6f785cfcc3
If TPM error happens, set TPM flag to NOT present, so that trusted boot patch is disabled. Also report status code for failure, so that platform may register handler to apply policy like force system reset, or disable TPM permanently. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: "Yao, Jiewen" <jiewen.yao@intel.com> Reviewed-by: "Dong, Guo" <guo.dong@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@16598 6f19259b-4bc3-4df7-8a09-765794883524
93 lines
3.7 KiB
INI
93 lines
3.7 KiB
INI
## @file
|
|
# Initializes TPM device and measures FVs in PEI phase
|
|
#
|
|
# This module will initialize TPM device, measure reported FVs and BIOS version.
|
|
# This module may also lock TPM physical presence and physicalPresenceLifetimeLock.
|
|
#
|
|
# Copyright (c) 2006 - 2015, Intel Corporation. All rights reserved.<BR>
|
|
# This program and the accompanying materials
|
|
# are licensed and made available under the terms and conditions of the BSD License
|
|
# which accompanies this distribution. The full text of the license may be found at
|
|
# http://opensource.org/licenses/bsd-license.php
|
|
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
#
|
|
##
|
|
|
|
[Defines]
|
|
INF_VERSION = 0x00010005
|
|
BASE_NAME = TcgPei
|
|
MODULE_UNI_FILE = TcgPei.uni
|
|
FILE_GUID = 2BE1E4A6-6505-43b3-9FFC-A3C8330E0432
|
|
MODULE_TYPE = PEIM
|
|
VERSION_STRING = 1.0
|
|
ENTRY_POINT = PeimEntryMA
|
|
|
|
#
|
|
# The following information is for reference only and not required by the build tools.
|
|
#
|
|
# VALID_ARCHITECTURES = IA32 X64 IPF EBC
|
|
#
|
|
# [BootMode]
|
|
# S3_RESUME ## SOMETIMES_CONSUMES
|
|
#
|
|
|
|
[Sources]
|
|
TcgPei.c
|
|
TisPei.c
|
|
TpmComm.c
|
|
TpmComm.h
|
|
|
|
[Packages]
|
|
MdePkg/MdePkg.dec
|
|
MdeModulePkg/MdeModulePkg.dec
|
|
SecurityPkg/SecurityPkg.dec
|
|
|
|
[LibraryClasses]
|
|
HobLib
|
|
PeimEntryPoint
|
|
PeiServicesLib
|
|
BaseMemoryLib
|
|
DebugLib
|
|
TpmCommLib
|
|
TimerLib
|
|
IoLib
|
|
PeiServicesTablePointerLib
|
|
BaseLib
|
|
PcdLib
|
|
MemoryAllocationLib
|
|
ReportStatusCodeLib
|
|
|
|
[Guids]
|
|
gTcgEventEntryHobGuid ## PRODUCES ## HOB
|
|
gTpmErrorHobGuid ## SOMETIMES_PRODUCES ## HOB
|
|
gMeasuredFvHobGuid ## PRODUCES ## HOB
|
|
gEfiTpmDeviceInstanceTpm12Guid ## PRODUCES ## GUID # TPM device identifier
|
|
|
|
[Ppis]
|
|
gPeiLockPhysicalPresencePpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
gEfiPeiFirmwareVolumeInfoPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
gEfiPeiFirmwareVolumeInfo2PpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
gEfiPeiFirmwareVolumeInfoMeasurementExcludedPpiGuid ## SOMETIMES_CONSUMES
|
|
gPeiTpmInitializedPpiGuid ## PRODUCES
|
|
gEfiEndOfPeiSignalPpiGuid ## SOMETIMES_CONSUMES ## NOTIFY
|
|
|
|
[Pcd]
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceLifetimeLock ## SOMETIMES_CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceCmdEnable ## SOMETIMES_CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceHwEnable ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdFirmwareVersionString ## SOMETIMES_CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid ## CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy ## CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdTpmScrtmPolicy ## SOMETIMES_CONSUMES
|
|
gEfiMdeModulePkgTokenSpaceGuid.PcdPeiCoreMaxFvSupported ## CONSUMES
|
|
gEfiSecurityPkgTokenSpaceGuid.PcdStatusCodeSubClassTpmDevice ## SOMETIMES_CONSUMES
|
|
|
|
[Depex]
|
|
gEfiPeiMasterBootModePpiGuid AND
|
|
gEfiPeiReadOnlyVariable2PpiGuid AND
|
|
gEfiTpmDeviceSelectedGuid
|
|
|
|
[UserExtensions.TianoCore."ExtraFiles"]
|
|
TcgPeiExtra.uni
|
|
|