[mirror_edk2.git] / SecurityPkg / Library / SmmTcg2PhysicalPresenceLib / SmmTcg2PhysicalPresenceLib.c

/** @file\r
  Handle TPM 2.0 physical presence requests from OS.\r
  \r
  This library will handle TPM 2.0 physical presence request from OS.\r
\r
  Caution: This module requires additional review when modified.\r
  This driver will have external input - variable.\r
  This external input must be validated carefully to avoid security issue.\r
\r
  Tcg2PhysicalPresenceLibSubmitRequestToPreOSFunction() and Tcg2PhysicalPresenceLibGetUserConfirmationStatusFunction()\r
  will receive untrusted input and do validation.\r
\r
Copyright (c) 2015 - 2016, Intel Corporation. All rights reserved.<BR>\r
This program and the accompanying materials \r
are licensed and made available under the terms and conditions of the BSD License \r
which accompanies this distribution.  The full text of the license may be found at \r
http://opensource.org/licenses/bsd-license.php\r
\r
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
\r
**/\r
\r
#include <PiSmm.h>\r
\r
#include <Guid/Tcg2PhysicalPresenceData.h>\r
\r
#include <Protocol/SmmVariable.h>\r
\r
#include <Library/DebugLib.h>\r
#include <Library/Tcg2PpVendorLib.h>\r
#include <Library/SmmServicesTableLib.h>\r
\r
EFI_SMM_VARIABLE_PROTOCOL  *mTcg2PpSmmVariable;\r
\r
/**\r
  The handler for TPM physical presence function:\r
  Return TPM Operation Response to OS Environment.\r
\r
  This API should be invoked in OS runtime phase to interface with ACPI method.\r
\r
  @param[out]     MostRecentRequest Most recent operation request.\r
  @param[out]     Response          Response to the most recent operation request.\r
\r
  @return Return Code for Return TPM Operation Response to OS Environment.\r
**/\r
UINT32\r
EFIAPI\r
Tcg2PhysicalPresenceLibReturnOperationResponseToOsFunction (\r
  OUT UINT32                *MostRecentRequest,\r
  OUT UINT32                *Response\r
  )\r
{\r
  EFI_STATUS                        Status;\r
  UINTN                             DataSize;\r
  EFI_TCG2_PHYSICAL_PRESENCE        PpData;\r
\r
  DEBUG ((EFI_D_INFO, "[TPM2] ReturnOperationResponseToOsFunction\n"));\r
\r
  //\r
  // Get the Physical Presence variable\r
  //\r
  DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
  Status = mTcg2PpSmmVariable->SmmGetVariable (\r
                                 TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
                                 &gEfiTcg2PhysicalPresenceGuid,\r
                                 NULL,\r
                                 &DataSize,\r
                                 &PpData\r
                                 );\r
  if (EFI_ERROR (Status)) {\r
    *MostRecentRequest = 0;\r
    *Response          = 0;\r
    DEBUG ((EFI_D_ERROR, "[TPM2] Get PP variable failure! Status = %r\n", Status));\r
    return TCG_PP_RETURN_TPM_OPERATION_RESPONSE_FAILURE;\r
  }\r
\r
  *MostRecentRequest = PpData.LastPPRequest;\r
  *Response          = PpData.PPResponse;\r
\r
  return TCG_PP_RETURN_TPM_OPERATION_RESPONSE_SUCCESS;\r
}\r
\r
/**\r
  The handler for TPM physical presence function:\r
  Submit TPM Operation Request to Pre-OS Environment and\r
  Submit TPM Operation Request to Pre-OS Environment 2.\r
\r
  This API should be invoked in OS runtime phase to interface with ACPI method.\r
\r
  Caution: This function may receive untrusted input.\r
  \r
  @param[in]      OperationRequest TPM physical presence operation request.\r
  @param[in]      RequestParameter TPM physical presence operation request parameter.\r
\r
  @return Return Code for Submit TPM Operation Request to Pre-OS Environment and\r
          Submit TPM Operation Request to Pre-OS Environment 2.\r
**/\r
UINT32\r
EFIAPI\r
Tcg2PhysicalPresenceLibSubmitRequestToPreOSFunction (\r
  IN UINT32                 OperationRequest,\r
  IN UINT32                 RequestParameter\r
  )\r
{\r
  EFI_STATUS                        Status;\r
  UINTN                             DataSize;\r
  EFI_TCG2_PHYSICAL_PRESENCE        PpData;\r
  EFI_TCG2_PHYSICAL_PRESENCE_FLAGS  Flags;\r
\r
  DEBUG ((EFI_D_INFO, "[TPM2] SubmitRequestToPreOSFunction, Request = %x, %x\n", OperationRequest, RequestParameter));\r
\r
  //\r
  // Get the Physical Presence variable\r
  //\r
  DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
  Status = mTcg2PpSmmVariable->SmmGetVariable (\r
                                 TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
                                 &gEfiTcg2PhysicalPresenceGuid,\r
                                 NULL,\r
                                 &DataSize,\r
                                 &PpData\r
                                 );\r
  if (EFI_ERROR (Status)) {\r
    DEBUG ((EFI_D_ERROR, "[TPM2] Get PP variable failure! Status = %r\n", Status));\r
    return TCG_PP_SUBMIT_REQUEST_TO_PREOS_GENERAL_FAILURE;\r
  }\r
\r
  if ((OperationRequest > TCG2_PHYSICAL_PRESENCE_NO_ACTION_MAX) &&\r
      (OperationRequest < TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) ) {\r
    //\r
    // This command requires UI to prompt user for Auth data.\r
    //\r
    return TCG_PP_SUBMIT_REQUEST_TO_PREOS_NOT_IMPLEMENTED;\r
  }\r
\r
  if ((PpData.PPRequest != OperationRequest) ||\r
      (PpData.PPRequestParameter != RequestParameter)) {\r
    PpData.PPRequest = (UINT8)OperationRequest;\r
    PpData.PPRequestParameter = RequestParameter;\r
    DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
    Status = mTcg2PpSmmVariable->SmmSetVariable (\r
                                   TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
                                   &gEfiTcg2PhysicalPresenceGuid,\r
                                   EFI_VARIABLE_NON_VOLATILE | EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_RUNTIME_ACCESS,\r
                                   DataSize,\r
                                   &PpData\r
                                   );\r
  }\r
\r
  if (EFI_ERROR (Status)) { \r
    DEBUG ((EFI_D_ERROR, "[TPM2] Set PP variable failure! Status = %r\n", Status));\r
    return TCG_PP_SUBMIT_REQUEST_TO_PREOS_GENERAL_FAILURE;\r
  }\r
\r
  if (OperationRequest >= TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) {\r
    DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE_FLAGS);\r
    Status = mTcg2PpSmmVariable->SmmGetVariable (\r
                                   TCG2_PHYSICAL_PRESENCE_FLAGS_VARIABLE,\r
                                   &gEfiTcg2PhysicalPresenceGuid,\r
                                   NULL,\r
                                   &DataSize,\r
                                   &Flags\r
                                   );\r
    if (EFI_ERROR (Status)) {\r
      Flags.PPFlags = TCG2_BIOS_TPM_MANAGEMENT_FLAG_DEFAULT;\r
    }\r
    return Tcg2PpVendorLibSubmitRequestToPreOSFunction (OperationRequest, Flags.PPFlags, RequestParameter);\r
  }\r
\r
  return TCG_PP_SUBMIT_REQUEST_TO_PREOS_SUCCESS;\r
}\r
\r
/**\r
  The handler for TPM physical presence function:\r
  Get User Confirmation Status for Operation.\r
\r
  This API should be invoked in OS runtime phase to interface with ACPI method.\r
\r
  Caution: This function may receive untrusted input.\r
  \r
  @param[in]      OperationRequest TPM physical presence operation request.\r
\r
  @return Return Code for Get User Confirmation Status for Operation.\r
**/\r
UINT32\r
EFIAPI\r
Tcg2PhysicalPresenceLibGetUserConfirmationStatusFunction (\r
  IN UINT32                 OperationRequest\r
  )\r
{\r
  EFI_STATUS                        Status;\r
  UINTN                             DataSize;\r
  EFI_TCG2_PHYSICAL_PRESENCE        PpData;\r
  EFI_TCG2_PHYSICAL_PRESENCE_FLAGS  Flags;\r
  BOOLEAN                           RequestConfirmed;\r
  \r
  DEBUG ((EFI_D_INFO, "[TPM2] GetUserConfirmationStatusFunction, Request = %x\n", OperationRequest));\r
\r
  //\r
  // Get the Physical Presence variable\r
  //\r
  DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
  Status = mTcg2PpSmmVariable->SmmGetVariable (\r
                                 TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
                                 &gEfiTcg2PhysicalPresenceGuid,\r
                                 NULL,\r
                                 &DataSize,\r
                                 &PpData\r
                                 );\r
  if (EFI_ERROR (Status)) {\r
    DEBUG ((EFI_D_ERROR, "[TPM2] Get PP variable failure! Status = %r\n", Status));\r
    return TCG_PP_GET_USER_CONFIRMATION_BLOCKED_BY_BIOS_CONFIGURATION;\r
  }\r
  //\r
  // Get the Physical Presence flags\r
  //\r
  DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE_FLAGS);\r
  Status = mTcg2PpSmmVariable->SmmGetVariable (\r
                                 TCG2_PHYSICAL_PRESENCE_FLAGS_VARIABLE,\r
                                 &gEfiTcg2PhysicalPresenceGuid,\r
                                 NULL,\r
                                 &DataSize,\r
                                 &Flags\r
                                 );\r
  if (EFI_ERROR (Status)) {\r
    DEBUG ((EFI_D_ERROR, "[TPM2] Get PP flags failure! Status = %r\n", Status));\r
    return TCG_PP_GET_USER_CONFIRMATION_BLOCKED_BY_BIOS_CONFIGURATION;\r
  }\r
\r
  RequestConfirmed = FALSE;\r
\r
  switch (OperationRequest) {\r
    case TCG2_PHYSICAL_PRESENCE_CLEAR:\r
    case TCG2_PHYSICAL_PRESENCE_ENABLE_CLEAR:\r
    case TCG2_PHYSICAL_PRESENCE_ENABLE_CLEAR_2:\r
    case TCG2_PHYSICAL_PRESENCE_ENABLE_CLEAR_3:\r
      if ((Flags.PPFlags & TCG2_BIOS_TPM_MANAGEMENT_FLAG_PP_REQUIRED_FOR_CLEAR) == 0) {\r
        RequestConfirmed = TRUE;\r
      }\r
      break;\r
\r
    case TCG2_PHYSICAL_PRESENCE_SET_PP_REQUIRED_FOR_CLEAR_TRUE:\r
      RequestConfirmed = TRUE;\r
      break;\r
\r
    case TCG2_PHYSICAL_PRESENCE_SET_PP_REQUIRED_FOR_CLEAR_FALSE:\r
      break;\r
\r
    case TCG2_PHYSICAL_PRESENCE_SET_PCR_BANKS:\r
      if ((Flags.PPFlags & TCG2_BIOS_TPM_MANAGEMENT_FLAG_PP_REQUIRED_FOR_CHANGE_PCRS) == 0) {\r
        RequestConfirmed = TRUE;\r
      }\r
      break;\r
\r
    case TCG2_PHYSICAL_PRESENCE_CHANGE_EPS:\r
      if ((Flags.PPFlags & TCG2_BIOS_TPM_MANAGEMENT_FLAG_PP_REQUIRED_FOR_CHANGE_EPS) == 0) {\r
        RequestConfirmed = TRUE;\r
      }\r
      break;\r
      \r
    case TCG2_PHYSICAL_PRESENCE_LOG_ALL_DIGESTS:\r
      RequestConfirmed = TRUE;\r
      break;\r
\r
    default:\r
      if (OperationRequest <= TCG2_PHYSICAL_PRESENCE_NO_ACTION_MAX) {\r
        RequestConfirmed = TRUE;\r
      } else {\r
        if (OperationRequest < TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) {\r
          return TCG_PP_GET_USER_CONFIRMATION_NOT_IMPLEMENTED;\r
        }\r
      }\r
      break;\r
  }\r
\r
  if (OperationRequest >= TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) {\r
    return Tcg2PpVendorLibGetUserConfirmationStatusFunction (OperationRequest, Flags.PPFlags);\r
  }\r
\r
  if (RequestConfirmed) {\r
    return TCG_PP_GET_USER_CONFIRMATION_ALLOWED_AND_PPUSER_NOT_REQUIRED;\r
  } else {\r
    return TCG_PP_GET_USER_CONFIRMATION_ALLOWED_AND_PPUSER_REQUIRED;\r
  }    \r
}\r
\r
/**\r
  The constructor function register UNI strings into imageHandle.\r
  \r
  It will ASSERT() if that operation fails and it will always return EFI_SUCCESS. \r
\r
  @param  ImageHandle   The firmware allocated handle for the EFI image.\r
  @param  SystemTable   A pointer to the EFI System Table.\r
  \r
  @retval EFI_SUCCESS   The constructor successfully added string package.\r
  @retval Other value   The constructor can't add string package.\r
**/\r
EFI_STATUS\r
EFIAPI\r
Tcg2PhysicalPresenceLibConstructor (\r
  IN EFI_HANDLE        ImageHandle,\r
  IN EFI_SYSTEM_TABLE  *SystemTable\r
  )\r
{\r
  EFI_STATUS  Status;\r
\r
  //\r
  // Locate SmmVariableProtocol.\r
  //\r
  Status = gSmst->SmmLocateProtocol (&gEfiSmmVariableProtocolGuid, NULL, (VOID**)&mTcg2PpSmmVariable);\r
  ASSERT_EFI_ERROR (Status);\r
\r
  return EFI_SUCCESS;\r
}\r
Commit	Line	Data
1abfa4ce JY	1	/** @file\r
	2	Handle TPM 2.0 physical presence requests from OS.\r
	3	\r
	4	This library will handle TPM 2.0 physical presence request from OS.\r
	5	\r
	6	Caution: This module requires additional review when modified.\r
	7	This driver will have external input - variable.\r
	8	This external input must be validated carefully to avoid security issue.\r
	9	\r
	10	Tcg2PhysicalPresenceLibSubmitRequestToPreOSFunction() and Tcg2PhysicalPresenceLibGetUserConfirmationStatusFunction()\r
	11	will receive untrusted input and do validation.\r
	12	\r
6d7c4a25	13	Copyright (c) 2015 - 2016, Intel Corporation. All rights reserved.<BR>\r
1abfa4ce JY	14	This program and the accompanying materials \r
	15	are licensed and made available under the terms and conditions of the BSD License \r
	16	which accompanies this distribution. The full text of the license may be found at \r
	17	http://opensource.org/licenses/bsd-license.php\r
	18	\r
	19	THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r
	20	WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
	21	\r
	22	**/\r
	23	\r
	24	#include <PiSmm.h>\r
	25	\r
	26	#include <Guid/Tcg2PhysicalPresenceData.h>\r
	27	\r
	28	#include <Protocol/SmmVariable.h>\r
	29	\r
	30	#include <Library/DebugLib.h>\r
	31	#include <Library/Tcg2PpVendorLib.h>\r
	32	#include <Library/SmmServicesTableLib.h>\r
	33	\r
	34	EFI_SMM_VARIABLE_PROTOCOL *mTcg2PpSmmVariable;\r
	35	\r
	36	/**\r
	37	The handler for TPM physical presence function:\r
	38	Return TPM Operation Response to OS Environment.\r
	39	\r
	40	This API should be invoked in OS runtime phase to interface with ACPI method.\r
	41	\r
	42	@param[out] MostRecentRequest Most recent operation request.\r
	43	@param[out] Response Response to the most recent operation request.\r
	44	\r
	45	@return Return Code for Return TPM Operation Response to OS Environment.\r
	46	**/\r
	47	UINT32\r
	48	EFIAPI\r
	49	Tcg2PhysicalPresenceLibReturnOperationResponseToOsFunction (\r
	50	OUT UINT32 *MostRecentRequest,\r
	51	OUT UINT32 *Response\r
	52	)\r
	53	{\r
	54	EFI_STATUS Status;\r
	55	UINTN DataSize;\r
	56	EFI_TCG2_PHYSICAL_PRESENCE PpData;\r
	57	\r
	58	DEBUG ((EFI_D_INFO, "[TPM2] ReturnOperationResponseToOsFunction\n"));\r
	59	\r
	60	//\r
	61	// Get the Physical Presence variable\r
	62	//\r
	63	DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
	64	Status = mTcg2PpSmmVariable->SmmGetVariable (\r
	65	TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
	66	&gEfiTcg2PhysicalPresenceGuid,\r
	67	NULL,\r
	68	&DataSize,\r
	69	&PpData\r
	70	);\r
	71	if (EFI_ERROR (Status)) {\r
	72	*MostRecentRequest = 0;\r
	73	*Response = 0;\r
	74	DEBUG ((EFI_D_ERROR, "[TPM2] Get PP variable failure! Status = %r\n", Status));\r
	75	return TCG_PP_RETURN_TPM_OPERATION_RESPONSE_FAILURE;\r
	76	}\r
	77	\r
78	*MostRecentRequest = PpData.LastPPRequest;\r
79	*Response = PpData.PPResponse;\r
80	\r
81	return TCG_PP_RETURN_TPM_OPERATION_RESPONSE_SUCCESS;\r
82	}\r
83	\r
84	/**\r
85	The handler for TPM physical presence function:\r
86	Submit TPM Operation Request to Pre-OS Environment and\r
87	Submit TPM Operation Request to Pre-OS Environment 2.\r
88	\r
89	This API should be invoked in OS runtime phase to interface with ACPI method.\r
90	\r
91	Caution: This function may receive untrusted input.\r
92	\r
93	@param[in] OperationRequest TPM physical presence operation request.\r
94	@param[in] RequestParameter TPM physical presence operation request parameter.\r
95	\r
96	@return Return Code for Submit TPM Operation Request to Pre-OS Environment and\r
97	Submit TPM Operation Request to Pre-OS Environment 2.\r
98	**/\r
99	UINT32\r
100	EFIAPI\r
101	Tcg2PhysicalPresenceLibSubmitRequestToPreOSFunction (\r
102	IN UINT32 OperationRequest,\r
103	IN UINT32 RequestParameter\r
104	)\r
105	{\r
106	EFI_STATUS Status;\r
107	UINTN DataSize;\r
108	EFI_TCG2_PHYSICAL_PRESENCE PpData;\r
109	EFI_TCG2_PHYSICAL_PRESENCE_FLAGS Flags;\r
110	\r
111	DEBUG ((EFI_D_INFO, "[TPM2] SubmitRequestToPreOSFunction, Request = %x, %x\n", OperationRequest, RequestParameter));\r
112	\r
113	//\r
114	// Get the Physical Presence variable\r
115	//\r
116	DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
117	Status = mTcg2PpSmmVariable->SmmGetVariable (\r
118	TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
119	&gEfiTcg2PhysicalPresenceGuid,\r
120	NULL,\r
121	&DataSize,\r
122	&PpData\r
123	);\r
124	if (EFI_ERROR (Status)) {\r
125	DEBUG ((EFI_D_ERROR, "[TPM2] Get PP variable failure! Status = %r\n", Status));\r
126	return TCG_PP_SUBMIT_REQUEST_TO_PREOS_GENERAL_FAILURE;\r
127	}\r
128	\r
129	if ((OperationRequest > TCG2_PHYSICAL_PRESENCE_NO_ACTION_MAX) &&\r
130	(OperationRequest < TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) ) {\r
131	//\r
132	// This command requires UI to prompt user for Auth data.\r
133	//\r
134	return TCG_PP_SUBMIT_REQUEST_TO_PREOS_NOT_IMPLEMENTED;\r
135	}\r
136	\r
6d7c4a25 JY	137	if ((PpData.PPRequest != OperationRequest) \|\|\r
6d7c4a25 JY	138	(PpData.PPRequestParameter != RequestParameter)) {\r
1abfa4ce JY	139	PpData.PPRequest = (UINT8)OperationRequest;\r
	140	PpData.PPRequestParameter = RequestParameter;\r
	141	DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
	142	Status = mTcg2PpSmmVariable->SmmSetVariable (\r
	143	TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
	144	&gEfiTcg2PhysicalPresenceGuid,\r
	145	EFI_VARIABLE_NON_VOLATILE \| EFI_VARIABLE_BOOTSERVICE_ACCESS \| EFI_VARIABLE_RUNTIME_ACCESS,\r
	146	DataSize,\r
	147	&PpData\r
	148	);\r
	149	}\r
	150	\r
	151	if (EFI_ERROR (Status)) { \r
	152	DEBUG ((EFI_D_ERROR, "[TPM2] Set PP variable failure! Status = %r\n", Status));\r
	153	return TCG_PP_SUBMIT_REQUEST_TO_PREOS_GENERAL_FAILURE;\r
	154	}\r
	155	\r
	156	if (OperationRequest >= TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) {\r
	157	DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE_FLAGS);\r
	158	Status = mTcg2PpSmmVariable->SmmGetVariable (\r
	159	TCG2_PHYSICAL_PRESENCE_FLAGS_VARIABLE,\r
	160	&gEfiTcg2PhysicalPresenceGuid,\r
	161	NULL,\r
	162	&DataSize,\r
	163	&Flags\r
	164	);\r
	165	if (EFI_ERROR (Status)) {\r
	166	Flags.PPFlags = TCG2_BIOS_TPM_MANAGEMENT_FLAG_DEFAULT;\r
	167	}\r
	168	return Tcg2PpVendorLibSubmitRequestToPreOSFunction (OperationRequest, Flags.PPFlags, RequestParameter);\r
	169	}\r
	170	\r
	171	return TCG_PP_SUBMIT_REQUEST_TO_PREOS_SUCCESS;\r
	172	}\r
	173	\r
	174	/**\r
	175	The handler for TPM physical presence function:\r
	176	Get User Confirmation Status for Operation.\r
	177	\r
	178	This API should be invoked in OS runtime phase to interface with ACPI method.\r
	179	\r
	180	Caution: This function may receive untrusted input.\r
	181	\r
	182	@param[in] OperationRequest TPM physical presence operation request.\r
	183	\r
	184	@return Return Code for Get User Confirmation Status for Operation.\r
	185	**/\r
	186	UINT32\r
	187	EFIAPI\r
	188	Tcg2PhysicalPresenceLibGetUserConfirmationStatusFunction (\r
	189	IN UINT32 OperationRequest\r
	190	)\r
	191	{\r
	192	EFI_STATUS Status;\r
	193	UINTN DataSize;\r
	194	EFI_TCG2_PHYSICAL_PRESENCE PpData;\r
	195	EFI_TCG2_PHYSICAL_PRESENCE_FLAGS Flags;\r
	196	BOOLEAN RequestConfirmed;\r
	197	\r
	198	DEBUG ((EFI_D_INFO, "[TPM2] GetUserConfirmationStatusFunction, Request = %x\n", OperationRequest));\r
	199	\r
	200	//\r
	201	// Get the Physical Presence variable\r
	202	//\r
203	DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE);\r
204	Status = mTcg2PpSmmVariable->SmmGetVariable (\r
205	TCG2_PHYSICAL_PRESENCE_VARIABLE,\r
206	&gEfiTcg2PhysicalPresenceGuid,\r
207	NULL,\r
208	&DataSize,\r
209	&PpData\r
210	);\r
211	if (EFI_ERROR (Status)) {\r
212	DEBUG ((EFI_D_ERROR, "[TPM2] Get PP variable failure! Status = %r\n", Status));\r
213	return TCG_PP_GET_USER_CONFIRMATION_BLOCKED_BY_BIOS_CONFIGURATION;\r
214	}\r
215	//\r
216	// Get the Physical Presence flags\r
217	//\r
218	DataSize = sizeof (EFI_TCG2_PHYSICAL_PRESENCE_FLAGS);\r
219	Status = mTcg2PpSmmVariable->SmmGetVariable (\r
220	TCG2_PHYSICAL_PRESENCE_FLAGS_VARIABLE,\r
221	&gEfiTcg2PhysicalPresenceGuid,\r
222	NULL,\r
223	&DataSize,\r
224	&Flags\r
225	);\r
226	if (EFI_ERROR (Status)) {\r
227	DEBUG ((EFI_D_ERROR, "[TPM2] Get PP flags failure! Status = %r\n", Status));\r
228	return TCG_PP_GET_USER_CONFIRMATION_BLOCKED_BY_BIOS_CONFIGURATION;\r
229	}\r
230	\r
231	RequestConfirmed = FALSE;\r
232	\r
233	switch (OperationRequest) {\r
234	case TCG2_PHYSICAL_PRESENCE_CLEAR:\r
235	case TCG2_PHYSICAL_PRESENCE_ENABLE_CLEAR:\r
236	case TCG2_PHYSICAL_PRESENCE_ENABLE_CLEAR_2:\r
237	case TCG2_PHYSICAL_PRESENCE_ENABLE_CLEAR_3:\r
238	if ((Flags.PPFlags & TCG2_BIOS_TPM_MANAGEMENT_FLAG_PP_REQUIRED_FOR_CLEAR) == 0) {\r
239	RequestConfirmed = TRUE;\r
240	}\r
241	break;\r
242	\r
243	case TCG2_PHYSICAL_PRESENCE_SET_PP_REQUIRED_FOR_CLEAR_TRUE:\r
244	RequestConfirmed = TRUE;\r
245	break;\r
246	\r
247	case TCG2_PHYSICAL_PRESENCE_SET_PP_REQUIRED_FOR_CLEAR_FALSE:\r
248	break;\r
249	\r
250	case TCG2_PHYSICAL_PRESENCE_SET_PCR_BANKS:\r
251	if ((Flags.PPFlags & TCG2_BIOS_TPM_MANAGEMENT_FLAG_PP_REQUIRED_FOR_CHANGE_PCRS) == 0) {\r
252	RequestConfirmed = TRUE;\r
253	}\r
254	break;\r
255	\r
256	case TCG2_PHYSICAL_PRESENCE_CHANGE_EPS:\r
257	if ((Flags.PPFlags & TCG2_BIOS_TPM_MANAGEMENT_FLAG_PP_REQUIRED_FOR_CHANGE_EPS) == 0) {\r
258	RequestConfirmed = TRUE;\r
259	}\r
260	break;\r
261	\r
262	case TCG2_PHYSICAL_PRESENCE_LOG_ALL_DIGESTS:\r
263	RequestConfirmed = TRUE;\r
264	break;\r
265	\r
266	default:\r
267	if (OperationRequest <= TCG2_PHYSICAL_PRESENCE_NO_ACTION_MAX) {\r
268	RequestConfirmed = TRUE;\r
269	} else {\r
270	if (OperationRequest < TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) {\r
271	return TCG_PP_GET_USER_CONFIRMATION_NOT_IMPLEMENTED;\r
272	}\r
273	}\r
274	break;\r
275	}\r
276	\r
277	if (OperationRequest >= TCG2_PHYSICAL_PRESENCE_VENDOR_SPECIFIC_OPERATION) {\r
278	return Tcg2PpVendorLibGetUserConfirmationStatusFunction (OperationRequest, Flags.PPFlags);\r
279	}\r
280	\r
281	if (RequestConfirmed) {\r
282	return TCG_PP_GET_USER_CONFIRMATION_ALLOWED_AND_PPUSER_NOT_REQUIRED;\r
283	} else {\r
284	return TCG_PP_GET_USER_CONFIRMATION_ALLOWED_AND_PPUSER_REQUIRED;\r
285	} \r
286	}\r
287	\r
288	/**\r
289	The constructor function register UNI strings into imageHandle.\r
290	\r
291	It will ASSERT() if that operation fails and it will always return EFI_SUCCESS. \r
292	\r
293	@param ImageHandle The firmware allocated handle for the EFI image.\r
294	@param SystemTable A pointer to the EFI System Table.\r
295	\r
296	@retval EFI_SUCCESS The constructor successfully added string package.\r
297	@retval Other value The constructor can't add string package.\r
298	**/\r
299	EFI_STATUS\r
300	EFIAPI\r
301	Tcg2PhysicalPresenceLibConstructor (\r
302	IN EFI_HANDLE ImageHandle,\r
303	IN EFI_SYSTEM_TABLE *SystemTable\r
304	)\r
305	{\r
306	EFI_STATUS Status;\r
307	\r
308	//\r
309	// Locate SmmVariableProtocol.\r
310	//\r
311	Status = gSmst->SmmLocateProtocol (&gEfiSmmVariableProtocolGuid, NULL, (VOID**)&mTcg2PpSmmVariable);\r
312	ASSERT_EFI_ERROR (Status);\r
313	\r
314	return EFI_SUCCESS;\r
315	}\r