2 VFR file used by the SecureBoot configuration component.
4 Copyright (c) 2011 - 2017, Intel Corporation. All rights reserved.<BR>
5 This program and the accompanying materials
6 are licensed and made available under the terms and conditions of the BSD License
7 which accompanies this distribution. The full text of the license may be found at
8 http://opensource.org/licenses/bsd-license.php
10 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
11 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
15 #include "SecureBootConfigNvData.h"
18 guid = SECUREBOOT_CONFIG_FORM_SET_GUID,
19 title = STRING_TOKEN(STR_SECUREBOOT_TITLE),
20 help = STRING_TOKEN(STR_SECUREBOOT_HELP),
21 classguid = EFI_HII_PLATFORM_SETUP_FORMSET_GUID,
23 varstore SECUREBOOT_CONFIGURATION,
24 varid = SECUREBOOT_CONFIGURATION_VARSTORE_ID,
25 name = SECUREBOOT_CONFIGURATION,
26 guid = SECUREBOOT_CONFIG_FORM_SET_GUID;
29 // ##1 Form "Secure Boot Configuration"
31 form formid = SECUREBOOT_CONFIGURATION_FORM_ID,
32 title = STRING_TOKEN(STR_SECUREBOOT_TITLE);
34 subtitle text = STRING_TOKEN(STR_NULL);
37 help = STRING_TOKEN(STR_SECURE_BOOT_STATE_HELP),
38 text = STRING_TOKEN(STR_SECURE_BOOT_STATE_PROMPT),
39 text = STRING_TOKEN(STR_SECURE_BOOT_STATE_CONTENT);
42 // Display of Check Box: Attempt Secure Boot
44 grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1 OR NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;
45 checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,
46 questionid = KEY_SECURE_BOOT_ENABLE,
47 prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),
48 help = STRING_TOKEN(STR_SECURE_BOOT_HELP),
49 flags = INTERACTIVE | RESET_REQUIRED,
54 // Display of Oneof: 'Secure Boot Mode'
56 oneof name = SecureBootMode,
57 questionid = KEY_SECURE_BOOT_MODE,
58 prompt = STRING_TOKEN(STR_SECURE_BOOT_MODE_PROMPT),
59 help = STRING_TOKEN(STR_SECURE_BOOT_MODE_HELP),
60 flags = INTERACTIVE | NUMERIC_SIZE_1,
61 option text = STRING_TOKEN(STR_STANDARD_MODE), value = SECURE_BOOT_MODE_STANDARD, flags = DEFAULT;
62 option text = STRING_TOKEN(STR_CUSTOM_MODE), value = SECURE_BOOT_MODE_CUSTOM, flags = 0;
66 // Display of 'Current Secure Boot Mode'
68 suppressif questionref(SecureBootMode) == SECURE_BOOT_MODE_STANDARD;
69 grayoutif NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;
70 goto FORMID_SECURE_BOOT_OPTION_FORM,
71 prompt = STRING_TOKEN(STR_SECURE_BOOT_OPTION),
72 help = STRING_TOKEN(STR_SECURE_BOOT_OPTION_HELP),
74 key = KEY_SECURE_BOOT_OPTION;
81 // ##2 Form: 'Custom Secure Boot Options'
83 form formid = FORMID_SECURE_BOOT_OPTION_FORM,
84 title = STRING_TOKEN(STR_SECURE_BOOT_OPTION_TITLE);
86 subtitle text = STRING_TOKEN(STR_NULL);
88 goto FORMID_SECURE_BOOT_PK_OPTION_FORM,
89 prompt = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION),
90 help = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION_HELP),
92 key = KEY_SECURE_BOOT_PK_OPTION;
94 subtitle text = STRING_TOKEN(STR_NULL);
96 goto FORMID_SECURE_BOOT_KEK_OPTION_FORM,
97 prompt = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION),
98 help = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION_HELP),
100 key = KEY_SECURE_BOOT_KEK_OPTION;
102 subtitle text = STRING_TOKEN(STR_NULL);
104 goto FORMID_SECURE_BOOT_DB_OPTION_FORM,
105 prompt = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION),
106 help = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION_HELP),
108 key = KEY_SECURE_BOOT_DB_OPTION;
110 subtitle text = STRING_TOKEN(STR_NULL);
112 goto FORMID_SECURE_BOOT_DBX_OPTION_FORM,
113 prompt = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION),
114 help = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION_HELP),
116 key = KEY_SECURE_BOOT_DBX_OPTION;
118 subtitle text = STRING_TOKEN(STR_NULL);
120 goto FORMID_SECURE_BOOT_DBT_OPTION_FORM,
121 prompt = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION),
122 help = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION_HELP),
124 key = KEY_SECURE_BOOT_DBT_OPTION;
129 // ##3 Form: 'PK Options'
131 form formid = FORMID_SECURE_BOOT_PK_OPTION_FORM,
132 title = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION);
134 subtitle text = STRING_TOKEN(STR_NULL);
137 // Display of 'Enroll PK'
139 grayoutif ideqval SECUREBOOT_CONFIGURATION.HasPk == 1;
140 goto FORMID_ENROLL_PK_FORM,
141 prompt = STRING_TOKEN(STR_ENROLL_PK),
142 help = STRING_TOKEN(STR_ENROLL_PK_HELP),
147 subtitle text = STRING_TOKEN(STR_NULL);
150 // Display of Check Box: 'Delete Pk'
152 grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;
153 checkbox varid = SECUREBOOT_CONFIGURATION.DeletePk,
154 questionid = KEY_SECURE_BOOT_DELETE_PK,
155 prompt = STRING_TOKEN(STR_DELETE_PK),
156 help = STRING_TOKEN(STR_DELETE_PK_HELP),
157 flags = INTERACTIVE | RESET_REQUIRED,
163 // ##4 Form: 'Enroll PK'
165 form formid = FORMID_ENROLL_PK_FORM,
166 title = STRING_TOKEN(STR_ENROLL_PK);
168 subtitle text = STRING_TOKEN(STR_NULL);
170 goto FORMID_ENROLL_PK_FORM,
171 prompt = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),
172 help = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),
174 key = FORMID_ENROLL_PK_FORM;
176 subtitle text = STRING_TOKEN(STR_NULL);
177 label FORMID_ENROLL_PK_FORM;
179 subtitle text = STRING_TOKEN(STR_NULL);
181 goto FORMID_SECURE_BOOT_OPTION_FORM,
182 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
183 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
184 flags = INTERACTIVE| RESET_REQUIRED,
185 key = KEY_VALUE_SAVE_AND_EXIT_PK;
187 goto FORMID_SECURE_BOOT_OPTION_FORM,
188 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
189 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
191 key = KEY_VALUE_NO_SAVE_AND_EXIT_PK;
196 // ##5 Form: 'KEK Options'
198 form formid = FORMID_SECURE_BOOT_KEK_OPTION_FORM,
199 title = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION);
202 // Display of 'Enroll KEK'
204 goto FORMID_ENROLL_KEK_FORM,
205 prompt = STRING_TOKEN(STR_ENROLL_KEK),
206 help = STRING_TOKEN(STR_ENROLL_KEK_HELP),
209 subtitle text = STRING_TOKEN(STR_NULL);
212 // Display of 'Delete KEK'
214 goto FORMID_DELETE_KEK_FORM,
215 prompt = STRING_TOKEN(STR_DELETE_KEK),
216 help = STRING_TOKEN(STR_DELETE_KEK_HELP),
218 key = KEY_DELETE_KEK;
220 subtitle text = STRING_TOKEN(STR_NULL);
224 // ##6 Form: 'Enroll KEK'
226 form formid = FORMID_ENROLL_KEK_FORM,
227 title = STRING_TOKEN(STR_ENROLL_KEK_TITLE);
229 subtitle text = STRING_TOKEN(STR_NULL);
231 goto FORMID_ENROLL_KEK_FORM,
232 prompt = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE),
233 help = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE_HELP),
235 key = FORMID_ENROLL_KEK_FORM;
237 subtitle text = STRING_TOKEN(STR_NULL);
238 label FORMID_ENROLL_KEK_FORM;
240 subtitle text = STRING_TOKEN(STR_NULL);
242 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
243 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
244 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
246 key = KEY_SECURE_BOOT_KEK_GUID,
247 minsize = SECURE_BOOT_GUID_SIZE,
248 maxsize = SECURE_BOOT_GUID_SIZE,
251 subtitle text = STRING_TOKEN(STR_NULL);
252 subtitle text = STRING_TOKEN(STR_NULL);
254 goto FORMID_SECURE_BOOT_OPTION_FORM,
255 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
256 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
258 key = KEY_VALUE_SAVE_AND_EXIT_KEK;
260 goto FORMID_SECURE_BOOT_OPTION_FORM,
261 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
262 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
264 key = KEY_VALUE_NO_SAVE_AND_EXIT_KEK;
269 // ##7 Form: 'Delete KEK'
271 form formid = FORMID_DELETE_KEK_FORM,
272 title = STRING_TOKEN(STR_DELETE_KEK_TITLE);
274 label LABEL_KEK_DELETE;
277 subtitle text = STRING_TOKEN(STR_NULL);
282 // ##8 Form: 'DB Options'
284 form formid = FORMID_SECURE_BOOT_DB_OPTION_FORM,
285 title = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION);
287 subtitle text = STRING_TOKEN(STR_NULL);
289 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,
290 prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
291 help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
294 subtitle text = STRING_TOKEN(STR_NULL);
296 goto SECUREBOOT_DELETE_SIGNATURE_FROM_DB,
297 prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
298 help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
300 key = SECUREBOOT_DELETE_SIGNATURE_FROM_DB;
305 // ##9 Form: 'DBX Options'
307 form formid = FORMID_SECURE_BOOT_DBX_OPTION_FORM,
308 title = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION);
310 subtitle text = STRING_TOKEN(STR_NULL);
312 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,
313 prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
314 help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
317 subtitle text = STRING_TOKEN(STR_NULL);
319 goto SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,
320 prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
321 help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
323 key = KEY_VALUE_FROM_DBX_TO_LIST_FORM;
328 // ##9 Form: 'DBT Options'
330 form formid = FORMID_SECURE_BOOT_DBT_OPTION_FORM,
331 title = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION);
333 subtitle text = STRING_TOKEN(STR_NULL);
335 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,
336 prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
337 help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
340 subtitle text = STRING_TOKEN(STR_NULL);
342 goto SECUREBOOT_DELETE_SIGNATURE_FROM_DBT,
343 prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
344 help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
346 key = SECUREBOOT_DELETE_SIGNATURE_FROM_DBT;
351 // Form: 'Delete Signature' for DB Options.
353 form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DB,
354 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);
356 label LABEL_DB_DELETE;
358 subtitle text = STRING_TOKEN(STR_NULL);
363 // Form: Display Signature List.
365 form formid = SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,
366 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_LIST_FORM);
368 subtitle text = STRING_TOKEN(STR_NULL);
370 grayoutif ideqval SECUREBOOT_CONFIGURATION.ListCount == 0;
371 label LABEL_DELETE_ALL_LIST_BUTTON;
373 // Will create a goto button dynamically here.
378 subtitle text = STRING_TOKEN(STR_NULL);
379 label LABEL_SIGNATURE_LIST_START;
381 subtitle text = STRING_TOKEN(STR_NULL);
386 // Form: Display Signature Data.
388 form formid = SECUREBOOT_DELETE_SIGNATURE_DATA_FORM,
389 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_DATA_FORM);
391 subtitle text = STRING_TOKEN(STR_NULL);
393 goto SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,
394 prompt = STRING_TOKEN(STR_SECURE_BOOT_DELETE_ALL_DATA),
395 help = STRING_TOKEN(STR_SECURE_BOOT_DELETE_ALL_DATA_HELP),
397 key = KEY_SECURE_BOOT_DELETE_ALL_DATA;
399 grayoutif ideqval SECUREBOOT_CONFIGURATION.CheckedDataCount == 0;
400 goto SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,
401 prompt = STRING_TOKEN(STR_SECURE_BOOT_DELETE_CHECK_DATA),
402 help = STRING_TOKEN(STR_SECURE_BOOT_DELETE_CHECK_DATA_HELP),
404 key = KEY_SECURE_BOOT_DELETE_CHECK_DATA;
407 subtitle text = STRING_TOKEN(STR_NULL);
408 label LABEL_SIGNATURE_DATA_START;
410 subtitle text = STRING_TOKEN(STR_NULL);
416 // Form: 'Delete Signature' for DBT Options.
418 form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DBT,
419 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);
421 label LABEL_DBT_DELETE;
423 subtitle text = STRING_TOKEN(STR_NULL);
428 // Form: 'Enroll Signature' for DB options.
430 form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DB,
431 title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);
433 subtitle text = STRING_TOKEN(STR_NULL);
435 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,
436 prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
437 help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
439 key = SECUREBOOT_ENROLL_SIGNATURE_TO_DB;
441 subtitle text = STRING_TOKEN(STR_NULL);
442 label SECUREBOOT_ENROLL_SIGNATURE_TO_DB;
444 subtitle text = STRING_TOKEN(STR_NULL);
446 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
447 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
448 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
450 key = KEY_SECURE_BOOT_SIGNATURE_GUID_DB,
451 minsize = SECURE_BOOT_GUID_SIZE,
452 maxsize = SECURE_BOOT_GUID_SIZE,
455 subtitle text = STRING_TOKEN(STR_NULL);
456 subtitle text = STRING_TOKEN(STR_NULL);
458 goto FORMID_SECURE_BOOT_OPTION_FORM,
459 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
460 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
462 key = KEY_VALUE_SAVE_AND_EXIT_DB;
464 goto FORMID_SECURE_BOOT_OPTION_FORM,
465 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
466 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
468 key = KEY_VALUE_NO_SAVE_AND_EXIT_DB;
473 // Form: 'Enroll Signature' for DBX options.
475 form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,
476 title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);
478 subtitle text = STRING_TOKEN(STR_NULL);
480 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,
481 prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
482 help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
484 key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;
486 label SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;
488 subtitle text = STRING_TOKEN(STR_NULL);
490 grayoutif ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 3;
491 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
492 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
493 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
495 key = KEY_SECURE_BOOT_SIGNATURE_GUID_DBX,
496 minsize = SECURE_BOOT_GUID_SIZE,
497 maxsize = SECURE_BOOT_GUID_SIZE,
501 disableif NOT ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 1;
502 oneof name = X509SignatureFormatInDbx,
503 varid = SECUREBOOT_CONFIGURATION.CertificateFormat,
504 prompt = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT),
505 help = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_HELP),
506 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA256), value = 0x1, flags = DEFAULT;
507 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA384), value = 0x2, flags = 0;
508 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA512), value = 0x3, flags = 0;
509 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_RAW), value = 0x4, flags = 0;
513 disableif NOT ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 2;
515 help = STRING_TOKEN(STR_DBX_PE_IMAGE_FORMAT_HELP), // Help string
516 text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT), // Prompt string
517 text = STRING_TOKEN(STR_DBX_PE_FORMAT_SHA256); // PE image type
520 disableif NOT ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 3;
522 help = STRING_TOKEN(STR_DBX_AUTH_2_FORMAT_HELP), // Help string
523 text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT), // Prompt string
524 text = STRING_TOKEN(STR_DBX_AUTH_2_FORMAT); // AUTH_2 image type
527 suppressif ideqval SECUREBOOT_CONFIGURATION.CertificateFormat == 4;
528 checkbox varid = SECUREBOOT_CONFIGURATION.AlwaysRevocation,
529 prompt = STRING_TOKEN(STR_ALWAYS_CERTIFICATE_REVOCATION_PROMPT),
530 help = STRING_TOKEN(STR_ALWAYS_CERTIFICATE_REVOCATION_HELP),
534 suppressif ideqval SECUREBOOT_CONFIGURATION.AlwaysRevocation == 1;
535 date varid = SECUREBOOT_CONFIGURATION.RevocationDate,
536 prompt = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_DATE_PROMPT),
537 help = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_DATE_HELP),
538 flags = STORAGE_NORMAL,
541 time varid = SECUREBOOT_CONFIGURATION.RevocationTime,
542 prompt = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_TIME_PROMPT),
543 help = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_TIME_HELP),
544 flags = STORAGE_NORMAL,
549 subtitle text = STRING_TOKEN(STR_NULL);
550 subtitle text = STRING_TOKEN(STR_NULL);
552 goto FORMID_SECURE_BOOT_OPTION_FORM,
553 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
554 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
556 key = KEY_VALUE_SAVE_AND_EXIT_DBX;
558 goto FORMID_SECURE_BOOT_OPTION_FORM,
559 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
560 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
562 key = KEY_VALUE_NO_SAVE_AND_EXIT_DBX;
567 // Form: 'Enroll Signature' for DBT options.
569 form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,
570 title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);
572 subtitle text = STRING_TOKEN(STR_NULL);
574 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,
575 prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
576 help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
578 key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBT;
580 subtitle text = STRING_TOKEN(STR_NULL);
581 label SECUREBOOT_ENROLL_SIGNATURE_TO_DBT;
583 subtitle text = STRING_TOKEN(STR_NULL);
585 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
586 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
587 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
589 key = KEY_SECURE_BOOT_SIGNATURE_GUID_DBT,
590 minsize = SECURE_BOOT_GUID_SIZE,
591 maxsize = SECURE_BOOT_GUID_SIZE,
594 subtitle text = STRING_TOKEN(STR_NULL);
595 subtitle text = STRING_TOKEN(STR_NULL);
597 goto FORMID_SECURE_BOOT_OPTION_FORM,
598 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
599 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
601 key = KEY_VALUE_SAVE_AND_EXIT_DBT;
603 goto FORMID_SECURE_BOOT_OPTION_FORM,
604 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
605 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
607 key = KEY_VALUE_NO_SAVE_AND_EXIT_DBT;