]>
Commit | Line | Data |
---|---|---|
0c18794e | 1 | /** @file\r |
2 | Provides a secure platform-specific method to clear PK(Platform Key).\r | |
3 | \r | |
4 | Copyright (c) 2011, Intel Corporation. All rights reserved.<BR>\r | |
5 | This program and the accompanying materials \r | |
6 | are licensed and made available under the terms and conditions of the BSD License \r | |
7 | which accompanies this distribution. The full text of the license may be found at \r | |
8 | http://opensource.org/licenses/bsd-license.php\r | |
9 | \r | |
10 | THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r | |
11 | WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r | |
12 | \r | |
13 | **/\r | |
14 | \r | |
15 | #ifndef __PLATFORM_SECURE_LIB_H__\r | |
16 | #define __PLATFORM_SECURE_LIB_H__\r | |
17 | \r | |
18 | \r | |
19 | /**\r | |
20 | \r | |
21 | This function detects whether a secure platform-specific method to clear PK(Platform Key)\r | |
22 | is configured by platform owner. This method is provided for users force to clear PK \r | |
23 | in case incorrect enrollment mis-haps.\r | |
24 | \r | |
25 | UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using \r | |
26 | a secure platform-specific method. In this case, the global variable SetupMode \r | |
27 | must also be updated to 1.\r | |
28 | \r | |
29 | NOTE THAT: This function cannot depend on any EFI Variable Service since they are\r | |
30 | not available when this function is called in AuthenticateVariable driver.\r | |
31 | \r | |
32 | @retval TRUE The Platform owner wants to force clear PK.\r | |
33 | @retval FALSE The Platform owner doesn't want to force clear PK. \r | |
34 | \r | |
35 | **/\r | |
36 | BOOLEAN\r | |
37 | EFIAPI\r | |
38 | ForceClearPK (\r | |
39 | VOID\r | |
40 | );\r | |
41 | \r | |
42 | #endif |