0c18794e |
1 | /** @file\r |
2 | Provides a secure platform-specific method to clear PK(Platform Key).\r |
3 | \r |
4 | Copyright (c) 2011, Intel Corporation. All rights reserved.<BR>\r |
5 | This program and the accompanying materials \r |
6 | are licensed and made available under the terms and conditions of the BSD License \r |
7 | which accompanies this distribution. The full text of the license may be found at \r |
8 | http://opensource.org/licenses/bsd-license.php\r |
9 | \r |
10 | THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r |
11 | WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r |
12 | \r |
13 | **/\r |
14 | \r |
15 | /**\r |
16 | \r |
17 | This function detects whether a secure platform-specific method to clear PK(Platform Key)\r |
18 | is configured by platform owner. This method is provided for users force to clear PK \r |
19 | in case incorrect enrollment mis-haps.\r |
20 | \r |
21 | UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using \r |
22 | a secure platform-specific method. In this case, the global variable SetupMode \r |
23 | must also be updated to 1.\r |
24 | \r |
25 | NOTE THAT: This function cannot depend on any EFI Variable Service since they are\r |
26 | not available when this function is called in AuthenticateVariable driver.\r |
27 | \r |
28 | @retval TRUE The Platform owner wants to force clear PK.\r |
29 | @retval FALSE The Platform owner doesn't want to force clear PK. \r |
30 | \r |
31 | **/\r |
32 | BOOLEAN\r |
33 | EFIAPI\r |
34 | ForceClearPK (\r |
35 | VOID\r |
36 | )\r |
37 | {\r |
38 | return FALSE;\r |
39 | }\r |