mirror of https://github.com/acidanthera/audk.git
42 lines
1.4 KiB
C
42 lines
1.4 KiB
C
/** @file
|
|
Provides a secure platform-specific method to clear PK(Platform Key).
|
|
|
|
Copyright (c) 2011, Intel Corporation. All rights reserved.<BR>
|
|
This program and the accompanying materials
|
|
are licensed and made available under the terms and conditions of the BSD License
|
|
which accompanies this distribution. The full text of the license may be found at
|
|
http://opensource.org/licenses/bsd-license.php
|
|
|
|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
|
|
**/
|
|
|
|
#ifndef __PLATFORM_SECURE_LIB_H__
|
|
#define __PLATFORM_SECURE_LIB_H__
|
|
|
|
|
|
/**
|
|
|
|
This function detects whether a secure platform-specific method to clear PK(Platform Key)
|
|
is configured by platform owner. This method is provided for users force to clear PK
|
|
in case incorrect enrollment mis-haps.
|
|
|
|
UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using
|
|
a secure platform-specific method. In this case, the global variable SetupMode
|
|
must also be updated to 1.
|
|
|
|
NOTE THAT: This function cannot depend on any EFI Variable Service since they are
|
|
not available when this function is called in AuthenticateVariable driver.
|
|
|
|
@retval TRUE The Platform owner wants to force clear PK.
|
|
@retval FALSE The Platform owner doesn't want to force clear PK.
|
|
|
|
**/
|
|
BOOLEAN
|
|
EFIAPI
|
|
ForceClearPK (
|
|
VOID
|
|
);
|
|
|
|
#endif |