+\r
+ ## This PCR means the OEM configurated number of PCR banks.\r
+ # 0 means dynamic get from supported HASH algorithm\r
+ # @Prompt OEM configurated number of PCR banks.\r
+ gEfiSecurityPkgTokenSpaceGuid.PcdTcg2NumberOfPCRBanks|0x0|UINT32|0x00010015\r
+ \r
+ ## Provides one or more SHA 256 Hashes of the RSA 2048 public keys used to verify Recovery and Capsule Update images\r
+ #\r
+ # @Prompt One or more SHA 256 Hashes of RSA 2048 bit public keys used to verify Recovery and Capsule Update images\r
+ #\r
+ gEfiSecurityPkgTokenSpaceGuid.PcdRsa2048Sha256PublicKeyBuffer|{0x91, 0x29, 0xc4, 0xbd, 0xea, 0x6d, 0xda, 0xb3, 0xaa, 0x6f, 0x50, 0x16, 0xfc, 0xdb, 0x4b, 0x7e, 0x3c, 0xd6, 0xdc, 0xa4, 0x7a, 0x0e, 0xdd, 0xe6, 0x15, 0x8c, 0x73, 0x96, 0xa2, 0xd4, 0xa6, 0x4d}|VOID*|0x00010013\r
+\r
+[PcdsDynamic, PcdsDynamicEx]\r
+\r
+ ## This PCD indicates Hash mask for TPM 2.0.<BR><BR>\r
+ # If this bit is set, that means this algorithm is needed to extend to PCR.<BR>\r
+ # If this bit is clear, that means this algorithm is NOT needed to extend to PCR.<BR>\r
+ # BIT0 - SHA1.<BR>\r
+ # BIT1 - SHA256.<BR>\r
+ # BIT2 - SHA384.<BR>\r
+ # BIT3 - SHA512.<BR>\r
+ # @Prompt Hash mask for TPM 2.0\r
+ # @ValidRange 0x80000001 | 0x00000000 - 0x0000000F \r
+ gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask|0x0000000F|UINT32|0x00010010\r
+\r
+ ## This PCD indicated final BIOS supported Hash mask.\r
+ # Bios may choose to register a subset of PcdTpm2HashMask.\r
+ # So this PCD is final value of how many hash algo is extended to PCR.\r
+ # @Prompt Hash Algorithm bitmap.\r
+ gEfiSecurityPkgTokenSpaceGuid.PcdTcg2HashAlgorithmBitmap|0xFFFFFFFF|UINT32|0x00010016\r
+ \r
+[UserExtensions.TianoCore."ExtraFiles"]\r
+ SecurityPkgExtra.uni\r