2 VFR file used by the SecureBoot configuration component.
4 Copyright (c) 2011 - 2015, Intel Corporation. All rights reserved.<BR>
5 This program and the accompanying materials
6 are licensed and made available under the terms and conditions of the BSD License
7 which accompanies this distribution. The full text of the license may be found at
8 http://opensource.org/licenses/bsd-license.php
10 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
11 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
15 #include "SecureBootConfigNvData.h"
18 guid = SECUREBOOT_CONFIG_FORM_SET_GUID,
19 title = STRING_TOKEN(STR_SECUREBOOT_TITLE),
20 help = STRING_TOKEN(STR_SECUREBOOT_HELP),
21 classguid = EFI_HII_PLATFORM_SETUP_FORMSET_GUID,
23 varstore SECUREBOOT_CONFIGURATION,
24 varid = SECUREBOOT_CONFIGURATION_VARSTORE_ID,
25 name = SECUREBOOT_CONFIGURATION,
26 guid = SECUREBOOT_CONFIG_FORM_SET_GUID;
29 // ##1 Form "Secure Boot Configuration"
31 form formid = SECUREBOOT_CONFIGURATION_FORM_ID,
32 title = STRING_TOKEN(STR_SECUREBOOT_TITLE);
34 subtitle text = STRING_TOKEN(STR_NULL);
37 // Display current secure boot mode(one of SetupMode/AuditMode/UserMode/DeployedMode)
40 help = STRING_TOKEN(STR_CUR_SECURE_BOOT_MODE_HELP),
41 text = STRING_TOKEN(STR_CUR_SECURE_BOOT_MODE_PROMPT),
42 text = STRING_TOKEN(STR_CUR_SECURE_BOOT_MODE_CONTENT);
45 help = STRING_TOKEN(STR_SECURE_BOOT_STATE_HELP),
46 text = STRING_TOKEN(STR_SECURE_BOOT_STATE_PROMPT),
47 text = STRING_TOKEN(STR_SECURE_BOOT_STATE_CONTENT);
50 // Display of Check Box: Attempt Secure Boot
52 grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;
53 checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,
54 questionid = KEY_SECURE_BOOT_ENABLE,
55 prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),
56 help = STRING_TOKEN(STR_SECURE_BOOT_HELP),
57 flags = INTERACTIVE | RESET_REQUIRED,
62 // Display of Oneof: 'Secure Boot Mode'
64 oneof name = SecureBootMode,
65 questionid = KEY_SECURE_BOOT_MODE,
66 prompt = STRING_TOKEN(STR_SECURE_BOOT_MODE_PROMPT),
67 help = STRING_TOKEN(STR_SECURE_BOOT_MODE_HELP),
68 flags = INTERACTIVE | NUMERIC_SIZE_1,
69 option text = STRING_TOKEN(STR_STANDARD_MODE), value = SECURE_BOOT_MODE_STANDARD, flags = DEFAULT;
70 option text = STRING_TOKEN(STR_CUSTOM_MODE), value = SECURE_BOOT_MODE_CUSTOM, flags = 0;
74 // Display PK include page
76 suppressif questionref(SecureBootMode) == SECURE_BOOT_MODE_STANDARD;
77 grayoutif NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;
78 goto FORMID_SECURE_BOOT_OPTION_FORM,
79 prompt = STRING_TOKEN(STR_SECURE_BOOT_OPTION),
80 help = STRING_TOKEN(STR_SECURE_BOOT_OPTION_HELP),
82 key = KEY_SECURE_BOOT_OPTION;
89 // ##2 Form: 'Custom Secure Boot Options'
91 form formid = FORMID_SECURE_BOOT_OPTION_FORM,
92 title = STRING_TOKEN(STR_SECURE_BOOT_OPTION_TITLE);
94 subtitle text = STRING_TOKEN(STR_NULL);
97 // Display of SetupMode/UserMode/AuditMode/DeployedMode transition
99 oneof name = TransSecureBootMode,
100 questionid = KEY_TRANS_SECURE_BOOT_MODE,
101 prompt = STRING_TOKEN(STR_TRANS_SECURE_BOOT_MODE_PROMPT),
102 help = STRING_TOKEN(STR_TRANS_SECURE_BOOT_MODE_HELP),
103 flags = INTERACTIVE | NUMERIC_SIZE_1,
104 suppressif ideqval SECUREBOOT_CONFIGURATION.CurSecureBootMode == SECURE_BOOT_MODE_AUDIT_MODE
105 OR (ideqval SECUREBOOT_CONFIGURATION.CurSecureBootMode == SECURE_BOOT_MODE_DEPLOYED_MODE AND
106 ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 0);
107 option text = STRING_TOKEN(STR_USER_MODE), value = SECURE_BOOT_MODE_USER_MODE, flags = 0;
109 suppressif ideqval SECUREBOOT_CONFIGURATION.CurSecureBootMode == SECURE_BOOT_MODE_AUDIT_MODE;
110 option text = STRING_TOKEN(STR_SETUP_MODE), value = SECURE_BOOT_MODE_SETUP_MODE, flags = 0;
112 suppressif ideqval SECUREBOOT_CONFIGURATION.CurSecureBootMode == SECURE_BOOT_MODE_DEPLOYED_MODE;
113 option text = STRING_TOKEN(STR_AUDIT_MODE), value = SECURE_BOOT_MODE_AUDIT_MODE, flags = 0;
115 suppressif ideqval SECUREBOOT_CONFIGURATION.CurSecureBootMode == SECURE_BOOT_MODE_SETUP_MODE;
116 option text = STRING_TOKEN(STR_DEPLOYED_MODE), value = SECURE_BOOT_MODE_DEPLOYED_MODE, flags = 0;
121 subtitle text = STRING_TOKEN(STR_NULL);
123 goto FORMID_SECURE_BOOT_PK_OPTION_FORM,
124 prompt = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION),
125 help = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION_HELP),
127 key = KEY_SECURE_BOOT_PK_OPTION;
129 subtitle text = STRING_TOKEN(STR_NULL);
131 goto FORMID_SECURE_BOOT_KEK_OPTION_FORM,
132 prompt = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION),
133 help = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION_HELP),
135 key = KEY_SECURE_BOOT_KEK_OPTION;
137 subtitle text = STRING_TOKEN(STR_NULL);
139 goto FORMID_SECURE_BOOT_DB_OPTION_FORM,
140 prompt = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION),
141 help = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION_HELP),
143 key = KEY_SECURE_BOOT_DB_OPTION;
145 subtitle text = STRING_TOKEN(STR_NULL);
147 goto FORMID_SECURE_BOOT_DBX_OPTION_FORM,
148 prompt = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION),
149 help = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION_HELP),
151 key = KEY_SECURE_BOOT_DBX_OPTION;
153 subtitle text = STRING_TOKEN(STR_NULL);
155 goto FORMID_SECURE_BOOT_DBT_OPTION_FORM,
156 prompt = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION),
157 help = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION_HELP),
159 key = KEY_SECURE_BOOT_DBT_OPTION;
164 // ##3 Form: 'PK Options'
166 form formid = FORMID_SECURE_BOOT_PK_OPTION_FORM,
167 title = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION);
169 subtitle text = STRING_TOKEN(STR_NULL);
172 // Display of 'Enroll PK'
174 grayoutif ideqval SECUREBOOT_CONFIGURATION.HasPk == 1;
175 goto FORMID_ENROLL_PK_FORM,
176 prompt = STRING_TOKEN(STR_ENROLL_PK),
177 help = STRING_TOKEN(STR_ENROLL_PK_HELP),
182 subtitle text = STRING_TOKEN(STR_NULL);
185 // Display of Check Box: 'Delete Pk'
187 grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;
188 checkbox varid = SECUREBOOT_CONFIGURATION.DeletePk,
189 questionid = KEY_SECURE_BOOT_DELETE_PK,
190 prompt = STRING_TOKEN(STR_DELETE_PK),
191 help = STRING_TOKEN(STR_DELETE_PK_HELP),
192 flags = INTERACTIVE | RESET_REQUIRED,
198 // ##4 Form: 'Enroll PK'
200 form formid = FORMID_ENROLL_PK_FORM,
201 title = STRING_TOKEN(STR_ENROLL_PK);
203 subtitle text = STRING_TOKEN(STR_NULL);
205 goto FORM_FILE_EXPLORER_ID_PK,
206 prompt = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),
207 help = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),
209 key = SECUREBOOT_ADD_PK_FILE_FORM_ID;
213 // ##5 Form: 'KEK Options'
215 form formid = FORMID_SECURE_BOOT_KEK_OPTION_FORM,
216 title = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION);
219 // Display of 'Enroll KEK'
221 goto FORMID_ENROLL_KEK_FORM,
222 prompt = STRING_TOKEN(STR_ENROLL_KEK),
223 help = STRING_TOKEN(STR_ENROLL_KEK_HELP),
226 subtitle text = STRING_TOKEN(STR_NULL);
229 // Display of 'Delete KEK'
231 goto FORMID_DELETE_KEK_FORM,
232 prompt = STRING_TOKEN(STR_DELETE_KEK),
233 help = STRING_TOKEN(STR_DELETE_KEK_HELP),
235 key = KEY_DELETE_KEK;
237 subtitle text = STRING_TOKEN(STR_NULL);
241 // ##6 Form: 'Enroll KEK'
243 form formid = FORMID_ENROLL_KEK_FORM,
244 title = STRING_TOKEN(STR_ENROLL_KEK_TITLE);
246 subtitle text = STRING_TOKEN(STR_NULL);
248 goto FORM_FILE_EXPLORER_ID_KEK,
249 prompt = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE),
250 help = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE_HELP),
252 key = FORMID_ENROLL_KEK_FORM;
254 subtitle text = STRING_TOKEN(STR_NULL);
255 label FORMID_ENROLL_KEK_FORM;
257 subtitle text = STRING_TOKEN(STR_NULL);
259 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
260 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
261 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
263 key = KEY_SECURE_BOOT_KEK_GUID,
264 minsize = SECURE_BOOT_GUID_SIZE,
265 maxsize = SECURE_BOOT_GUID_SIZE,
268 subtitle text = STRING_TOKEN(STR_NULL);
269 subtitle text = STRING_TOKEN(STR_NULL);
271 goto FORMID_SECURE_BOOT_OPTION_FORM,
272 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
273 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
275 key = KEY_VALUE_SAVE_AND_EXIT_KEK;
277 goto FORMID_SECURE_BOOT_OPTION_FORM,
278 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
279 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
281 key = KEY_VALUE_NO_SAVE_AND_EXIT_KEK;
286 // ##7 Form: 'Delete KEK'
288 form formid = FORMID_DELETE_KEK_FORM,
289 title = STRING_TOKEN(STR_DELETE_KEK_TITLE);
291 label LABEL_KEK_DELETE;
294 subtitle text = STRING_TOKEN(STR_NULL);
299 // ##8 Form: 'DB Options'
301 form formid = FORMID_SECURE_BOOT_DB_OPTION_FORM,
302 title = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION);
304 subtitle text = STRING_TOKEN(STR_NULL);
306 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,
307 prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
308 help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
311 subtitle text = STRING_TOKEN(STR_NULL);
313 goto SECUREBOOT_DELETE_SIGNATURE_FROM_DB,
314 prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
315 help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
317 key = SECUREBOOT_DELETE_SIGNATURE_FROM_DB;
322 // ##9 Form: 'DBX Options'
324 form formid = FORMID_SECURE_BOOT_DBX_OPTION_FORM,
325 title = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION);
327 subtitle text = STRING_TOKEN(STR_NULL);
329 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,
330 prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
331 help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
334 subtitle text = STRING_TOKEN(STR_NULL);
336 goto SECUREBOOT_DELETE_SIGNATURE_FROM_DBX,
337 prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
338 help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
340 key = SECUREBOOT_DELETE_SIGNATURE_FROM_DBX;
345 // ##9 Form: 'DBT Options'
347 form formid = FORMID_SECURE_BOOT_DBT_OPTION_FORM,
348 title = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION);
350 subtitle text = STRING_TOKEN(STR_NULL);
352 goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,
353 prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
354 help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),
357 subtitle text = STRING_TOKEN(STR_NULL);
359 goto SECUREBOOT_DELETE_SIGNATURE_FROM_DBT,
360 prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
361 help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),
363 key = SECUREBOOT_DELETE_SIGNATURE_FROM_DBT;
368 // Form: 'Delete Signature' for DB Options.
370 form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DB,
371 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);
373 label LABEL_DB_DELETE;
375 subtitle text = STRING_TOKEN(STR_NULL);
380 // Form: 'Delete Signature' for DBX Options.
382 form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DBX,
383 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);
385 label LABEL_DBX_DELETE;
387 subtitle text = STRING_TOKEN(STR_NULL);
392 // Form: 'Delete Signature' for DBT Options.
394 form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DBT,
395 title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);
397 label LABEL_DBT_DELETE;
399 subtitle text = STRING_TOKEN(STR_NULL);
404 // Form: 'Enroll Signature' for DB options.
406 form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DB,
407 title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);
409 subtitle text = STRING_TOKEN(STR_NULL);
411 goto FORM_FILE_EXPLORER_ID_DB,
412 prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
413 help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
415 key = SECUREBOOT_ENROLL_SIGNATURE_TO_DB;
417 subtitle text = STRING_TOKEN(STR_NULL);
418 label SECUREBOOT_ENROLL_SIGNATURE_TO_DB;
420 subtitle text = STRING_TOKEN(STR_NULL);
422 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
423 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
424 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
426 key = KEY_SECURE_BOOT_SIGNATURE_GUID_DB,
427 minsize = SECURE_BOOT_GUID_SIZE,
428 maxsize = SECURE_BOOT_GUID_SIZE,
431 subtitle text = STRING_TOKEN(STR_NULL);
432 subtitle text = STRING_TOKEN(STR_NULL);
434 goto FORMID_SECURE_BOOT_OPTION_FORM,
435 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
436 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
438 key = KEY_VALUE_SAVE_AND_EXIT_DB;
440 goto FORMID_SECURE_BOOT_OPTION_FORM,
441 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
442 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
444 key = KEY_VALUE_NO_SAVE_AND_EXIT_DB;
449 // Form: 'Enroll Signature' for DBX options.
451 form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,
452 title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);
454 subtitle text = STRING_TOKEN(STR_NULL);
456 goto FORM_FILE_EXPLORER_ID_DBX,
457 prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
458 help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
460 key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;
462 label SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;
464 subtitle text = STRING_TOKEN(STR_NULL);
466 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
467 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
468 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
470 key = KEY_SECURE_BOOT_SIGNATURE_GUID_DBX,
471 minsize = SECURE_BOOT_GUID_SIZE,
472 maxsize = SECURE_BOOT_GUID_SIZE,
475 oneof name = SignatureFormatInDbx,
476 varid = SECUREBOOT_CONFIGURATION.CertificateFormat,
477 prompt = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT),
478 help = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_HELP),
479 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA256), value = 0x2, flags = DEFAULT;
480 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA384), value = 0x3, flags = 0;
481 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA512), value = 0x4, flags = 0;
482 option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_RAW), value = 0x5, flags = 0;
485 suppressif ideqval SECUREBOOT_CONFIGURATION.CertificateFormat == 5;
486 checkbox varid = SECUREBOOT_CONFIGURATION.AlwaysRevocation,
487 prompt = STRING_TOKEN(STR_ALWAYS_CERTIFICATE_REVOCATION_PROMPT),
488 help = STRING_TOKEN(STR_ALWAYS_CERTIFICATE_REVOCATION_HELP),
492 suppressif ideqval SECUREBOOT_CONFIGURATION.AlwaysRevocation == 1;
493 date varid = SECUREBOOT_CONFIGURATION.RevocationDate,
494 prompt = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_DATE_PROMPT),
495 help = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_DATE_HELP),
496 flags = STORAGE_NORMAL,
499 time varid = SECUREBOOT_CONFIGURATION.RevocationTime,
500 prompt = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_TIME_PROMPT),
501 help = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_TIME_HELP),
502 flags = STORAGE_NORMAL,
507 subtitle text = STRING_TOKEN(STR_NULL);
508 subtitle text = STRING_TOKEN(STR_NULL);
510 goto FORMID_SECURE_BOOT_OPTION_FORM,
511 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
512 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
514 key = KEY_VALUE_SAVE_AND_EXIT_DBX;
516 goto FORMID_SECURE_BOOT_OPTION_FORM,
517 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
518 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
520 key = KEY_VALUE_NO_SAVE_AND_EXIT_DBX;
525 // Form: 'Enroll Signature' for DBT options.
527 form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,
528 title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);
530 subtitle text = STRING_TOKEN(STR_NULL);
532 goto FORM_FILE_EXPLORER_ID_DBT,
533 prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
534 help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),
536 key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBT;
538 subtitle text = STRING_TOKEN(STR_NULL);
539 label SECUREBOOT_ENROLL_SIGNATURE_TO_DBT;
541 subtitle text = STRING_TOKEN(STR_NULL);
543 string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,
544 prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),
545 help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),
547 key = KEY_SECURE_BOOT_SIGNATURE_GUID_DBT,
548 minsize = SECURE_BOOT_GUID_SIZE,
549 maxsize = SECURE_BOOT_GUID_SIZE,
552 subtitle text = STRING_TOKEN(STR_NULL);
553 subtitle text = STRING_TOKEN(STR_NULL);
555 goto FORMID_SECURE_BOOT_OPTION_FORM,
556 prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),
557 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
559 key = KEY_VALUE_SAVE_AND_EXIT_DBT;
561 goto FORMID_SECURE_BOOT_OPTION_FORM,
562 prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
563 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
565 key = KEY_VALUE_NO_SAVE_AND_EXIT_DBT;
570 // File Explorer for PK
572 form formid = FORM_FILE_EXPLORER_ID_PK,
573 title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);
575 label FORM_FILE_EXPLORER_ID;
580 // File Explorer for KEK
582 form formid = FORM_FILE_EXPLORER_ID_KEK,
583 title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);
585 label FORM_FILE_EXPLORER_ID;
590 // File Explorer for DB
592 form formid = FORM_FILE_EXPLORER_ID_DB,
593 title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);
595 label FORM_FILE_EXPLORER_ID;
600 // File Explorer for DBX
602 form formid = FORM_FILE_EXPLORER_ID_DBX,
603 title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);
605 label FORM_FILE_EXPLORER_ID;
610 // File Explorer for DBT
612 form formid = FORM_FILE_EXPLORER_ID_DBT,
613 title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);
615 label FORM_FILE_EXPLORER_ID;
620 // Enroll Pk from File Commit Form
622 form formid = SECUREBOOT_ADD_PK_FILE_FORM_ID,
623 title = STRING_TOKEN(STR_SAVE_PK_FILE);
625 label SECUREBOOT_ADD_PK_FILE_FORM_ID;
628 subtitle text = STRING_TOKEN(STR_NULL);
631 help = STRING_TOKEN(STR_SAVE_AND_EXIT),
632 text = STRING_TOKEN(STR_SAVE_AND_EXIT),
633 text = STRING_TOKEN(STR_NULL),
635 key = KEY_VALUE_SAVE_AND_EXIT_PK;
638 help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
639 text = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),
640 text = STRING_TOKEN(STR_NULL),
642 key = KEY_VALUE_NO_SAVE_AND_EXIT_PK;