+ #\r
+ # Enable the non-executable DXE stack. (This gets set up by DxeIpl)\r
+ #\r
+ gEfiMdeModulePkgTokenSpaceGuid.PcdSetNxForStack|TRUE\r
+\r
+!if $(SECURE_BOOT_ENABLE) == TRUE\r
+ # override the default values from SecurityPkg to ensure images from all sources are verified in secure boot\r
+ gEfiSecurityPkgTokenSpaceGuid.PcdOptionRomImageVerificationPolicy|0x04\r
+ gEfiSecurityPkgTokenSpaceGuid.PcdFixedMediaImageVerificationPolicy|0x04\r
+ gEfiSecurityPkgTokenSpaceGuid.PcdRemovableMediaImageVerificationPolicy|0x04\r
+!endif\r
+\r
+ gEfiMdePkgTokenSpaceGuid.PcdReportStatusCodePropertyMask|3\r
+\r
+[PcdsFixedAtBuild.AARCH64]\r
+ # Clearing BIT0 in this PCD prevents installing a 32-bit SMBIOS entry point,\r
+ # if the entry point version is >= 3.0. AARCH64 OSes cannot assume the\r
+ # presence of the 32-bit entry point anyway (because many AARCH64 systems\r
+ # don't have 32-bit addressable physical RAM), and the additional allocations\r
+ # below 4 GB needlessly fragment the memory map. So expose the 64-bit entry\r
+ # point only, for entry point versions >= 3.0.\r
+ gEfiMdeModulePkgTokenSpaceGuid.PcdSmbiosEntryPointProvideMethod|0x2\r
+\r
+ # ACPI predates the AARCH64 architecture by 5 versions, so\r
+ # we only target OSes that support ACPI v5.0 or later\r
+ gEfiMdeModulePkgTokenSpaceGuid.PcdAcpiExposedTableVersions|0x20\r
+\r