tyler.durden
/
audk
mirror of https://github.com/acidanthera/audk.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix PCD help information format and a typo. 

Signed-off-by: Dong Guo <guo.dong@intel.com>
Reviewed-by: Gao, Liming <liming.gao@intel.com>
Reviewed-by: Yao Jiewen <jiewen.yao@intel.com>



git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@15171 6f19259b-4bc3-4df7-8a09-765794883524
This commit is contained in:
Dong Guo 2014-01-23 03:19:38 +00:00 committed by gdong1
parent 27582c41ba
commit 675723cbca
2 changed files with 28 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
SecurityPkg/Include/Library/TrEEPhysicalPresenceLib.h
View File

@ -1,8 +1,8 @@
/** @file
Ihis library is intended to be used by BDS modules.
This library will executing TPM2 request.
This library will execute TPM2 request.
Copyright (c) 2013, Intel Corporation. All rights reserved.<BR>
Copyright (c) 2013 - 2014, Intel Corporation. All rights reserved.<BR>
This program and the accompanying materials
are licensed and made available under the terms and conditions of the BSD License
which accompanies this distribution. The full text of the license may be found at

50
SecurityPkg/SecurityPkg.dec
View File

@ -182,17 +182,17 @@
[PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]
## This PCD indicates whether to set TPM physicalPresenceLifetimeLock bit.
## Once this bit is set, it can not be cleared (It is locked for TPM life time).
# Once this bit is set, it can not be cleared (It is locked for TPM life time).
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceLifetimeLock|FALSE|BOOLEAN|0x00010003
[PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]
## This PCD is used to specify the default value for physicalPresenceCMDEnable bit when setting physicalPresenceLifetimeLock bit.
## If PcdPhysicalPresenceCmdEnable is set to TRUE, physicalPresenceCMDEnable bit will be set, else this bit will be cleared.
# If PcdPhysicalPresenceCmdEnable is set to TRUE, physicalPresenceCMDEnable bit will be set, else this bit will be cleared.
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceCmdEnable|TRUE|BOOLEAN|0x00010004
[PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]
## This PCD is used to specify the default value for physicalPresenceHWEnable bit when setting physicalPresenceLifetimeLock bit.
## If PcdPhysicalPresenceHwEnable is set to TRUE, physicalPresenceHWEnable bit will be set, else this bit will be cleared.
# If PcdPhysicalPresenceHwEnable is set to TRUE, physicalPresenceHWEnable bit will be set, else this bit will be cleared.
gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceHwEnable|TRUE|BOOLEAN|0x00010005
[PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]
@ -200,49 +200,49 @@
gEfiSecurityPkgTokenSpaceGuid.PcdFirmwareDebuggerInitialized|FALSE|BOOLEAN|0x00010009
## This PCD indicates the TPM2 initialization policy.
## 0: No initialization needed - most likely used for chipset SRTM solution, in which TPM is already initialized.
## 1: Initialization needed.
# 0: No initialization needed - most likely used for chipset SRTM solution, in which TPM is already initialized.
# 1: Initialization needed.
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2InitializationPolicy|1|UINT8|0x0001000A
## This PCD indicates the TPM initialization policy.
## 0: No initialization needed - most likely used for chipset SRTM solution, in which TPM is already initialized.
## 1: Initialization needed.
# 0: No initialization needed - most likely used for chipset SRTM solution, in which TPM is already initialized.
# 1: Initialization needed.
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy|1|UINT8|0x0001000B
## This PCD indicates the TPM2 SelfTest policy.
## 0: No SelfTest needed - most likely used for fTPM, because it might already be tested.
## 1: SelfTest needed.
# 0: No SelfTest needed - most likely used for fTPM, because it might already be tested.
# 1: SelfTest needed.
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2SelfTestPolicy|1|UINT8|0x0001000C
## This PCD indicates the TPM2 SCRTM policy.
## 0: No SCRTM needed - In this case, it is already done.
## 1: SCRTM done by BIOS.
# 0: No SCRTM needed - In this case, it is already done.
# 1: SCRTM done by BIOS.
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2ScrtmPolicy|1|UINT8|0x0001000D
## This PCD indicates the TPM SCRTM policy.
## 0: No SCRTM needed - In this case, it is already done.
## 1: SCRTM done by BIOS.
# 0: No SCRTM needed - In this case, it is already done.
# 1: SCRTM done by BIOS.
gEfiSecurityPkgTokenSpaceGuid.PcdTpmScrtmPolicy|1|UINT8|0x0001000E
## Guid name to identify TPM instance
## TPM_DEVICE_INTERFACE_NONE means disable
## TPM_DEVICE_INTERFACE_TPM12 means TPM1.2 DTPM
## TPM_DEVICE_INTERFACE_DTPM2 means TPM2 DTPM
# TPM_DEVICE_INTERFACE_NONE means disable
# TPM_DEVICE_INTERFACE_TPM12 means TPM1.2 DTPM
# TPM_DEVICE_INTERFACE_DTPM2 means TPM2 DTPM
gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid |{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }|VOID*|0x0001000F
## This PCD indicates the TPM2 Hash mask.
## BIT0: SHA1
## BIT1: SHA256
## BIT2: SHA384
## BIT3: SHA512
## If this bit is set, that means this algorithm is needed to extend to PCR.
## If this bit is clear, that means this algorithm is NOT needed to extend to PCR.
## 0xFFFFFFFF means extend all.
# BIT0: SHA1
# BIT1: SHA256
# BIT2: SHA384
# BIT3: SHA512
# If this bit is set, that means this algorithm is needed to extend to PCR.
# If this bit is clear, that means this algorithm is NOT needed to extend to PCR.
# 0xFFFFFFFF means extend all.
gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask|0xFFFFFFFF|UINT32|0x00010010
## This PCD indicates if BIOS auto detect TPM1.2 or dTPM2.0.
## 0: No auto detection.
## 1: Auto detection.
# 0: No auto detection.
# 1: Auto detection.
gEfiSecurityPkgTokenSpaceGuid.PcdTpmAutoDetection|TRUE|BOOLEAN|0x00010011
## This PCD indicates TPM base address.