[mirror_edk2.git] / SecurityPkg / VariableAuthenticated / SecureBootConfigDxe / SecureBootConfig.vfr

/** @file\r
  VFR file used by the SecureBoot configuration component.\r
\r
Copyright (c) 2011 - 2017, Intel Corporation. All rights reserved.<BR>\r
This program and the accompanying materials\r
are licensed and made available under the terms and conditions of the BSD License\r
which accompanies this distribution.  The full text of the license may be found at\r
http://opensource.org/licenses/bsd-license.php\r
\r
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,\r
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
\r
**/\r
\r
#include "SecureBootConfigNvData.h"\r
\r
formset\r
  guid      = SECUREBOOT_CONFIG_FORM_SET_GUID,\r
  title     = STRING_TOKEN(STR_SECUREBOOT_TITLE),\r
  help      = STRING_TOKEN(STR_SECUREBOOT_HELP),\r
  classguid = EFI_HII_PLATFORM_SETUP_FORMSET_GUID,\r
\r
  varstore SECUREBOOT_CONFIGURATION,\r
    varid = SECUREBOOT_CONFIGURATION_VARSTORE_ID,\r
    name  = SECUREBOOT_CONFIGURATION,\r
    guid  = SECUREBOOT_CONFIG_FORM_SET_GUID;\r
\r
  //\r
  // ##1 Form "Secure Boot Configuration"\r
  //\r
  form formid = SECUREBOOT_CONFIGURATION_FORM_ID,\r
    title = STRING_TOKEN(STR_SECUREBOOT_TITLE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    text\r
      help   = STRING_TOKEN(STR_SECURE_BOOT_STATE_HELP),\r
      text   = STRING_TOKEN(STR_SECURE_BOOT_STATE_PROMPT),\r
        text   = STRING_TOKEN(STR_SECURE_BOOT_STATE_CONTENT);\r
\r
    //\r
    // Display of Check Box: Attempt Secure Boot\r
    //\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1 OR NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;\r
    checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,\r
          questionid = KEY_SECURE_BOOT_ENABLE,\r
          prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),\r
          help   = STRING_TOKEN(STR_SECURE_BOOT_HELP),\r
          flags  = INTERACTIVE | RESET_REQUIRED,\r
    endcheckbox;\r
    endif;\r
\r
    //\r
    // Display of Oneof: 'Secure Boot Mode'\r
    //\r
    oneof name = SecureBootMode,\r
          questionid = KEY_SECURE_BOOT_MODE,\r
          prompt = STRING_TOKEN(STR_SECURE_BOOT_MODE_PROMPT),\r
          help   = STRING_TOKEN(STR_SECURE_BOOT_MODE_HELP),\r
          flags  = INTERACTIVE | NUMERIC_SIZE_1,\r
          option text = STRING_TOKEN(STR_STANDARD_MODE),    value = SECURE_BOOT_MODE_STANDARD, flags = DEFAULT;\r
          option text = STRING_TOKEN(STR_CUSTOM_MODE),      value = SECURE_BOOT_MODE_CUSTOM,   flags = 0;\r
    endoneof;\r
\r
    //\r
    // Display of 'Current Secure Boot Mode'\r
    //\r
    suppressif questionref(SecureBootMode) == SECURE_BOOT_MODE_STANDARD;\r
    grayoutif NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_OPTION;\r
    endif;\r
    endif;\r
\r
  endform;\r
\r
  //\r
  // ##2 Form: 'Custom Secure Boot Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_OPTION_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_OPTION_TITLE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_PK_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_PK_OPTION;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_KEK_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_KEK_OPTION;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_DB_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_DB_OPTION;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_DBX_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_DBX_OPTION;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_DBT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_DBT_OPTION;\r
\r
  endform;\r
\r
  //\r
  // ##3 Form: 'PK Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_PK_OPTION_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    //\r
    // Display of 'Enroll PK'\r
    //\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.HasPk == 1;\r
    goto FORMID_ENROLL_PK_FORM,\r
         prompt = STRING_TOKEN(STR_ENROLL_PK),\r
         help   = STRING_TOKEN(STR_ENROLL_PK_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_ENROLL_PK;\r
    endif;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    //\r
    // Display of Check Box: 'Delete Pk'\r
    //\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;\r
    checkbox varid = SECUREBOOT_CONFIGURATION.DeletePk,\r
          questionid = KEY_SECURE_BOOT_DELETE_PK,\r
          prompt = STRING_TOKEN(STR_DELETE_PK),\r
          help   = STRING_TOKEN(STR_DELETE_PK_HELP),\r
          flags  = INTERACTIVE | RESET_REQUIRED,\r
    endcheckbox;\r
    endif;\r
  endform;\r
\r
  //\r
  // ##4 Form: 'Enroll PK'\r
  //\r
  form formid = FORMID_ENROLL_PK_FORM,\r
    title  = STRING_TOKEN(STR_ENROLL_PK);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_ENROLL_PK_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),\r
         flags = INTERACTIVE,\r
         key = FORMID_ENROLL_PK_FORM;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label FORMID_ENROLL_PK_FORM;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
      prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
      help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
      flags  = INTERACTIVE| RESET_REQUIRED,\r
      key    = KEY_VALUE_SAVE_AND_EXIT_PK;\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
      prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
      help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
      flags  = INTERACTIVE,\r
      key    = KEY_VALUE_NO_SAVE_AND_EXIT_PK;\r
\r
  endform;\r
\r
  //\r
  // ##5 Form: 'KEK Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_KEK_OPTION_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION);\r
\r
    //\r
    // Display of 'Enroll KEK'\r
    //\r
    goto FORMID_ENROLL_KEK_FORM,\r
         prompt = STRING_TOKEN(STR_ENROLL_KEK),\r
         help   = STRING_TOKEN(STR_ENROLL_KEK_HELP),\r
         flags  = INTERACTIVE;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    //\r
    // Display of 'Delete KEK'\r
    //\r
    goto FORMID_DELETE_KEK_FORM,\r
         prompt = STRING_TOKEN(STR_DELETE_KEK),\r
         help   = STRING_TOKEN(STR_DELETE_KEK_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_DELETE_KEK;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
  endform;\r
\r
  //\r
  // ##6 Form: 'Enroll KEK'\r
  //\r
  form formid = FORMID_ENROLL_KEK_FORM,\r
    title = STRING_TOKEN(STR_ENROLL_KEK_TITLE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_ENROLL_KEK_FORM,\r
         prompt = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE),\r
         help   = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE_HELP),\r
         flags  = INTERACTIVE,\r
         key    = FORMID_ENROLL_KEK_FORM;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label FORMID_ENROLL_KEK_FORM;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
            prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
            help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
            flags   = INTERACTIVE,\r
            key     = KEY_SECURE_BOOT_KEK_GUID,\r
            minsize = SECURE_BOOT_GUID_SIZE,\r
            maxsize = SECURE_BOOT_GUID_SIZE,\r
    endstring;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
      prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
      help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
      flags  = INTERACTIVE,\r
      key    = KEY_VALUE_SAVE_AND_EXIT_KEK;\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
      prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
      help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
      flags  = INTERACTIVE,\r
      key    = KEY_VALUE_NO_SAVE_AND_EXIT_KEK;\r
\r
  endform;\r
\r
  //\r
  // ##7 Form: 'Delete KEK'\r
  //\r
  form formid = FORMID_DELETE_KEK_FORM,\r
    title  = STRING_TOKEN(STR_DELETE_KEK_TITLE);\r
\r
    label LABEL_KEK_DELETE;\r
    label LABEL_END;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
  endform;\r
\r
  //\r
  // ##8 Form: 'DB Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_DB_OPTION_FORM,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    flags  = 0;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_DELETE_SIGNATURE_FROM_DB,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    flags  = INTERACTIVE,\r
    key    = SECUREBOOT_DELETE_SIGNATURE_FROM_DB;\r
\r
  endform;\r
\r
  //\r
  // ##9 Form: 'DBX Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_DBX_OPTION_FORM,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    flags  = 0;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    flags  = INTERACTIVE,\r
    key    = KEY_VALUE_FROM_DBX_TO_LIST_FORM;\r
\r
  endform;\r
\r
  //\r
  // ##9 Form: 'DBT Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_DBT_OPTION_FORM,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_DBT_OPTION);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    flags  = 0;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_DELETE_SIGNATURE_FROM_DBT,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    flags  = INTERACTIVE,\r
    key    = SECUREBOOT_DELETE_SIGNATURE_FROM_DBT;\r
\r
  endform;\r
\r
  //\r
  // Form: 'Delete Signature' for DB Options.\r
  //\r
  form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DB,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);\r
\r
    label LABEL_DB_DELETE;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
  endform;\r
\r
  //\r
  // Form: Display Signature List.\r
  //\r
  form formid = SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_DELETE_LIST_FORM);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.ListCount == 0;\r
      label LABEL_DELETE_ALL_LIST_BUTTON;\r
      //\r
      // Will create a goto button dynamically here.\r
      //\r
      label LABEL_END;\r
   endif;\r
\r
   subtitle text = STRING_TOKEN(STR_NULL);\r
   label LABEL_SIGNATURE_LIST_START;\r
   label LABEL_END;\r
   subtitle text = STRING_TOKEN(STR_NULL);\r
\r
  endform;\r
\r
  //\r
  // Form: Display Signature Data.\r
  //\r
  form formid = SECUREBOOT_DELETE_SIGNATURE_DATA_FORM,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_DATA_FORM);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,\r
      prompt = STRING_TOKEN(STR_SECURE_BOOT_DELETE_ALL_DATA),\r
      help   = STRING_TOKEN(STR_SECURE_BOOT_DELETE_ALL_DATA_HELP),\r
      flags  = INTERACTIVE,\r
      key    = KEY_SECURE_BOOT_DELETE_ALL_DATA;\r
\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.CheckedDataCount == 0;\r
      goto SECUREBOOT_DELETE_SIGNATURE_LIST_FORM,\r
        prompt = STRING_TOKEN(STR_SECURE_BOOT_DELETE_CHECK_DATA),\r
        help   = STRING_TOKEN(STR_SECURE_BOOT_DELETE_CHECK_DATA_HELP),\r
        flags  = INTERACTIVE,\r
        key    = KEY_SECURE_BOOT_DELETE_CHECK_DATA;\r
    endif;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label LABEL_SIGNATURE_DATA_START;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
  endform;\r
\r
\r
  //\r
  // Form: 'Delete Signature' for DBT Options.\r
  //\r
  form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DBT,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);\r
\r
    label LABEL_DBT_DELETE;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
  endform;\r
\r
  //\r
  // Form: 'Enroll Signature' for DB options.\r
  //\r
  form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         flags = INTERACTIVE,\r
         key = SECUREBOOT_ENROLL_SIGNATURE_TO_DB;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label SECUREBOOT_ENROLL_SIGNATURE_TO_DB;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
            prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
            help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
            flags   = INTERACTIVE,\r
            key     = KEY_SECURE_BOOT_SIGNATURE_GUID_DB,\r
            minsize = SECURE_BOOT_GUID_SIZE,\r
            maxsize = SECURE_BOOT_GUID_SIZE,\r
    endstring;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_SAVE_AND_EXIT_DB;\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_NO_SAVE_AND_EXIT_DB;\r
\r
  endform;\r
\r
  //\r
  // Form: 'Enroll Signature' for DBX options.\r
  //\r
  form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         flags = INTERACTIVE,\r
         key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;\r
\r
    label SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 3;\r
      string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
              prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
              help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
              flags   = INTERACTIVE,\r
              key     = KEY_SECURE_BOOT_SIGNATURE_GUID_DBX,\r
              minsize = SECURE_BOOT_GUID_SIZE,\r
              maxsize = SECURE_BOOT_GUID_SIZE,\r
      endstring;\r
    endif;\r
\r
    disableif NOT ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 1;\r
      oneof name = X509SignatureFormatInDbx,\r
            varid       = SECUREBOOT_CONFIGURATION.CertificateFormat,\r
            prompt      = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT),\r
            help        = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_HELP),\r
            option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA256), value = 0x1, flags = DEFAULT;\r
            option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA384), value = 0x2, flags = 0;\r
            option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_SHA512), value = 0x3, flags = 0;\r
            option text = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_RAW), value = 0x4, flags = 0;\r
      endoneof;\r
    endif;\r
\r
    disableif NOT ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 2;\r
      text\r
        help   = STRING_TOKEN(STR_DBX_PE_IMAGE_FORMAT_HELP),          // Help string\r
        text   = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT),     // Prompt string\r
        text   = STRING_TOKEN(STR_DBX_PE_FORMAT_SHA256);              // PE image type\r
    endif;\r
\r
    disableif NOT ideqval SECUREBOOT_CONFIGURATION.FileEnrollType == 3;\r
      text\r
        help   = STRING_TOKEN(STR_DBX_AUTH_2_FORMAT_HELP),            // Help string\r
        text   = STRING_TOKEN(STR_DBX_CERTIFICATE_FORMAT_PROMPT),     // Prompt string\r
        text   = STRING_TOKEN(STR_DBX_AUTH_2_FORMAT);                 // AUTH_2 image type\r
    endif;\r
\r
    suppressif ideqval SECUREBOOT_CONFIGURATION.CertificateFormat == 4;\r
        checkbox varid  = SECUREBOOT_CONFIGURATION.AlwaysRevocation,\r
               prompt = STRING_TOKEN(STR_ALWAYS_CERTIFICATE_REVOCATION_PROMPT),\r
               help   = STRING_TOKEN(STR_ALWAYS_CERTIFICATE_REVOCATION_HELP),\r
               flags  = INTERACTIVE,\r
        endcheckbox;\r
\r
        suppressif ideqval SECUREBOOT_CONFIGURATION.AlwaysRevocation == 1;\r
            date  varid  = SECUREBOOT_CONFIGURATION.RevocationDate,\r
                  prompt = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_DATE_PROMPT),\r
                  help   = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_DATE_HELP),\r
                  flags  = STORAGE_NORMAL,\r
            enddate;\r
\r
            time varid   = SECUREBOOT_CONFIGURATION.RevocationTime,\r
                 prompt  = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_TIME_PROMPT),\r
                 help    = STRING_TOKEN(STR_CERTIFICATE_REVOCATION_TIME_HELP),\r
                 flags   = STORAGE_NORMAL,\r
            endtime;\r
        endif;\r
    endif;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_SAVE_AND_EXIT_DBX;\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_NO_SAVE_AND_EXIT_DBX;\r
\r
  endform;\r
\r
  //\r
  // Form: 'Enroll Signature' for DBT options.\r
  //\r
  form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBT,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         flags = INTERACTIVE,\r
         key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBT;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label SECUREBOOT_ENROLL_SIGNATURE_TO_DBT;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
            prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
            help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
            flags   = INTERACTIVE,\r
            key     = KEY_SECURE_BOOT_SIGNATURE_GUID_DBT,\r
            minsize = SECURE_BOOT_GUID_SIZE,\r
            maxsize = SECURE_BOOT_GUID_SIZE,\r
    endstring;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_SAVE_AND_EXIT_DBT;\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_NO_SAVE_AND_EXIT_DBT;\r
\r
  endform;\r
\r
endformset;