SecurityPkg: TcgPei: Sync TCG PP lifetime lock state

Sync TCG lifetime lock state after performing PP command.
Later logic checks such state.

Cc: Long Qin <qin.long@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Chao Zhang <chao.b.zhang@intel.com>
Reviewed-by: Long Qin <qin.long@intel.com>
This commit is contained in:
Zhang, Chao B 2017-01-06 09:27:15 +08:00
parent 60c9860c43
commit 42b8555161
1 changed files with 2 additions and 1 deletions

View File

@ -1,7 +1,7 @@
/** @file /** @file
Initialize TPM device and measure FVs before handing off control to DXE. Initialize TPM device and measure FVs before handing off control to DXE.
Copyright (c) 2005 - 2016, Intel Corporation. All rights reserved.<BR> Copyright (c) 2005 - 2017, Intel Corporation. All rights reserved.<BR>
This program and the accompanying materials This program and the accompanying materials
are licensed and made available under the terms and conditions of the BSD License are licensed and made available under the terms and conditions of the BSD License
which accompanies this distribution. The full text of the license may be found at which accompanies this distribution. The full text of the license may be found at
@ -591,6 +591,7 @@ PhysicalPresencePpiNotifyCallback (
// Lock TPM LifetimeLock is required, and LifetimeLock is not locked yet. // Lock TPM LifetimeLock is required, and LifetimeLock is not locked yet.
// //
PhysicalPresenceValue = TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK; PhysicalPresenceValue = TPM_PHYSICAL_PRESENCE_LIFETIME_LOCK;
TpmPermanentFlags.physicalPresenceLifetimeLock = TRUE;
if (PcdGetBool (PcdPhysicalPresenceCmdEnable)) { if (PcdGetBool (PcdPhysicalPresenceCmdEnable)) {
PhysicalPresenceValue |= TPM_PHYSICAL_PRESENCE_CMD_ENABLE; PhysicalPresenceValue |= TPM_PHYSICAL_PRESENCE_CMD_ENABLE;