UefiPayloadPkg/SecureBootEnrollDefaultKeys: Make SecureBoot configurable

Signed-off-by: Christian Walter <christian.walter@9elements.com>
2020-07-07 15:24:38 +02:00
parent db04386fd9
commit 802391f1fe
1 changed files with 6 additions and 0 deletions
--- a/UefiPayloadPkg/SecureBootEnrollDefaultKeys/SecureBootSetup.c
+++ b/UefiPayloadPkg/SecureBootEnrollDefaultKeys/SecureBootSetup.c
@@ -460,6 +460,12 @@ InstallSecureBootHook (
    DEBUG ((EFI_D_ERROR, "SecureBootSetup: already in User Mode\n"));
    return;
  }
+
+  if (Settings.SecureBootEnable != SECURE_BOOT_MODE_ENABLE) {
+    DEBUG ((EFI_D_ERROR, "SecureBootSetup: SecureBootEnable is disabled.\n"));
+    return;
+  }
+
  PrintSettings (&Settings);

  if (Settings.CustomMode != CUSTOM_SECURE_BOOT_MODE) {