# based on platform setting.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library can be registered to Tpm 2.0 device router, to be active TPM 2.0
# engine, based on platform setting.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -16,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm2InstanceLibDTpm BASE_NAME = Tpm2InstanceLibDTpm
MODULE_UNI_FILE = Tpm2InstanceLibDTpm.uni
FILE_GUID = 286BF25A-C2C3-408c-B3B4-25E6758B7317 FILE_GUID = 286BF25A-C2C3-408c-B3B4-25E6758B7317
MODULE_TYPE = BASE MODULE_TYPE = BASE
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -44,4 +46,4 @@
DebugLib DebugLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress ## CONSUMES

13
SecurityPkg/Library/Tpm2DeviceLibRouter/Tpm2DeviceLibRouterDxe.inf
View File

@ -1,9 +1,11 @@
## @file ## @file
# Ihis library is TPM2 device router. Platform can register multi TPM2 instance to it # Provides TPM 2.0 TIS functions
# via PcdTpmInstanceGuid. Platform need make choice that which one will be final one.
# At most one TPM2 instance can be finally registered, and other will return unsupported.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Ihis library is TPM 2.0 device router. Platform can register multi TPM 2.0 instance to
# it via PcdTpmInstanceGuid. Platform need make choice that which one will be final one.
# At most one TPM 2.0 instance can be finally registered, and other will return unsupported.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -16,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm2DeviceLibRouterDxe BASE_NAME = Tpm2DeviceLibRouterDxe
MODULE_UNI_FILE = Tpm2DeviceLibRouterDxe.uni
FILE_GUID = C3D69D87-5200-4aab-A6DB-2569BA1A92FC FILE_GUID = C3D69D87-5200-4aab-A6DB-2569BA1A92FC
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -41,4 +44,4 @@
PcdLib PcdLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES

13
SecurityPkg/Library/Tpm2DeviceLibRouter/Tpm2DeviceLibRouterPei.inf
View File

@ -1,9 +1,11 @@
## @file ## @file
# Ihis library is TPM2 device router. Platform can register multi TPM2 instance to it # Provides TPM 2.0 TIS functions
# via PcdTpmInstanceGuid. Platform need make choice that which one will be final one.
# At most one TPM2 instance can be finally registered, and other will return unsupported.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Ihis library is TPM 2.0 device router. Platform can register multi TPM 2.0 instance to
# it via PcdTpmInstanceGuid. Platform need make choice that which one will be final one.
# At most one TPM 2.0 instance can be finally registered, and other will return unsupported.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -16,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm2DeviceLibRouterPei BASE_NAME = Tpm2DeviceLibRouterPei
MODULE_UNI_FILE = Tpm2DeviceLibRouterPei.uni
FILE_GUID = 97CDCF04-4C8E-42fe-8015-11CC8A6E9D81 FILE_GUID = 97CDCF04-4C8E-42fe-8015-11CC8A6E9D81
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -42,5 +45,5 @@
PcdLib PcdLib
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES

8
SecurityPkg/Library/Tpm2DeviceLibTrEE/Tpm2DeviceLibTrEE.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# Ihis library is TPM2 TREE protocol lib. # Provides function interfaces to communicate with TPM 2.0 device
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # This library helps to use TPM 2.0 device in library function API
# based on TrEE protocol.
#
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = Tpm2DeviceLibTrEE BASE_NAME = Tpm2DeviceLibTrEE
MODULE_UNI_FILE = Tpm2DeviceLibTrEE.uni
FILE_GUID = BBCB6F85-303C-4eb9-8182-AF98D4B3020C FILE_GUID = BBCB6F85-303C-4eb9-8182-AF98D4B3020C
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0

8
SecurityPkg/Library/TpmCommLib/TpmCommLib.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# TpmCommLib instance implements basis TPM Interface Specification (TIS) and TPM command functions. # Provides some common functions for the TCG feature
# #
# Copyright (c) 2006 - 2011, Intel Corporation. All rights reserved.<BR> # This instance provides basic TPM Interface Specification (TIS) functions
# and TPM hashall function.
#
# Copyright (c) 2006 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TpmCommLib BASE_NAME = TpmCommLib
MODULE_UNI_FILE = TpmCommLib.uni
FILE_GUID = 7d9fe32e-a6a9-4cdf-abff-10cc7f22e1c9 FILE_GUID = 7d9fe32e-a6a9-4cdf-abff-10cc7f22e1c9
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0

16
SecurityPkg/RandomNumberGenerator/RngDxe/RngDxe.inf
View File

@ -1,5 +1,5 @@
## @file ## @file
# Module that produces the UEFI Random Number Generator protocol. # Produces the UEFI Random Number Generator protocol
# #
# This module will leverage Intel Secure Key technology to produce the Random # This module will leverage Intel Secure Key technology to produce the Random
# Number Generator protocol, which is used to provide high-quality random numbers # Number Generator protocol, which is used to provide high-quality random numbers
@ -8,7 +8,7 @@
# -generator-drng-software-implementation-guide/ for more information about Intel # -generator-drng-software-implementation-guide/ for more information about Intel
# Secure Key technology. # Secure Key technology.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -26,6 +26,7 @@
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
ENTRY_POINT = RngDriverEntry ENTRY_POINT = RngDriverEntry
MODULE_UNI_FILE = RngDxe.uni
# #
# The following information is for reference only and not required by the build tools. # The following information is for reference only and not required by the build tools.
@ -63,12 +64,8 @@
TimerLib TimerLib
[Guids] [Guids]
gEfiRngAlgorithmSp80090Hash256Guid gEfiRngAlgorithmSp80090Ctr256Guid ## SOMETIMES_PRODUCES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmSp80090Hmac256Guid gEfiRngAlgorithmRaw ## SOMETIMES_PRODUCES ## GUID # Unique ID of the algorithm for RNG
gEfiRngAlgorithmSp80090Ctr256Guid
gEfiRngAlgorithmX9313DesGuid
gEfiRngAlgorithmX931AesGuid
gEfiRngAlgorithmRaw
[Protocols] [Protocols]
gEfiRngProtocolGuid ## PRODUCES gEfiRngProtocolGuid ## PRODUCES
@ -78,3 +75,6 @@
[BuildOptions] [BuildOptions]
XCODE:*_*_*_CC_FLAGS = -mmmx -msse XCODE:*_*_*_CC_FLAGS = -mmmx -msse
[UserExtensions.TianoCore."ExtraFiles"]
RngDxeExtra.uni

16
SecurityPkg/Tcg/MemoryOverwriteControl/TcgMor.inf
View File

@ -1,7 +1,9 @@
## @file ## @file
# Component description file for Memory Overwrite Control driver. # Initilizes MemoryOverwriteRequestControl variable
# #
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR> # This module will clear MOR_CLEAR_MEMORY_BIT bit if it is set.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TcgMor BASE_NAME = TcgMor
MODULE_UNI_FILE = TcgMor.uni
FILE_GUID = AD416CE3-A483-45b1-94C2-4B4E4D575562 FILE_GUID = AD416CE3-A483-45b1-94C2-4B4E4D575562
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -42,10 +45,13 @@
UefiLib UefiLib
[Guids] [Guids]
gEfiMemoryOverwriteControlDataGuid # GUID ALWAYS_CONSUMED ## SOMETIMES_CONSUMES ## Variable:L"MemoryOverwriteRequestControl"
## PRODUCES ## Variable:L"MemoryOverwriteRequestControl"
gEfiMemoryOverwriteControlDataGuid
[Depex] [Depex]
gEfiVariableArchProtocolGuid AND gEfiVariableArchProtocolGuid AND
gEfiVariableWriteArchProtocolGuid AND gEfiVariableWriteArchProtocolGuid
( gEfiTcgProtocolGuid OR gEfiTrEEProtocolGuid )
[UserExtensions.TianoCore."ExtraFiles"]
TcgMorExtra.uni

21
SecurityPkg/Tcg/PhysicalPresencePei/PhysicalPresencePei.inf
View File

@ -1,7 +1,11 @@
## @file ## @file
# Component description file for physical presence PEI module. # Produces a PPI to indicate whether to lock TPM in PEI phase
# #
# Copyright (c) 2005 - 2011, Intel Corporation. All rights reserved.<BR> # This module produces PEI_LOCK_PHYSICAL_PRESENCE_PPI to indicate whether
# TPM physical presence needs to be locked. It can be replaced by a
# platform specific module.
#
# Copyright (c) 2005 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +19,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = PhysicalPresencePei BASE_NAME = PhysicalPresencePei
MODULE_UNI_FILE = PhysicalPresencePei.uni
FILE_GUID = 4FE772E8-FE3E-4086-B638-8C493C490488 FILE_GUID = 4FE772E8-FE3E-4086-B638-8C493C490488
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -40,16 +45,20 @@
PeiServicesLib PeiServicesLib
[Ppis] [Ppis]
gPeiLockPhysicalPresencePpiGuid gPeiLockPhysicalPresencePpiGuid ## PRODUCES
gEfiPeiReadOnlyVariable2PpiGuid gEfiPeiReadOnlyVariable2PpiGuid ## CONSUMES
[Guids] [Guids]
gEfiPhysicalPresenceGuid gEfiPhysicalPresenceGuid ## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresence"
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmPhysicalPresence gEfiSecurityPkgTokenSpaceGuid.PcdTpmPhysicalPresence ## SOMETIMES_CONSUMES
[Depex] [Depex]
gEfiPeiMemoryDiscoveredPpiGuid AND gEfiPeiMemoryDiscoveredPpiGuid AND
gEfiPeiReadOnlyVariable2PpiGuid AND gEfiPeiReadOnlyVariable2PpiGuid AND
gPeiTpmInitializedPpiGuid gPeiTpmInitializedPpiGuid
[UserExtensions.TianoCore."ExtraFiles"]
PhysicalPresencePeiExtra.uni

20
SecurityPkg/Tcg/TcgConfigDxe/TcgConfigDxe.inf
View File

@ -1,5 +1,6 @@
## @file ## @file
# Component name for Tcg configuration module. # Provides the capability to update TPM state setup browser
# By this module, user may enable/disable/activate/deactivate/clear TPM, etc.
# #
# Copyright (c) 2011 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2011 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -14,6 +15,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TcgConfigDxe BASE_NAME = TcgConfigDxe
MODULE_UNI_FILE = TcgConfigDxe.uni
FILE_GUID = 1FA4DAFE-FA5D-4d75-BEA6-5863862C520A FILE_GUID = 1FA4DAFE-FA5D-4d75-BEA6-5863862C520A
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -53,21 +55,29 @@
TpmCommLib TpmCommLib
[Guids] [Guids]
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresence"
gEfiPhysicalPresenceGuid gEfiPhysicalPresenceGuid
gEfiIfrTianoGuid
gEfiIfrTianoGuid ## SOMETIMES_PRODUCES ## GUID # HII opcode
## PRODUCES ## HII
## CONSUMES ## HII
gTcgConfigFormSetGuid gTcgConfigFormSetGuid
gEfiTpmDeviceInstanceTpm12Guid gEfiTpmDeviceInstanceTpm12Guid ## CONSUMES ## GUID # TPM device identifier
[Protocols] [Protocols]
gEfiHiiConfigAccessProtocolGuid ## PRODUCES gEfiHiiConfigAccessProtocolGuid ## PRODUCES
gEfiHiiConfigRoutingProtocolGuid ## CONSUMES gEfiDevicePathProtocolGuid ## PRODUCES
gEfiTcgProtocolGuid ## CONSUMES gEfiTcgProtocolGuid ## CONSUMES
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
[Depex] [Depex]
gEfiHiiConfigRoutingProtocolGuid AND gEfiHiiConfigRoutingProtocolGuid AND
gEfiHiiDatabaseProtocolGuid AND gEfiHiiDatabaseProtocolGuid AND
gEfiVariableArchProtocolGuid AND gEfiVariableArchProtocolGuid AND
gEfiVariableWriteArchProtocolGuid gEfiVariableWriteArchProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
TcgConfigDxeExtra.uni

43
SecurityPkg/Tcg/TcgDxe/TcgDxe.inf
View File

@ -1,8 +1,8 @@
## @file ## @file
# Component file for module TcgDxe. # Produces TCG protocol and measures boot environment
# This module will produce TCG protocol and measure boot environment. # This module will produce TCG protocol and measure boot environment.
# #
# Copyright (c) 2006 - 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2006 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +15,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TcgDxe BASE_NAME = TcgDxe
MODULE_UNI_FILE = TcgDxe.uni
FILE_GUID = A5683620-7998-4bb2-A377-1C1E31E1E215 FILE_GUID = A5683620-7998-4bb2-A377-1C1E31E1E215
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -52,29 +53,33 @@
PcdLib PcdLib
[Guids] [Guids]
gEfiSmbiosTableGuid # ALWAYS_CONSUMED ## SOMETIMES_CONSUMES ## SystemTable # Smbios Table
gEfiGlobalVariableGuid # ALWAYS_CONSUMED ## SOMETIMES_CONSUMES ## GUID # Handoff Table for measurement.
gTcgEventEntryHobGuid gEfiSmbiosTableGuid
gEfiEventReadyToBootGuid
gEfiEventExitBootServicesGuid gEfiGlobalVariableGuid ## SOMETIMES_CONSUMES ## Variable:L"BootXXXX"
gEventExitBootServicesFailedGuid # ALWAYS_CONSUMED gTcgEventEntryHobGuid ## SOMETIMES_CONSUMES ## HOB
gEfiTpmDeviceInstanceTpm12Guid gEfiEventExitBootServicesGuid ## CONSUMES ## Event
gEventExitBootServicesFailedGuid ## SOMETIMES_CONSUMES ## Event
gEfiTpmDeviceInstanceTpm12Guid ## PRODUCES ## GUID # TPM device identifier
[Protocols] [Protocols]
gEfiTcgProtocolGuid ## PRODUCES gEfiTcgProtocolGuid ## PRODUCES
gEfiAcpiTableProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiAcpiTableProtocolGuid ## NOTIFY
gEfiDevicePathProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiMpServiceProtocolGuid ## SOMETIMES_CONSUMES
gEfiMpServiceProtocolGuid # PROTOCOL ALWAYS_CONSUMED
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmPlatformClass gEfiSecurityPkgTokenSpaceGuid.PcdTpmPlatformClass ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision ## SOMETIMES_CONSUMES
[Depex] [Depex]
TRUE TRUE
[UserExtensions.TianoCore."ExtraFiles"]
TcgDxeExtra.uni

45
SecurityPkg/Tcg/TcgPei/TcgPei.inf
View File

@ -1,5 +1,8 @@
## @file ## @file
# This module will initialize TPM device and measure FVs in PEI phase. # Initializes TPM device and measures FVs in PEI phase
#
# This module will initialize TPM device, measure reported FVs and BIOS version.
# This module may also lock TPM physical presence and physicalPresenceLifetimeLock.
# #
# Copyright (c) 2006 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2006 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -14,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TcgPei BASE_NAME = TcgPei
MODULE_UNI_FILE = TcgPei.uni
FILE_GUID = 2BE1E4A6-6505-43b3-9FFC-A3C8330E0432 FILE_GUID = 2BE1E4A6-6505-43b3-9FFC-A3C8330E0432
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -24,6 +28,9 @@
# #
# VALID_ARCHITECTURES = IA32 X64 IPF EBC # VALID_ARCHITECTURES = IA32 X64 IPF EBC
# #
# [BootMode]
# S3_RESUME ## SOMETIMES_CONSUMES
#
[Sources] [Sources]
TcgPei.c TcgPei.c
@ -51,29 +58,33 @@
MemoryAllocationLib MemoryAllocationLib
[Guids] [Guids]
gTcgEventEntryHobGuid gTcgEventEntryHobGuid ## PRODUCES ## HOB
gMeasuredFvHobGuid gMeasuredFvHobGuid ## PRODUCES ## HOB
gEfiTpmDeviceInstanceTpm12Guid gEfiTpmDeviceInstanceTpm12Guid ## PRODUCES ## GUID # TPM device identifier
[Ppis] [Ppis]
gPeiLockPhysicalPresencePpiGuid gPeiLockPhysicalPresencePpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
gEfiPeiFirmwareVolumeInfoPpiGuid gEfiPeiFirmwareVolumeInfoPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
gEfiPeiFirmwareVolumeInfo2PpiGuid gEfiPeiFirmwareVolumeInfo2PpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid ## SOMETIMES_CONSUMES
gPeiTpmInitializedPpiGuid gPeiTpmInitializedPpiGuid ## PRODUCES
gEfiEndOfPeiSignalPpiGuid gEfiEndOfPeiSignalPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceLifetimeLock gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceLifetimeLock ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceCmdEnable gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceCmdEnable ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceHwEnable gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceHwEnable ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFirmwareVersionString ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdFirmwareVersionString ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy ## CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmScrtmPolicy gEfiSecurityPkgTokenSpaceGuid.PcdTpmScrtmPolicy ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported ## CONSUMES
[Depex] [Depex]
gEfiPeiMasterBootModePpiGuid AND gEfiPeiMasterBootModePpiGuid AND
gEfiPeiReadOnlyVariable2PpiGuid AND gEfiPeiReadOnlyVariable2PpiGuid AND
gEfiTpmDeviceSelectedGuid gEfiTpmDeviceSelectedGuid
[UserExtensions.TianoCore."ExtraFiles"]
TcgPeiExtra.uni

34
SecurityPkg/Tcg/TcgSmm/TcgSmm.inf
View File

@ -1,13 +1,15 @@
## @file ## @file
# This driver implements TPM definition block in ACPI table and # Implements ACPI metholds for the TCG feature
# registers SMI callback functions for physical presence and #
# MemoryClear to handle the requests from ACPI method. # This driver implements TPM definition block in ACPI table and registers SMI
# callback functions for physical presence and MemoryClear to handle the requests
# from ACPI method.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This driver will have external input - variable and ACPINvs data in SMM mode. # This driver will have external input - variable and ACPINvs data in SMM mode.
# This external input must be validated carefully to avoid security issue. # This external input must be validated carefully to avoid security issue.
# #
# Copyright (c) 2011 - 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2011 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -20,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TcgSmm BASE_NAME = TcgSmm
MODULE_UNI_FILE = TcgSmm.uni
FILE_GUID = 42293093-76B9-4482-8C02-3BEFDEA9B35D FILE_GUID = 42293093-76B9-4482-8C02-3BEFDEA9B35D
MODULE_TYPE = DXE_SMM_DRIVER MODULE_TYPE = DXE_SMM_DRIVER
PI_SPECIFICATION_VERSION = 0x0001000A PI_SPECIFICATION_VERSION = 0x0001000A
@ -48,21 +51,32 @@
PcdLib PcdLib
[Guids] [Guids]
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresenceFlags"
gEfiPhysicalPresenceGuid gEfiPhysicalPresenceGuid
## SOMETIMES_PRODUCES ## Variable:L"MemoryOverwriteRequestControl"
## SOMETIMES_CONSUMES ## Variable:L"MemoryOverwriteRequestControl"
gEfiMemoryOverwriteControlDataGuid gEfiMemoryOverwriteControlDataGuid
gEfiTpmDeviceInstanceTpm12Guid
gEfiTpmDeviceInstanceTpm12Guid ## PRODUCES ## GUID # TPM device identifier
[Protocols] [Protocols]
gEfiSmmSwDispatch2ProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiSmmSwDispatch2ProtocolGuid ## CONSUMES
gEfiSmmVariableProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiSmmVariableProtocolGuid ## CONSUMES
gEfiAcpiTableProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiAcpiTableProtocolGuid ## CONSUMES
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId ## SOMETIMES_CONSUMES
[Depex] [Depex]
gEfiAcpiTableProtocolGuid AND gEfiAcpiTableProtocolGuid AND
gEfiSmmSwDispatch2ProtocolGuid AND gEfiSmmSwDispatch2ProtocolGuid AND
gEfiSmmVariableProtocolGuid AND gEfiSmmVariableProtocolGuid AND
gEfiTcgProtocolGuid gEfiTcgProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
TcgSmmExtra.uni

23
SecurityPkg/Tcg/TrEEConfig/TrEEConfigDxe.inf
View File

@ -1,8 +1,10 @@
## @file ## @file
# Component name for TrEE configuration module. # TPM device configuration for TPM 2.0
#
# By this module, user may select TPM device, clear TPM state, etc.
# NOTE: This module is only for reference only, each platform should have its own setup page. # NOTE: This module is only for reference only, each platform should have its own setup page.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TrEEConfigDxe BASE_NAME = TrEEConfigDxe
MODULE_UNI_FILE = TrEEConfigDxe.uni
FILE_GUID = 3141FD4D-EA02-4a70-9BCE-97EE837319AC FILE_GUID = 3141FD4D-EA02-4a70-9BCE-97EE837319AC
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -52,20 +55,27 @@
PcdLib PcdLib
PrintLib PrintLib
Tpm2DeviceLib Tpm2DeviceLib
Tpm12DeviceLib
Tpm2CommandLib Tpm2CommandLib
[Guids] [Guids]
## SOMETIMES_PRODUCES ## Variable:L"TrEEPhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"TrEEPhysicalPresence"
gEfiTrEEPhysicalPresenceGuid gEfiTrEEPhysicalPresenceGuid
## PRODUCES ## HII
## SOMETIMES_PRODUCES ## Variable:L"TREE_CONFIGURATION"
## SOMETIMES_CONSUMES ## Variable:L"TREE_CONFIGURATION"
## PRODUCES ## Variable:L"TREE_DEVICE_DETECTION"
## SOMETIMES_CONSUMES ## Variable:L"TREE_DEVICE_DETECTION"
gTrEEConfigFormSetGuid gTrEEConfigFormSetGuid
[Protocols] [Protocols]
gEfiHiiConfigAccessProtocolGuid ## PRODUCES gEfiHiiConfigAccessProtocolGuid ## PRODUCES
gEfiHiiConfigRoutingProtocolGuid ## CONSUMES gEfiDevicePathProtocolGuid ## PRODUCES
gEdkiiVariableLockProtocolGuid ## CONSUMES gEdkiiVariableLockProtocolGuid ## CONSUMES
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
[Depex] [Depex]
gEfiTrEEProtocolGuid AND gEfiTrEEProtocolGuid AND
@ -73,3 +83,6 @@
gEfiHiiDatabaseProtocolGuid AND gEfiHiiDatabaseProtocolGuid AND
gEfiVariableArchProtocolGuid AND gEfiVariableArchProtocolGuid AND
gEfiVariableWriteArchProtocolGuid gEfiVariableWriteArchProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
TrEEConfigDxeExtra.uni

26
SecurityPkg/Tcg/TrEEConfig/TrEEConfigPei.inf
View File

@ -1,5 +1,7 @@
## @file ## @file
# Component name for TrEE configuration module. # Set TPM device type
#
# This module initializes TPM device type based on variable and detection.
# NOTE: This module is only for reference only, each platform should have its own setup page. # NOTE: This module is only for reference only, each platform should have its own setup page.
# #
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
@ -15,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TrEEConfigPei BASE_NAME = TrEEConfigPei
MODULE_UNI_FILE = TrEEConfigPei.uni
FILE_GUID = A5C1EF72-9379-4370-B4C7-0F5126CAC38E FILE_GUID = A5C1EF72-9379-4370-B4C7-0F5126CAC38E
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -23,6 +26,9 @@
# #
# VALID_ARCHITECTURES = IA32 X64 IPF EBC # VALID_ARCHITECTURES = IA32 X64 IPF EBC
# #
# [BootMode]
# S3_RESUME ## SOMETIMES_CONSUMES
#
[Sources] [Sources]
TrEEConfigPeim.c TrEEConfigPeim.c
@ -48,19 +54,23 @@
Tpm12DeviceLib Tpm12DeviceLib
[Guids] [Guids]
gEfiTrEEPhysicalPresenceGuid ## SOMETIMES_CONSUMES ## Variable:L"TREE_CONFIGURATION"
## SOMETIMES_CONSUMES ## Variable:L"TREE_DEVICE_DETECTION"
gTrEEConfigFormSetGuid gTrEEConfigFormSetGuid
gEfiTpmDeviceSelectedGuid gEfiTpmDeviceSelectedGuid ## PRODUCES ## GUID # Used as a PPI GUID
[Ppis] [Ppis]
gEfiPeiReadOnlyVariable2PpiGuid gEfiPeiReadOnlyVariable2PpiGuid ## CONSUMES
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## PRODUCES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy ## PRODUCES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmAutoDetection gEfiSecurityPkgTokenSpaceGuid.PcdTpmAutoDetection ## CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress ## SOMETIMES_CONSUMES
[Depex] [Depex]
gEfiPeiMasterBootModePpiGuid AND gEfiPeiMasterBootModePpiGuid AND
gEfiPeiReadOnlyVariable2PpiGuid gEfiPeiReadOnlyVariable2PpiGuid
[UserExtensions.TianoCore."ExtraFiles"]
TrEEConfigPeiExtra.uni

58
SecurityPkg/Tcg/TrEEDxe/TrEEDxe.inf
View File

@ -1,5 +1,5 @@
## @file ## @file
# Component file for module TrEEDxe. # Produces TrEE protocol and measure boot environment
# This module will produce TrEE protocol and measure boot environment. # This module will produce TrEE protocol and measure boot environment.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
@ -7,7 +7,7 @@
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issue like
# buffer overflow, integer overflow. # buffer overflow, integer overflow.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -20,6 +20,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TrEEDxe BASE_NAME = TrEEDxe
MODULE_UNI_FILE = TrEEDxe.uni
FILE_GUID = 2A7946E3-1AB2-49a9-ACCB-C6275139C1A5 FILE_GUID = 2A7946E3-1AB2-49a9-ACCB-C6275139C1A5
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -58,34 +59,45 @@
PerformanceLib PerformanceLib
[Guids] [Guids]
gEfiSmbiosTableGuid # ALWAYS_CONSUMED ## SOMETIMES_CONSUMES ## SystemTable # Smbios Table
gEfiGlobalVariableGuid # ALWAYS_CONSUMED ## SOMETIMES_CONSUMES ## GUID # Handoff Table for measurement.
gTcgEventEntryHobGuid gEfiSmbiosTableGuid
gEfiEventReadyToBootGuid
gEfiEventExitBootServicesGuid ## SOMETIMES_CONSUMES ## Variable:L"SecureBoot"
gEventExitBootServicesFailedGuid # ALWAYS_CONSUMED ## SOMETIMES_CONSUMES ## Variable:L"PK"
## SOMETIMES_CONSUMES ## Variable:L"KEK"
## SOMETIMES_CONSUMES ## Variable:L"BootXXXX"
gEfiGlobalVariableGuid
## SOMETIMES_CONSUMES ## Variable:L"db"
## SOMETIMES_CONSUMES ## Variable:L"dbx"
gEfiImageSecurityDatabaseGuid gEfiImageSecurityDatabaseGuid
gEfiTpmDeviceInstanceNoneGuid
gEfiTpmDeviceInstanceTpm12Guid gTcgEventEntryHobGuid ## SOMETIMES_CONSUMES ## HOB
gEfiEventExitBootServicesGuid ## CONSUMES ## Event
gEventExitBootServicesFailedGuid ## SOMETIMES_CONSUMES ## Event
gEfiTpmDeviceInstanceNoneGuid ## SOMETIMES_CONSUMES ## GUID # TPM device identifier
gEfiTpmDeviceInstanceTpm12Guid ## SOMETIMES_CONSUMES ## GUID # TPM device identifier
[Protocols] [Protocols]
gEfiTrEEProtocolGuid ## PRODUCES gEfiTrEEProtocolGuid ## PRODUCES
gEfiAcpiTableProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiAcpiTableProtocolGuid ## NOTIFY
gEfiDevicePathProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiMpServiceProtocolGuid ## SOMETIMES_CONSUMES
gEfiMpServiceProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiVariableWriteArchProtocolGuid ## NOTIFY
gEfiVariableWriteArchProtocolGuid # PROTOCOL ALWAYS_CONSUMED
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmPlatformClass gEfiSecurityPkgTokenSpaceGuid.PcdTpmPlatformClass ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdFirmwareDebuggerInitialized gEfiSecurityPkgTokenSpaceGuid.PcdFirmwareDebuggerInitialized ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision ## SOMETIMES_CONSUMES
[Depex] [Depex]
TRUE TRUE
[UserExtensions.TianoCore."ExtraFiles"]
TrEEDxeExtra.uni

39
SecurityPkg/Tcg/TrEEPei/TrEEPei.inf
View File

@ -1,5 +1,7 @@
## @file ## @file
# This module will initialize TPM2 device and measure FVs in PEI phase. # Initializes TPM 2.0 device and measure FVs in PEI phase
#
# This module will initialize TPM device, measure reported FVs and BIOS version.
# #
# Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -14,6 +16,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TrEEPei BASE_NAME = TrEEPei
MODULE_UNI_FILE = TrEEPei.uni
FILE_GUID = CA5A1928-6523-409d-A9FE-5DCC87387222 FILE_GUID = CA5A1928-6523-409d-A9FE-5DCC87387222
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -24,6 +27,9 @@
# #
# VALID_ARCHITECTURES = IA32 X64 IPF EBC # VALID_ARCHITECTURES = IA32 X64 IPF EBC
# #
# [BootMode]
# S3_RESUME ## SOMETIMES_CONSUMES
#
[Sources] [Sources]
TrEEPei.c TrEEPei.c
@ -47,27 +53,30 @@
MemoryAllocationLib MemoryAllocationLib
[Guids] [Guids]
gTcgEventEntryHobGuid gTcgEventEntryHobGuid ## PRODUCES ## HOB
gMeasuredFvHobGuid gMeasuredFvHobGuid ## PRODUCES ## HOB
gEfiTpmDeviceInstanceNoneGuid gEfiTpmDeviceInstanceNoneGuid ## SOMETIMES_PRODUCES ## GUID # TPM device identifier
gEfiTpmDeviceInstanceTpm12Guid gEfiTpmDeviceInstanceTpm12Guid ## SOMETIMES_PRODUCES ## GUID # TPM device identifier
[Ppis] [Ppis]
gEfiPeiFirmwareVolumeInfoPpiGuid gEfiPeiFirmwareVolumeInfoPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
gEfiPeiFirmwareVolumeInfo2PpiGuid gEfiPeiFirmwareVolumeInfo2PpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid ## SOMETIMES_CONSUMES
gPeiTpmInitializedPpiGuid gPeiTpmInitializedPpiGuid ## PRODUCES
gEfiEndOfPeiSignalPpiGuid gEfiEndOfPeiSignalPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
[Pcd] [Pcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdFirmwareVersionString ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdFirmwareVersionString ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2InitializationPolicy gEfiSecurityPkgTokenSpaceGuid.PcdTpm2InitializationPolicy ## CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2SelfTestPolicy gEfiSecurityPkgTokenSpaceGuid.PcdTpm2SelfTestPolicy ## SOMETIMES_CONSUMES
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2ScrtmPolicy gEfiSecurityPkgTokenSpaceGuid.PcdTpm2ScrtmPolicy ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported ## CONSUMES
[Depex] [Depex]
gEfiPeiMasterBootModePpiGuid AND gEfiPeiMasterBootModePpiGuid AND
gEfiPeiReadOnlyVariable2PpiGuid AND gEfiPeiReadOnlyVariable2PpiGuid AND
gEfiTpmDeviceSelectedGuid gEfiTpmDeviceSelectedGuid
[UserExtensions.TianoCore."ExtraFiles"]
TrEEPeiExtra.uni

37
SecurityPkg/Tcg/TrEESmm/TrEESmm.inf
View File

@ -1,5 +1,7 @@
## @file ## @file
# This driver implements TPM2 definition block in ACPI table and # Provides ACPI metholds for TPM 2.0 support
#
# This driver implements TPM 2.0 definition block in ACPI table and
# registers SMI callback functions for TrEE physical presence and # registers SMI callback functions for TrEE physical presence and
# MemoryClear to handle the requests from ACPI method. # MemoryClear to handle the requests from ACPI method.
# #
@ -7,7 +9,7 @@
# This driver will have external input - variable and ACPINvs data in SMM mode. # This driver will have external input - variable and ACPINvs data in SMM mode.
# This external input must be validated carefully to avoid security issue. # This external input must be validated carefully to avoid security issue.
# #
# Copyright (c) 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -20,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = TrEESmm BASE_NAME = TrEESmm
MODULE_UNI_FILE = TrEESmm.uni
FILE_GUID = 114B7105-6CC9-453c-BADC-16DF227BB4EF FILE_GUID = 114B7105-6CC9-453c-BADC-16DF227BB4EF
MODULE_TYPE = DXE_SMM_DRIVER MODULE_TYPE = DXE_SMM_DRIVER
PI_SPECIFICATION_VERSION = 0x0001000A PI_SPECIFICATION_VERSION = 0x0001000A
@ -48,24 +51,34 @@
Tpm2DeviceLib Tpm2DeviceLib
[Guids] [Guids]
## SOMETIMES_PRODUCES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresence"
## SOMETIMES_CONSUMES ## Variable:L"PhysicalPresenceFlags"
gEfiTrEEPhysicalPresenceGuid gEfiTrEEPhysicalPresenceGuid
## SOMETIMES_PRODUCES ## Variable:L"MemoryOverwriteRequestControl"
## SOMETIMES_CONSUMES ## Variable:L"MemoryOverwriteRequestControl"
gEfiMemoryOverwriteControlDataGuid gEfiMemoryOverwriteControlDataGuid
gEfiTpmDeviceInstanceTpm20DtpmGuid
gEfiTpmDeviceInstanceTpm20DtpmGuid ## PRODUCES ## GUID # TPM device identifier
[Protocols] [Protocols]
gEfiSmmSwDispatch2ProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiSmmSwDispatch2ProtocolGuid ## CONSUMES
gEfiSmmVariableProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiSmmVariableProtocolGuid ## CONSUMES
gEfiAcpiTableProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiAcpiTableProtocolGuid ## CONSUMES
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemTableId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultOemRevision ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorId ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiDefaultCreatorRevision ## SOMETIMES_CONSUMES
[Depex] [Depex]
gEfiAcpiTableProtocolGuid AND gEfiAcpiTableProtocolGuid AND
gEfiSmmSwDispatch2ProtocolGuid AND gEfiSmmSwDispatch2ProtocolGuid AND
gEfiSmmVariableProtocolGuid gEfiSmmVariableProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
TrEESmmExtra.uni

27
SecurityPkg/UserIdentification/PwdCredentialProviderDxe/PwdCredentialProviderDxe.inf
View File

@ -1,7 +1,8 @@
## @file ## @file
# Component description file for Password Credential Provider. # Provides a password credential provider implementation
# This module provides a password credential provider implementation.
# #
# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +15,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = PwdCredentialProvider BASE_NAME = PwdCredentialProvider
MODULE_UNI_FILE = PwdCredentialProvider.uni
FILE_GUID = D6C589EA-DD29-49ef-97F6-1A9FE19A04E0 FILE_GUID = D6C589EA-DD29-49ef-97F6-1A9FE19A04E0
MODULE_TYPE = UEFI_DRIVER MODULE_TYPE = UEFI_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -44,11 +46,20 @@
BaseCryptLib BaseCryptLib
[Guids] [Guids]
gEfiUserCredentialClassPasswordGuid ## CONSUMES ## Guid gEfiUserCredentialClassPasswordGuid ## SOMETIMES_CONSUMES ## GUID
gPwdCredentialProviderGuid ## PRODUCES ## Guid
## PRODUCES ## Variable:L"PwdCredential"
## CONSUMES ## Variable:L"PwdCredential"
## CONSUMES ## HII
## SOMETIMES_CONSUMES ## GUID # The credential provider identifier
gPwdCredentialProviderGuid
[Protocols] [Protocols]
gEfiDevicePathProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiDevicePathProtocolGuid ## PRODUCES
gEfiHiiConfigAccessProtocolGuid gEfiHiiConfigAccessProtocolGuid ## PRODUCES
gEfiUserCredential2ProtocolGuid gEfiUserCredential2ProtocolGuid ## PRODUCES
gEfiUserManagerProtocolGuid gEfiUserManagerProtocolGuid ## SOMETIMES_CONSUMES
[UserExtensions.TianoCore."ExtraFiles"]
PwdCredentialProviderExtra.uni

34
SecurityPkg/UserIdentification/UsbCredentialProviderDxe/UsbCredentialProviderDxe.inf
View File

@ -1,7 +1,11 @@
## @file ## @file
# Component description file for USB Credential Provider. # Provides a USB credential provider implementation
# #
# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR> # This module reads a token from a token file that is saved in the root
# folder of a USB stick. The token file name can be specified by the PCD
# PcdFixedUsbCredentialProviderTokenFileName.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +18,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = UsbCredentialProvider BASE_NAME = UsbCredentialProvider
MODULE_UNI_FILE = UsbCredentialProvider.uni
FILE_GUID = 672A0C68-2BF0-46f9-93C3-C4E7DC0FA555 FILE_GUID = 672A0C68-2BF0-46f9-93C3-C4E7DC0FA555
MODULE_TYPE = UEFI_DRIVER MODULE_TYPE = UEFI_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -42,17 +47,24 @@
BaseCryptLib BaseCryptLib
[Guids] [Guids]
gUsbCredentialProviderGuid ## PRODUCES ## Guid ## PRODUCES ## Variable:L"UsbCredential"
gEfiFileInfoGuid ## CONSUMES ## Guid ## CONSUMES ## Variable:L"UsbCredential"
gEfiUserCredentialClassSecureCardGuid ## CONSUMES ## Guid ## CONSUMES ## HII
## SOMETIMES_CONSUMES ## GUID # The credential provider identifier
gUsbCredentialProviderGuid
gEfiFileInfoGuid ## SOMETIMES_CONSUMES ## GUID
gEfiUserCredentialClassSecureCardGuid ## SOMETIMES_CONSUMES ## GUID
[Pcd] [Pcd]
gEfiSecurityPkgTokenSpaceGuid.PcdFixedUsbCredentialProviderTokenFileName gEfiSecurityPkgTokenSpaceGuid.PcdFixedUsbCredentialProviderTokenFileName ## SOMETIMES_CONSUMES
[Protocols] [Protocols]
gEfiDevicePathProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiUserCredential2ProtocolGuid ## PRODUCES
gEfiUserCredential2ProtocolGuid gEfiUserManagerProtocolGuid ## SOMETIMES_CONSUMES
gEfiUserManagerProtocolGuid gEfiBlockIoProtocolGuid ## SOMETIMES_CONSUMES
gEfiBlockIoProtocolGuid gEfiSimpleFileSystemProtocolGuid ## SOMETIMES_CONSUMES
gEfiSimpleFileSystemProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
UsbCredentialProviderExtra.uni

37
SecurityPkg/UserIdentification/UserIdentifyManagerDxe/UserIdentifyManagerDxe.inf
View File

@ -1,7 +1,9 @@
## @file ## @file
# Component description file for user identify manager driver. # Produces user manager protocol
# #
# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR> # This module manages user information and produces user manager protocol.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +16,7 @@
[defines] [defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = UserIdentifyManager BASE_NAME = UserIdentifyManager
MODULE_UNI_FILE = UserIdentifyManager.uni
FILE_GUID = C5D3191B-27D5-4873-8DF2-628136991A21 FILE_GUID = C5D3191B-27D5-4873-8DF2-628136991A21
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -43,22 +46,34 @@
UefiLib UefiLib
[Guids] [Guids]
gEfiIfrTianoGuid ## CONSUMES ## Guid gEfiIfrTianoGuid ## SOMETIMES_CONSUMES ## GUID
gEfiEventUserProfileChangedGuid ## CONSUMES ## Guid gEfiEventUserProfileChangedGuid ## SOMETIMES_PRODUCES ## Event
gUserIdentifyManagerGuid ## PRODUCES ## Guid
## SOMETIMES_PRODUCES ## Variable:L"Userxxxx"
## SOMETIMES_CONSUMES ## Variable:L"Userxxxx"
## CONSUMES ## HII
gUserIdentifyManagerGuid
[Protocols] [Protocols]
gEfiFormBrowser2ProtocolGuid ## CONSUMES gEfiFormBrowser2ProtocolGuid ## CONSUMES
gEfiHiiDatabaseProtocolGuid ## CONSUMES gEfiHiiDatabaseProtocolGuid ## CONSUMES
gEfiUserCredential2ProtocolGuid ## CONSUMES gEfiUserCredential2ProtocolGuid ## SOMETIMES_CONSUMES
gEfiDeferredImageLoadProtocolGuid ## CONSUMES gEfiDeferredImageLoadProtocolGuid ## SOMETIMES_CONSUMES
gEfiSimpleTextOutProtocolGuid ## SOMETIMES_CONSUMES
gEfiSimpleTextInProtocolGuid ## SOMETIMES_CONSUMES
gEfiSimpleTextInputExProtocolGuid ## SOMETIMES_CONSUMES
gEfiHiiConfigAccessProtocolGuid ## PRODUCES gEfiHiiConfigAccessProtocolGuid ## PRODUCES
gEfiUserManagerProtocolGuid ## PRODUCES gEfiDevicePathProtocolGuid ## PRODUCES
gEfiSimpleTextOutProtocolGuid
gEfiSimpleTextInProtocolGuid ## PRODUCES
gEfiSimpleTextInputExProtocolGuid ## SOMETIMES_PRODUCES ## SystemTable
gEfiUserManagerProtocolGuid
[Depex] [Depex]
gEfiHiiDatabaseProtocolGuid AND gEfiHiiDatabaseProtocolGuid AND
gEfiHiiStringProtocolGuid AND gEfiHiiStringProtocolGuid AND
gEfiFormBrowser2ProtocolGuid gEfiFormBrowser2ProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
UserIdentifyManagerExtra.uni

30
SecurityPkg/UserIdentification/UserProfileManagerDxe/UserProfileManagerDxe.inf
View File

@ -1,7 +1,10 @@
## @file ## @file
# Component description file for user profile manager driver. # A UI tool to manage user profiles
# #
# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.<BR> # By this module, user can add/update/delete user profiles, and can also
# modify the user access policy and the user identification policy.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = UserProfileManager BASE_NAME = UserProfileManager
MODULE_UNI_FILE = UserProfileManager.uni
FILE_GUID = E38CB52D-A74D-45db-A8D0-290C9B21BBF2 FILE_GUID = E38CB52D-A74D-45db-A8D0-290C9B21BBF2
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -48,17 +52,21 @@
DevicePathLib DevicePathLib
[Guids] [Guids]
gEfiIfrTianoGuid ## CONSUMES ## Guid gEfiIfrTianoGuid ## SOMETIMES_CONSUMES ## GUID
gEfiUserInfoAccessSetupAdminGuid ## CONSUMES ## Guid gEfiUserInfoAccessSetupAdminGuid ## SOMETIMES_CONSUMES ## GUID
gEfiUserInfoAccessSetupNormalGuid ## CONSUMES ## Guid gEfiUserInfoAccessSetupNormalGuid ## SOMETIMES_CONSUMES ## GUID
gEfiUserInfoAccessSetupRestrictedGuid ## CONSUMES ## Guid gEfiUserInfoAccessSetupRestrictedGuid ## SOMETIMES_CONSUMES ## GUID
gUserProfileManagerGuid ## PRODUCES ## Guid gUserProfileManagerGuid ## CONSUMES ## HII
[Protocols] [Protocols]
gEfiDevicePathProtocolGuid # PROTOCOL ALWAYS_CONSUMED gEfiDevicePathProtocolGuid ## PRODUCES
gEfiHiiConfigAccessProtocolGuid gEfiHiiConfigAccessProtocolGuid ## PRODUCES
gEfiUserCredential2ProtocolGuid gEfiUserCredential2ProtocolGuid ## SOMETIMES_CONSUMES
gEfiUserManagerProtocolGuid gEfiUserManagerProtocolGuid ## CONSUMES
[Depex] [Depex]
gEfiUserManagerProtocolGuid gEfiUserManagerProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
UserProfileManagerExtra.uni

47
SecurityPkg/VariableAuthenticated/EsalVariableDxeSal/EsalVariableDxeSal.inf
View File

@ -1,8 +1,10 @@
## @file ## @file
# Component description file for Extended SAL authentication variable # Provides authenticated variable service for IPF platform
# service module.
# #
# Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR> # This module installs variable arch protocol and variable write arch protocol to provide
# four EFI_RUNTIME_SERVICES: SetVariable, GetVariable, GetNextVariableName and QueryVariableInfo.
#
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -15,6 +17,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = EsalVariableDxeSal BASE_NAME = EsalVariableDxeSal
MODULE_UNI_FILE = EsalVariableDxeSal.uni
FILE_GUID = 14610837-4E97-4427-96E0-21D9B2956996 FILE_GUID = 14610837-4E97-4427-96E0-21D9B2956996
MODULE_TYPE = DXE_SAL_DRIVER MODULE_TYPE = DXE_SAL_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -60,27 +63,43 @@
HobLib HobLib
[Protocols] [Protocols]
gEfiFirmwareVolumeBlockProtocolGuid # PROTOCOL SOMETIMES_CONSUMED gEfiFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES
gEfiFaultTolerantWriteProtocolGuid # PROTOCOL SOMETIMES_CONSUMED gEfiFaultTolerantWriteProtocolGuid ## SOMETIMES_CONSUMES
[Guids] [Guids]
## SOMETIMES_CONSUMES ## Variable:L"PK"
## CONSUMES ## Variable:L"SetupMode"
## PRODUCES ## Variable:L"SetupMode"
## CONSUMES ## Variable:L"SignatureSupport"
## PRODUCES ## Variable:L"SignatureSupport"
gEfiGlobalVariableGuid gEfiGlobalVariableGuid
## PRODUCES ## GUID # Variable store header
## CONSUMES ## GUID # Variable store header
## SOMETIMES_CONSUMES ## HOB
## SOMETIMES_PRODUCES ## SystemTable
gEfiAuthenticatedVariableGuid gEfiAuthenticatedVariableGuid
gEfiEventVirtualAddressChangeGuid
gEfiCertRsa2048Sha256Guid gEfiEventVirtualAddressChangeGuid ## CONSUMES ## Event
gEfiCertRsa2048Sha256Guid ## CONSUMES ## GUID # Unique ID for the format of the CertType.
## SOMETIMES_CONSUMES ## Variable:L"DB"
## SOMETIMES_CONSUMES ## Variable:L"DBX"
gEfiImageSecurityDatabaseGuid gEfiImageSecurityDatabaseGuid
[Pcd.common] [Pcd.common]
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize ## CONSUMES
[FeaturePcd.common] [FeaturePcd.common]
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## CONSUMES # statistic the information of variable.
[Depex] [Depex]
gEfiExtendedSalFvBlockServicesProtocolGuid AND gEfiFaultTolerantWriteProtocolGuid gEfiExtendedSalFvBlockServicesProtocolGuid AND gEfiFaultTolerantWriteProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
EsalVariableDxeSalExtra.uni

20
SecurityPkg/VariableAuthenticated/Pei/VariablePei.inf
View File

@ -1,5 +1,6 @@
## @file ## @file
# The component description for PEI variable driver. # Implements ReadOnly Variable Services required by PEIM and installs PEI ReadOnly Varaiable2 PPI
# This module implements ReadOnly Variable Services required by PEIM and installs PEI ReadOnly Varaiable2 PPI.
# #
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -14,6 +15,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = PeiVariableAuth BASE_NAME = PeiVariableAuth
MODULE_UNI_FILE = PeiVariableAuth.uni
FILE_GUID = B1F7AF2F-2807-478c-A893-2BF4DDD1F62B FILE_GUID = B1F7AF2F-2807-478c-A893-2BF4DDD1F62B
MODULE_TYPE = PEIM MODULE_TYPE = PEIM
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -44,24 +46,28 @@
PeiServicesLib PeiServicesLib
[Guids] [Guids]
## CONSUMES ## GUID # Variable store header
## SOMETIMES_CONSUMES ## HOB
gEfiAuthenticatedVariableGuid gEfiAuthenticatedVariableGuid
## SOMETIMES_PRODUCES ## HOB
## SOMETIMES_CONSUMES ## HOB
gEfiVariableIndexTableGuid gEfiVariableIndexTableGuid
gEfiSystemNvDataFvGuid gEfiSystemNvDataFvGuid ## SOMETIMES_CONSUMES ## GUID
gEdkiiFaultTolerantWriteGuid gEdkiiFaultTolerantWriteGuid ## SOMETIMES_CONSUMES ## HOB
[Ppis] [Ppis]
gEfiPeiReadOnlyVariable2PpiGuid ## PRODUCES gEfiPeiReadOnlyVariable2PpiGuid ## PRODUCES
[Pcd] [Pcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64 ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64 ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize ## CONSUMES gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize ## CONSUMES
[Depex] [Depex]
gEdkiiFaultTolerantWriteGuid gEdkiiFaultTolerantWriteGuid
#
# [BootMode] # [BootMode]
# RECOVERY ## CONSUMES # RECOVERY_FULL ## SOMETIMES_CONSUMES
#
[UserExtensions.TianoCore."ExtraFiles"]
PeiVariableExtra.uni

105
SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableRuntimeDxe.inf
View File

@ -1,10 +1,13 @@
## @file ## @file
# Component description file for Authenticated Variable module. # Provides authenticated variable service
#
# This module installs variable arch protocol and variable write arch protocol to provide
# variable services: SetVariable, GetVariable, GetNextVariableName and QueryVariableInfo.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This driver will have external input - variable data. # This driver will have external input - variable data.
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issues such as
# buffer overflow, integer overflow. # buffer overflow or integer overflow.
# #
# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -19,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = VariableAuthRuntimeDxe BASE_NAME = VariableAuthRuntimeDxe
MODULE_UNI_FILE = VariableAuthRuntimeDxe.uni
FILE_GUID = 2226F30F-3D5B-402d-9936-A97184EB4516 FILE_GUID = 2226F30F-3D5B-402d-9936-A97184EB4516
MODULE_TYPE = DXE_RUNTIME_DRIVER MODULE_TYPE = DXE_RUNTIME_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -65,51 +69,82 @@
TpmMeasurementLib TpmMeasurementLib
[Protocols] [Protocols]
gEfiFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES gEfiFirmwareVolumeBlockProtocolGuid ## CONSUMES
gEfiVariableWriteArchProtocolGuid ## ALWAYS_PRODUCES ## CONSUMES
gEfiVariableArchProtocolGuid ## ALWAYS_PRODUCES ## NOTIFY
gEfiFaultTolerantWriteProtocolGuid ## SOMETIMES_CONSUMES gEfiFaultTolerantWriteProtocolGuid
gEdkiiVariableLockProtocolGuid ## ALWAYS_PRODUCES gEfiVariableWriteArchProtocolGuid ## PRODUCES
gEfiVariableArchProtocolGuid ## PRODUCES
gEdkiiVariableLockProtocolGuid ## PRODUCES
[Guids] [Guids]
gEfiAuthenticatedVariableGuid ## PRODUCES ## Configuration Table Guid ## PRODUCES ## GUID # Variable store header
gEfiGlobalVariableGuid ## PRODUCES ## Variable Guid ## CONSUMES ## GUID # Variable store header
gEfiEventVirtualAddressChangeGuid ## CONSUMES ## Event ## SOMETIMES_CONSUMES ## HOB
gEfiCertTypeRsa2048Sha256Guid ## SOMETIMES_PRODUCES ## SystemTable
gEfiAuthenticatedVariableGuid
## SOMETIMES_CONSUMES ## Variable:L"PlatformLang"
## SOMETIMES_PRODUCES ## Variable:L"PlatformLang"
## SOMETIMES_CONSUMES ## Variable:L"Lang"
## SOMETIMES_PRODUCES ## Variable:L"Lang"
## SOMETIMES_CONSUMES ## Variable:L"HwErrRecSupport"
## CONSUMES ## Variable:L"SetupMode"
## PRODUCES ## Variable:L"SetupMode"
## SOMETIMES_CONSUMES ## Variable:L"PK"
## SOMETIMES_CONSUMES ## Variable:L"KEK"
## CONSUMES ## Variable:L"SecureBoot"
## PRODUCES ## Variable:L"SecureBoot"
## CONSUMES ## Variable:L"SignatureSupport"
## PRODUCES ## Variable:L"SignatureSupport"
## PRODUCES ## Variable:L"VendorKeys"
gEfiGlobalVariableGuid
## SOMETIMES_CONSUMES ## Variable:L"DB"
## SOMETIMES_CONSUMES ## Variable:L"DBX"
gEfiImageSecurityDatabaseGuid gEfiImageSecurityDatabaseGuid
gEfiCertX509Guid
gEfiCertPkcs7Guid ## CONSUMES ## Variable:L"SecureBootEnable"
gEfiCertRsa2048Guid ## PRODUCES ## Variable:L"SecureBootEnable"
gEfiSecureBootEnableDisableGuid gEfiSecureBootEnableDisableGuid
## CONSUMES ## Variable:L"CustomMode"
## PRODUCES ## Variable:L"CustomMode"
gEfiCustomModeEnableGuid gEfiCustomModeEnableGuid
gEfiVendorKeysNvGuid
gEfiSystemNvDataFvGuid ## CONSUMES ## CONSUMES ## Variable:L"certdb"
## PRODUCES ## Variable:L"certdb"
gEfiCertDbGuid gEfiCertDbGuid
gEfiHardwareErrorVariableGuid ## SOMETIMES_CONSUMES
## CONSUMES ## Variable:L"VendorKeysNv"
## PRODUCES ## Variable:L"VendorKeysNv"
gEfiVendorKeysNvGuid
gEfiEndOfDxeEventGroupGuid ## CONSUMES ## Event gEfiEndOfDxeEventGroupGuid ## CONSUMES ## Event
gEdkiiFaultTolerantWriteGuid ## CONSUMES gEfiEventVirtualAddressChangeGuid ## CONSUMES ## Event
gEfiCertTypeRsa2048Sha256Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the certificate.
gEfiCertPkcs7Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the certificate.
gEfiCertX509Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
gEfiSystemNvDataFvGuid ## CONSUMES ## GUID
gEfiHardwareErrorVariableGuid ## SOMETIMES_CONSUMES ## Variable:L"HwErrRec####"
gEdkiiFaultTolerantWriteGuid ## SOMETIMES_CONSUMES ## HOB
[Pcd] [Pcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64 ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize ## CONSUMES
[FeaturePcd] [FeaturePcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## CONSUMES # statistic the information of variable. gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## CONSUMES # statistic the information of variable.
gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate ## CONSUMES gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate ## CONSUMES # Auto update PlatformLang/Lang
[Depex] [Depex]
TRUE TRUE
# [Event] [UserExtensions.TianoCore."ExtraFiles"]
# ## VariableRuntimeDxeExtra.uni
# # Event will be signaled for VIRTUAL_ADDRESS_CHANGE event.
# #
# EVENT_TYPE_NOTIFY_SIGNAL ## PRODUCES
#
#

99
SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableSmm.inf
View File

@ -1,18 +1,18 @@
## @file ## @file
# Component description file for SMM Authenticated Variable module. # Provides SMM authenticated variable service
# #
# This module installs SMM variable protocol into SMM protocol database, # This module installs SMM variable protocol into SMM protocol database,
# which can be used by SMM driver, and installs SMM variable protocol # which can be used by SMM driver, and installs SMM variable protocol
# into BS protocol database, which can be used to notify the SMM Runtime # into BS protocol database, which can be used to notify the SMM Runtime
# Dxe driver that the SMM variable service is ready. # Dxe driver that the SMM variable service is ready.
# This module should be used with SMM Runtime DXE module together. The # This module should be used with SMM Runtime DXE module together. The
# SMM Runtime DXE module would install variable arch protocol and variable # SMM Runtime DXE module installs variable arch protocol and variable
# write arch protocol based on SMM variable module. # write arch protocol based on SMM variable module.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This driver will have external input - variable data and communicate buffer in SMM mode. # This driver will have external input - variable data and communicate buffer in SMM mode.
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issues such as
# buffer overflow, integer overflow. # buffer overflow or integer overflow.
# #
# Copyright (c) 2010 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2010 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -27,6 +27,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = VariableAuthSmm BASE_NAME = VariableAuthSmm
MODULE_UNI_FILE = VariableAuthSmm.uni
FILE_GUID = D34BDC5E-968A-40f5-A48C-E594F45AE211 FILE_GUID = D34BDC5E-968A-40f5-A48C-E594F45AE211
MODULE_TYPE = DXE_SMM_DRIVER MODULE_TYPE = DXE_SMM_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -69,43 +70,83 @@
HobLib HobLib
[Protocols] [Protocols]
gEfiSmmFirmwareVolumeBlockProtocolGuid ## SOMETIMES_CONSUMES gEfiSmmFirmwareVolumeBlockProtocolGuid ## CONSUMES
gEfiSmmVariableProtocolGuid ## ALWAYS_PRODUCES gEfiSmmAccess2ProtocolGuid ## CONSUMES
gEfiSmmFaultTolerantWriteProtocolGuid ## SOMETIMES_CONSUMES
gEfiSmmAccess2ProtocolGuid ## ALWAYS_CONSUMES ## PRODUCES
gEfiSmmEndOfDxeProtocolGuid ## ALWAYS_CONSUMES ## UNDEFINED # SmiHandlerRegister
gEfiSmmVariableProtocolGuid
## CONSUMES
## NOTIFY
gEfiSmmFaultTolerantWriteProtocolGuid
gEfiSmmEndOfDxeProtocolGuid ## NOTIFY
[Guids] [Guids]
gEfiAuthenticatedVariableGuid ## PRODUCES ## Configuration Table Guid ## PRODUCES ## GUID # Variable store header
gEfiGlobalVariableGuid ## PRODUCES ## Variable Guid ## CONSUMES ## GUID # Variable store header
gSmmVariableWriteGuid ## PRODUCES ## SMM Variable Write Guid ## SOMETIMES_CONSUMES ## HOB
gEfiCertTypeRsa2048Sha256Guid gEfiAuthenticatedVariableGuid
## SOMETIMES_CONSUMES ## Variable:L"PlatformLang"
## SOMETIMES_PRODUCES ## Variable:L"PlatformLang"
## SOMETIMES_CONSUMES ## Variable:L"Lang"
## SOMETIMES_PRODUCES ## Variable:L"Lang"
## SOMETIMES_CONSUMES ## Variable:L"HwErrRecSupport"
## CONSUMES ## Variable:L"SetupMode"
## PRODUCES ## Variable:L"SetupMode"
## SOMETIMES_CONSUMES ## Variable:L"PK"
## SOMETIMES_CONSUMES ## Variable:L"KEK"
## CONSUMES ## Variable:L"SecureBoot"
## PRODUCES ## Variable:L"SecureBoot"
## CONSUMES ## Variable:L"SignatureSupport"
## PRODUCES ## Variable:L"SignatureSupport"
## PRODUCES ## Variable:L"VendorKeys"
gEfiGlobalVariableGuid
## SOMETIMES_CONSUMES ## Variable:L"DB"
## SOMETIMES_CONSUMES ## Variable:L"DBX"
gEfiImageSecurityDatabaseGuid gEfiImageSecurityDatabaseGuid
gEfiCertX509Guid
gEfiCertPkcs7Guid ## CONSUMES ## Variable:L"SecureBootEnable"
gEfiCertRsa2048Guid ## PRODUCES ## Variable:L"SecureBootEnable"
gEfiSecureBootEnableDisableGuid gEfiSecureBootEnableDisableGuid
## CONSUMES ## Variable:L"CustomMode"
## PRODUCES ## Variable:L"CustomMode"
gEfiCustomModeEnableGuid gEfiCustomModeEnableGuid
gEfiVendorKeysNvGuid
gEfiSystemNvDataFvGuid ## CONSUMES ## CONSUMES ## Variable:L"certdb"
## PRODUCES ## Variable:L"certdb"
gEfiCertDbGuid gEfiCertDbGuid
gEfiHardwareErrorVariableGuid ## SOMETIMES_CONSUMES
gEdkiiFaultTolerantWriteGuid ## CONSUMES ## CONSUMES ## Variable:L"VendorKeysNv"
## PRODUCES ## Variable:L"VendorKeysNv"
gEfiVendorKeysNvGuid
gSmmVariableWriteGuid ## PRODUCES ## GUID # Install protocol
gEfiCertTypeRsa2048Sha256Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the format of the CertData.
gEfiCertPkcs7Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the format of the CertData.
gEfiCertX509Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
gEfiSystemNvDataFvGuid ## CONSUMES ## GUID
gEfiHardwareErrorVariableGuid ## SOMETIMES_CONSUMES ## Variable:L"HwErrRec####"
gEdkiiFaultTolerantWriteGuid ## SOMETIMES_CONSUMES ## HOB
[Pcd] [Pcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase ## SOMETIMES_CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64 gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase64 ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize gEfiMdeModulePkgTokenSpaceGuid.PcdVariableStoreSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize gEfiMdeModulePkgTokenSpaceGuid.PcdHwErrStorageSize ## CONSUMES
[FeaturePcd] [FeaturePcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## CONSUMES # statistic the information of variable. gEfiMdeModulePkgTokenSpaceGuid.PcdVariableCollectStatistics ## CONSUMES # statistic the information of variable.
gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate ## CONSUMES gEfiMdePkgTokenSpaceGuid.PcdUefiVariableDefaultLangDeprecate ## CONSUMES # Auto update PlatformLang/Lang
[Depex] [Depex]
TRUE TRUE
[UserExtensions.TianoCore."ExtraFiles"]
VariableSmmExtra.uni

48
SecurityPkg/VariableAuthenticated/RuntimeDxe/VariableSmmRuntimeDxe.inf
View File

@ -1,14 +1,13 @@
## @file ## @file
# Component description file for Authenticated Variable SmmRuntimeDxe module. # Runtime DXE part corresponding to SMM authenticated variable module
# #
# This module is the Runtime DXE part correspond to SMM variable module. It # This module installs variable arch protocol and variable write arch protocol to provide
# installs variable arch protocol and variable write arch protocol and works # variable service. This module need work together with SMM authenticated variable module.
# with SMM variable module together.
# #
# Caution: This module requires additional review when modified. # Caution: This module requires additional review when modified.
# This driver will have external input - variable data. # This driver will have external input - variable data.
# This external input must be validated carefully to avoid security issue like # This external input must be validated carefully to avoid security issues such as
# buffer overflow, integer overflow. # buffer overflow or integer overflow.
# #
# Copyright (c) 2010 - 2014, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2010 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
@ -23,6 +22,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = VariableAuthSmmRuntimeDxe BASE_NAME = VariableAuthSmmRuntimeDxe
MODULE_UNI_FILE = VariableAuthSmmRuntimeDxe.uni
FILE_GUID = 067E2381-7234-4798-B49C-D5FECBFF6D07 FILE_GUID = 067E2381-7234-4798-B49C-D5FECBFF6D07
MODULE_TYPE = DXE_RUNTIME_DRIVER MODULE_TYPE = DXE_RUNTIME_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -57,21 +57,41 @@
TpmMeasurementLib TpmMeasurementLib
[Protocols] [Protocols]
gEfiVariableWriteArchProtocolGuid ## ALWAYS_PRODUCES gEfiVariableWriteArchProtocolGuid ## PRODUCES
gEfiVariableArchProtocolGuid ## ALWAYS_PRODUCES gEfiVariableArchProtocolGuid ## PRODUCES
gEfiSmmCommunicationProtocolGuid gEfiSmmCommunicationProtocolGuid ## CONSUMES
gEdkiiVariableLockProtocolGuid ## PRODUCES
## CONSUMES
## NOTIFY
## UNDEFINED # Used to do smm communication
gEfiSmmVariableProtocolGuid gEfiSmmVariableProtocolGuid
gEdkiiVariableLockProtocolGuid ## ALWAYS_PRODUCES
[Guids] [Guids]
gEfiEventVirtualAddressChangeGuid ## PRODUCES ## Event gEfiEventVirtualAddressChangeGuid ## CONSUMES ## Event
gEfiEventExitBootServicesGuid ## CONSUMES ## Event
## CONSUMES ## UNDEFINED # Locate protocol
## CONSUMES ## UNDEFINED # Protocol notify
gSmmVariableWriteGuid gSmmVariableWriteGuid
## SOMETIMES_CONSUMES ## Variable:L"PK"
## SOMETIMES_CONSUMES ## Variable:L"KEK"
## SOMETIMES_CONSUMES ## Variable:L"SecureBoot"
gEfiGlobalVariableGuid
## SOMETIMES_CONSUMES ## Variable:L"DB"
## SOMETIMES_CONSUMES ## Variable:L"DBX"
gEfiImageSecurityDatabaseGuid gEfiImageSecurityDatabaseGuid
[Pcd] [Pcd]
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize gEfiMdeModulePkgTokenSpaceGuid.PcdMaxHardwareErrorVariableSize ## CONSUMES
gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase gEfiMdeModulePkgTokenSpaceGuid.PcdFlashNvStorageVariableBase ## CONSUMES
[Depex] [Depex]
gEfiSmmCommunicationProtocolGuid gEfiSmmCommunicationProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
VariableSmmRuntimeDxeExtra.uni

71
SecurityPkg/VariableAuthenticated/SecureBootConfigDxe/SecureBootConfigDxe.inf
View File

@ -1,7 +1,8 @@
## @file ## @file
# Component name for SecureBoot configuration module. # Provides the capbility to configure secure boot in a setup browser
# By this module, user may change the content of DB, DBX, PK and KEK.
# #
# Copyright (c) 2011 - 2013, Intel Corporation. All rights reserved.<BR> # Copyright (c) 2011 - 2014, Intel Corporation. All rights reserved.<BR>
# This program and the accompanying materials # This program and the accompanying materials
# are licensed and made available under the terms and conditions of the BSD License # are licensed and made available under the terms and conditions of the BSD License
# which accompanies this distribution. The full text of the license may be found at # which accompanies this distribution. The full text of the license may be found at
@ -14,6 +15,7 @@
[Defines] [Defines]
INF_VERSION = 0x00010005 INF_VERSION = 0x00010005
BASE_NAME = SecureBootConfigDxe BASE_NAME = SecureBootConfigDxe
MODULE_UNI_FILE = SecureBootConfigDxe.uni
FILE_GUID = F0E6A44F-7195-41c3-AC64-54F202CD0A21 FILE_GUID = F0E6A44F-7195-41c3-AC64-54F202CD0A21
MODULE_TYPE = DXE_DRIVER MODULE_TYPE = DXE_DRIVER
VERSION_STRING = 1.0 VERSION_STRING = 1.0
@ -57,31 +59,64 @@
DevicePathLib DevicePathLib
[Guids] [Guids]
gEfiIfrTianoGuid ## SOMETIMES_CONSUMES ## Variable:L"CustomMode"
## SOMETIMES_PRODUCES ## Variable:L"CustomMode"
gEfiCustomModeEnableGuid gEfiCustomModeEnableGuid
## SOMETIMES_CONSUMES ## Variable:L"SecureBootEnable"
## SOMETIMES_PRODUCES ## Variable:L"SecureBootEnable"
gEfiSecureBootEnableDisableGuid gEfiSecureBootEnableDisableGuid
## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the signature.
gEfiCertRsa2048Guid
## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the signature.
gEfiCertX509Guid
## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the signature.
gEfiCertSha1Guid
## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the signature.
## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the signature.
gEfiCertSha256Guid
## SOMETIMES_CONSUMES ## Variable:L"db"
## SOMETIMES_PRODUCES ## Variable:L"db"
## SOMETIMES_CONSUMES ## Variable:L"dbx"
## SOMETIMES_PRODUCES ## Variable:L"dbx"
gEfiImageSecurityDatabaseGuid
## SOMETIMES_CONSUMES ## Variable:L"SetupMode"
## SOMETIMES_PRODUCES ## Variable:L"PK"
## SOMETIMES_CONSUMES ## Variable:L"KEK"
## SOMETIMES_PRODUCES ## Variable:L"KEK"
## SOMETIMES_CONSUMES ## Variable:L"SecureBoot"
gEfiGlobalVariableGuid
gEfiIfrTianoGuid ## PRODUCES ## GUID # HII opcode
## PRODUCES ## HII
## CONSUMES ## HII
gSecureBootConfigFormSetGuid gSecureBootConfigFormSetGuid
gEfiCertPkcs7Guid gEfiCertPkcs7Guid ## SOMETIMES_PRODUCES ## GUID # Unique ID for the type of the certificate.
gEfiCertRsa2048Guid ## CONSUMES gEfiCertTypeRsa2048Sha256Guid ## SOMETIMES_CONSUMES ## GUID # Unique ID for the type of the certificate.
gEfiCertX509Guid ## CONSUMES gEfiFileSystemVolumeLabelInfoIdGuid ## SOMETIMES_CONSUMES ## GUID # Indicate the information type
gEfiCertSha1Guid ## CONSUMES gEfiFileInfoGuid ## SOMETIMES_CONSUMES ## GUID # Indicate the information type
gEfiCertSha256Guid ## CONSUMES
gEfiCertTypeRsa2048Sha256Guid ## CONSUMES
gEfiImageSecurityDatabaseGuid ## CONSUMES
gEfiFileSystemVolumeLabelInfoIdGuid ## CONSUMES
gEfiGlobalVariableGuid ## PRODUCES ## Variable Guid
gEfiFileInfoGuid ## CONSUMES ## GUID
[Protocols] [Protocols]
gEfiHiiConfigAccessProtocolGuid ## PRODUCES gEfiHiiConfigAccessProtocolGuid ## PRODUCES
gEfiHiiConfigRoutingProtocolGuid ## CONSUMES gEfiDevicePathProtocolGuid ## PRODUCES
gEfiSimpleFileSystemProtocolGuid ## PROTOCOL CONSUMES gEfiSimpleFileSystemProtocolGuid ## SOMETIMES_CONSUMES
gEfiLoadFileProtocolGuid ## PROTOCOL CONSUMES gEfiBlockIoProtocolGuid ## SOMETIMES_CONSUMES
gEfiBlockIoProtocolGuid ## PROTOCOL CONSUMES
gEfiDevicePathProtocolGuid ## PROTOCOL CONSUMES
[Depex] [Depex]
gEfiHiiConfigRoutingProtocolGuid AND gEfiHiiConfigRoutingProtocolGuid AND
gEfiHiiDatabaseProtocolGuid AND gEfiHiiDatabaseProtocolGuid AND
gEfiVariableArchProtocolGuid AND gEfiVariableArchProtocolGuid AND
gEfiVariableWriteArchProtocolGuid gEfiVariableWriteArchProtocolGuid
[UserExtensions.TianoCore."ExtraFiles"]
SecureBootConfigDxeExtra.uni