[mirror_edk2.git] / SecurityPkg / VariableAuthenticated / SecureBootConfigDxe / SecureBootConfig.vfr

/** @file\r
  VFR file used by the SecureBoot configuration component.\r
\r
Copyright (c) 2011 - 2013, Intel Corporation. All rights reserved.<BR>\r
This program and the accompanying materials \r
are licensed and made available under the terms and conditions of the BSD License \r
which accompanies this distribution.  The full text of the license may be found at \r
http://opensource.org/licenses/bsd-license.php\r
\r
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
\r
**/\r
\r
#include "SecureBootConfigNvData.h"\r
\r
formset\r
  guid      = SECUREBOOT_CONFIG_FORM_SET_GUID,\r
  title     = STRING_TOKEN(STR_SECUREBOOT_TITLE),\r
  help      = STRING_TOKEN(STR_SECUREBOOT_HELP),\r
  classguid = EFI_HII_PLATFORM_SETUP_FORMSET_GUID,\r
\r
  varstore SECUREBOOT_CONFIGURATION,\r
    varid = SECUREBOOT_CONFIGURATION_VARSTORE_ID,\r
    name  = SECUREBOOT_CONFIGURATION,\r
    guid  = SECUREBOOT_CONFIG_FORM_SET_GUID;\r
  \r
  //\r
  // ##1 Form "Secure Boot Configuration"\r
  //\r
  form formid = SECUREBOOT_CONFIGURATION_FORM_ID,\r
    title = STRING_TOKEN(STR_SECUREBOOT_TITLE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    text\r
      help   = STRING_TOKEN(STR_SECURE_BOOT_STATE_HELP),\r
      text   = STRING_TOKEN(STR_SECURE_BOOT_STATE_PROMPT),\r
        text   = STRING_TOKEN(STR_SECURE_BOOT_STATE_CONTENT);\r
        \r
    //\r
    // Define of Check Box: Attempt Secure Boot\r
    //\r
    suppressif TRUE;\r
      checkbox varid   = SECUREBOOT_CONFIGURATION.HideSecureBoot,\r
              questionid = KEY_HIDE_SECURE_BOOT,\r
              prompt   = STRING_TOKEN(STR_NULL),\r
              help     = STRING_TOKEN(STR_NULL),\r
              flags    = INTERACTIVE,\r
      endcheckbox;\r
    endif;  \r
    \r
    //\r
    // Display of Check Box: Attempt Secure Boot\r
    //\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;\r
    checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,\r
          questionid = KEY_SECURE_BOOT_ENABLE,\r
          prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),\r
          help   = STRING_TOKEN(STR_SECURE_BOOT_HELP),\r
          flags  = INTERACTIVE | RESET_REQUIRED,\r
    endcheckbox;\r
    endif;\r
    \r
    //\r
    // Display of Oneof: 'Secure Boot Mode'\r
    //\r
    oneof varid  = SECUREBOOT_CONFIGURATION.SecureBootMode,\r
          questionid = KEY_SECURE_BOOT_MODE,      \r
          prompt = STRING_TOKEN(STR_SECURE_BOOT_MODE_PROMPT),\r
          help   = STRING_TOKEN(STR_SECURE_BOOT_MODE_HELP),\r
          flags  = INTERACTIVE,\r
          option text = STRING_TOKEN(STR_STANDARD_MODE),    value = SECURE_BOOT_MODE_STANDARD, flags = DEFAULT;\r
          option text = STRING_TOKEN(STR_CUSTOM_MODE),      value = SECURE_BOOT_MODE_CUSTOM,   flags = 0;\r
    endoneof;\r
    \r
    //\r
    //\r
    // Display of 'Current Secure Boot Mode'\r
    //\r
    suppressif ideqval SECUREBOOT_CONFIGURATION.SecureBootMode == SECURE_BOOT_MODE_STANDARD;\r
      grayoutif NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;\r
      goto FORMID_SECURE_BOOT_OPTION_FORM,\r
           prompt = STRING_TOKEN(STR_SECURE_BOOT_OPTION),\r
           help   = STRING_TOKEN(STR_SECURE_BOOT_OPTION_HELP),\r
           flags  = INTERACTIVE,\r
           key    = KEY_SECURE_BOOT_OPTION;\r
      endif;\r
    endif;\r
  endform;\r
  \r
  //\r
  // ##2 Form: 'Custom Secure Boot Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_OPTION_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_OPTION_TITLE);\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
    goto FORMID_SECURE_BOOT_PK_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_PK_OPTION;\r
        \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
    goto FORMID_SECURE_BOOT_KEK_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_KEK_OPTION;\r
        \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
    goto FORMID_SECURE_BOOT_DB_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_DB_OPTION;\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
    goto FORMID_SECURE_BOOT_DBX_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION),\r
         help   = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_SECURE_BOOT_DBX_OPTION;\r
\r
  endform;\r
  \r
  //\r
  // ##3 Form: 'PK Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_PK_OPTION_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION);\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
    //\r
    // Define of Check Box: 'Delete PK'\r
    //\r
    suppressif TRUE;\r
      checkbox varid   = SECUREBOOT_CONFIGURATION.DeletePk,\r
               prompt   = STRING_TOKEN(STR_NULL),\r
               help     = STRING_TOKEN(STR_NULL),\r
      endcheckbox;\r
    endif;\r
    \r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.HasPk == 1;\r
    goto FORMID_ENROLL_PK_FORM,\r
         prompt = STRING_TOKEN(STR_ENROLL_PK),\r
         help   = STRING_TOKEN(STR_ENROLL_PK_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_ENROLL_PK;\r
    endif;\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
   \r
    //\r
    // Display of Check Box: 'Delete Pk' \r
    //\r
    grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;\r
    checkbox varid = SECUREBOOT_CONFIGURATION.DeletePk,\r
          questionid = KEY_SECURE_BOOT_DELETE_PK,\r
          prompt = STRING_TOKEN(STR_DELETE_PK),          \r
          help   = STRING_TOKEN(STR_DELETE_PK_HELP),\r
          flags  = INTERACTIVE | RESET_REQUIRED,\r
    endcheckbox;\r
    endif;\r
  endform;\r
  \r
  //\r
  // ##4 Form: 'Enroll PK'\r
  //\r
  form formid = FORMID_ENROLL_PK_FORM,\r
    title  = STRING_TOKEN(STR_ENROLL_PK);\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORM_FILE_EXPLORER_ID_PK,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),\r
         flags = INTERACTIVE,\r
         key = SECUREBOOT_ADD_PK_FILE_FORM_ID;\r
  endform;\r
  \r
  //\r
  // ##5 Form: 'KEK Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_KEK_OPTION_FORM,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION);\r
\r
    //\r
    // Display of 'Enroll KEK' \r
    //\r
    goto FORMID_ENROLL_KEK_FORM,\r
         prompt = STRING_TOKEN(STR_ENROLL_KEK),\r
         help   = STRING_TOKEN(STR_ENROLL_KEK_HELP),\r
         flags  = INTERACTIVE;\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);     \r
   \r
    //\r
    // Display of 'Delete KEK' \r
    //\r
    goto FORMID_DELETE_KEK_FORM,\r
         prompt = STRING_TOKEN(STR_DELETE_KEK),\r
         help   = STRING_TOKEN(STR_DELETE_KEK_HELP),\r
         flags  = INTERACTIVE,\r
         key    = KEY_DELETE_KEK;\r
  \r
    subtitle text = STRING_TOKEN(STR_NULL);    \r
  endform;\r
\r
  //\r
  // ##6 Form: 'Enroll KEK' \r
  //\r
  form formid = FORMID_ENROLL_KEK_FORM,\r
    title = STRING_TOKEN(STR_ENROLL_KEK_TITLE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORM_FILE_EXPLORER_ID_KEK,\r
         prompt = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE),\r
         help   = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE_HELP),\r
         flags  = INTERACTIVE,\r
         key    = FORMID_ENROLL_KEK_FORM;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label FORMID_ENROLL_KEK_FORM;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
            prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
            help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
            flags   = INTERACTIVE,\r
            key     = KEY_SECURE_BOOT_KEK_GUID,\r
            minsize = SECURE_BOOT_GUID_SIZE,\r
            maxsize = SECURE_BOOT_GUID_SIZE,\r
    endstring;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
      prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
      help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
      flags  = INTERACTIVE,\r
      key    = KEY_VALUE_SAVE_AND_EXIT_KEK;\r
 \r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
      prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
      help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
      flags  = INTERACTIVE,\r
      key    = KEY_VALUE_NO_SAVE_AND_EXIT_KEK;\r
\r
  endform;\r
\r
  //\r
  // ##7 Form: 'Delete KEK'\r
  //  \r
  form formid = FORMID_DELETE_KEK_FORM,\r
    title  = STRING_TOKEN(STR_DELETE_KEK_TITLE);\r
\r
    label LABEL_KEK_DELETE;\r
    label LABEL_END;\r
         \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
  endform;\r
\r
  //\r
  // ##8 Form: 'DB Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_DB_OPTION_FORM,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    flags  = 0;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_DELETE_SIGNATURE_FROM_DB,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    flags  = INTERACTIVE,\r
    key    = SECUREBOOT_DELETE_SIGNATURE_FROM_DB;\r
    \r
  endform;\r
\r
  //\r
  // ##9 Form: 'DBX Options'\r
  //\r
  form formid = FORMID_SECURE_BOOT_DBX_OPTION_FORM,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
    flags  = 0;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto SECUREBOOT_DELETE_SIGNATURE_FROM_DBX,\r
    prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    help   = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
    flags  = INTERACTIVE,\r
    key    = SECUREBOOT_DELETE_SIGNATURE_FROM_DBX;\r
\r
  endform;\r
\r
  //\r
  // Form: 'Delete Signature' for DB Options.\r
  //\r
  form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DB,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);\r
\r
    label LABEL_DB_DELETE;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
  endform;\r
\r
  //\r
  // Form: 'Delete Signature' for DBX Options.\r
  //\r
  form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DBX,\r
    title  = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);\r
\r
    label LABEL_DBX_DELETE;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    \r
  endform;\r
\r
  //\r
  // Form: 'Enroll Signature' for DB options.\r
  //\r
  form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORM_FILE_EXPLORER_ID_DB,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         flags = INTERACTIVE,\r
         key = SECUREBOOT_ENROLL_SIGNATURE_TO_DB;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label SECUREBOOT_ENROLL_SIGNATURE_TO_DB;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
            prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
            help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
            flags   = INTERACTIVE,\r
            key     = KEY_SECURE_BOOT_SIGNATURE_GUID_DB,\r
            minsize = SECURE_BOOT_GUID_SIZE,\r
            maxsize = SECURE_BOOT_GUID_SIZE,\r
    endstring;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_SAVE_AND_EXIT_DB;\r
 \r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_NO_SAVE_AND_EXIT_DB;\r
\r
  endform;\r
\r
  //\r
  // Form: 'Enroll Signature' for DBX options.\r
  //\r
  form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
    title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORM_FILE_EXPLORER_ID_DBX,\r
         prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
         flags = INTERACTIVE,\r
         key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    label SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;\r
    label LABEL_END;\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    string  varid   = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
            prompt  = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
            help    = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
            flags   = INTERACTIVE,\r
            key     = KEY_SECURE_BOOT_SIGNATURE_GUID_DBX,\r
            minsize = SECURE_BOOT_GUID_SIZE,\r
            maxsize = SECURE_BOOT_GUID_SIZE,\r
    endstring;\r
\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_SAVE_AND_EXIT_DBX;\r
 \r
    goto FORMID_SECURE_BOOT_OPTION_FORM,\r
         prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
         flags  = INTERACTIVE,\r
         key    = KEY_VALUE_NO_SAVE_AND_EXIT_DBX;\r
\r
  endform;\r
\r
  //\r
  // File Explorer for PK\r
  //\r
  form formid = FORM_FILE_EXPLORER_ID_PK,\r
       title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
\r
       label FORM_FILE_EXPLORER_ID;\r
       label LABEL_END;\r
  endform;\r
  \r
  //\r
  // File Explorer for KEK\r
  //\r
  form formid = FORM_FILE_EXPLORER_ID_KEK,\r
       title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
\r
       label FORM_FILE_EXPLORER_ID;\r
       label LABEL_END;\r
  endform;\r
\r
  //\r
  // File Explorer for DB\r
  //\r
  form formid = FORM_FILE_EXPLORER_ID_DB,\r
       title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
\r
       label FORM_FILE_EXPLORER_ID;\r
       label LABEL_END;\r
  endform;\r
\r
  //\r
  // File Explorer for DBX\r
  //\r
  form formid = FORM_FILE_EXPLORER_ID_DBX,\r
       title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
\r
       label FORM_FILE_EXPLORER_ID;\r
       label LABEL_END;\r
  endform;\r
\r
\r
  //\r
  // Enroll Pk from File Commit Form\r
  //\r
  form formid = SECUREBOOT_ADD_PK_FILE_FORM_ID,\r
    title = STRING_TOKEN(STR_SAVE_PK_FILE);\r
\r
    label SECUREBOOT_ADD_PK_FILE_FORM_ID;\r
    label LABEL_END;\r
    \r
    subtitle text = STRING_TOKEN(STR_NULL);\r
\r
     text\r
       help   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
       text   = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
       text   = STRING_TOKEN(STR_NULL),\r
       flags  = INTERACTIVE,\r
       key    = KEY_VALUE_SAVE_AND_EXIT_PK;\r
\r
     text\r
       help   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
       text   = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
       text   = STRING_TOKEN(STR_NULL),\r
       flags  = INTERACTIVE,\r
       key    = KEY_VALUE_NO_SAVE_AND_EXIT_PK;\r
\r
  endform;\r
\r
endformset;\r
Commit	Line	Data
beda2356	1	/** @file\r
	2	VFR file used by the SecureBoot configuration component.\r
	3	\r
f71ed839	4	Copyright (c) 2011 - 2013, Intel Corporation. All rights reserved.<BR>\r
beda2356	5	This program and the accompanying materials \r
	6	are licensed and made available under the terms and conditions of the BSD License \r
	7	which accompanies this distribution. The full text of the license may be found at \r
	8	http://opensource.org/licenses/bsd-license.php\r
	9	\r
	10	THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, \r
	11	WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.\r
	12	\r
	13	**/\r
	14	\r
	15	#include "SecureBootConfigNvData.h"\r
	16	\r
	17	formset\r
	18	guid = SECUREBOOT_CONFIG_FORM_SET_GUID,\r
	19	title = STRING_TOKEN(STR_SECUREBOOT_TITLE),\r
	20	help = STRING_TOKEN(STR_SECUREBOOT_HELP),\r
	21	classguid = EFI_HII_PLATFORM_SETUP_FORMSET_GUID,\r
	22	\r
	23	varstore SECUREBOOT_CONFIGURATION,\r
	24	varid = SECUREBOOT_CONFIGURATION_VARSTORE_ID,\r
	25	name = SECUREBOOT_CONFIGURATION,\r
	26	guid = SECUREBOOT_CONFIG_FORM_SET_GUID;\r
ecc722ad	27	\r
	28	//\r
	29	// ##1 Form "Secure Boot Configuration"\r
	30	//\r
beda2356	31	form formid = SECUREBOOT_CONFIGURATION_FORM_ID,\r
	32	title = STRING_TOKEN(STR_SECUREBOOT_TITLE);\r
	33	\r
	34	subtitle text = STRING_TOKEN(STR_NULL);\r
f71ed839	35	\r
	36	text\r
	37	help = STRING_TOKEN(STR_SECURE_BOOT_STATE_HELP),\r
	38	text = STRING_TOKEN(STR_SECURE_BOOT_STATE_PROMPT),\r
	39	text = STRING_TOKEN(STR_SECURE_BOOT_STATE_CONTENT);\r
	40	\r
ecc722ad	41	//\r
	42	// Define of Check Box: Attempt Secure Boot\r
	43	//\r
beda2356	44	suppressif TRUE;\r
beda2356	45	checkbox varid = SECUREBOOT_CONFIGURATION.HideSecureBoot,\r
a2f2c258	46	questionid = KEY_HIDE_SECURE_BOOT,\r
beda2356	47	prompt = STRING_TOKEN(STR_NULL),\r
beda2356	48	help = STRING_TOKEN(STR_NULL),\r
a2f2c258	49	flags = INTERACTIVE,\r
beda2356	50	endcheckbox;\r
ecc722ad	51	endif; \r
beda2356	52	\r
ecc722ad	53	//\r
	54	// Display of Check Box: Attempt Secure Boot\r
	55	//\r
beda2356	56	grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;\r
f71ed839	57	checkbox varid = SECUREBOOT_CONFIGURATION.AttemptSecureBoot,\r
beda2356	58	questionid = KEY_SECURE_BOOT_ENABLE,\r
	59	prompt = STRING_TOKEN(STR_SECURE_BOOT_PROMPT),\r
	60	help = STRING_TOKEN(STR_SECURE_BOOT_HELP),\r
8f8ca22e	61	flags = INTERACTIVE \| RESET_REQUIRED,\r
ecc722ad	62	endcheckbox;\r
	63	endif;\r
	64	\r
	65	//\r
	66	// Display of Oneof: 'Secure Boot Mode'\r
	67	//\r
	68	oneof varid = SECUREBOOT_CONFIGURATION.SecureBootMode,\r
	69	questionid = KEY_SECURE_BOOT_MODE, \r
	70	prompt = STRING_TOKEN(STR_SECURE_BOOT_MODE_PROMPT),\r
	71	help = STRING_TOKEN(STR_SECURE_BOOT_MODE_HELP),\r
	72	flags = INTERACTIVE,\r
	73	option text = STRING_TOKEN(STR_STANDARD_MODE), value = SECURE_BOOT_MODE_STANDARD, flags = DEFAULT;\r
	74	option text = STRING_TOKEN(STR_CUSTOM_MODE), value = SECURE_BOOT_MODE_CUSTOM, flags = 0;\r
	75	endoneof;\r
	76	\r
	77	//\r
	78	//\r
	79	// Display of 'Current Secure Boot Mode'\r
	80	//\r
	81	suppressif ideqval SECUREBOOT_CONFIGURATION.SecureBootMode == SECURE_BOOT_MODE_STANDARD;\r
	82	grayoutif NOT ideqval SECUREBOOT_CONFIGURATION.PhysicalPresent == 1;\r
	83	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
	84	prompt = STRING_TOKEN(STR_SECURE_BOOT_OPTION),\r
	85	help = STRING_TOKEN(STR_SECURE_BOOT_OPTION_HELP),\r
	86	flags = INTERACTIVE,\r
	87	key = KEY_SECURE_BOOT_OPTION;\r
	88	endif;\r
	89	endif;\r
	90	endform;\r
	91	\r
	92	//\r
	93	// ##2 Form: 'Custom Secure Boot Options'\r
	94	//\r
	95	form formid = FORMID_SECURE_BOOT_OPTION_FORM,\r
	96	title = STRING_TOKEN(STR_SECURE_BOOT_OPTION_TITLE);\r
	97	\r
	98	subtitle text = STRING_TOKEN(STR_NULL);\r
	99	\r
	100	goto FORMID_SECURE_BOOT_PK_OPTION_FORM,\r
	101	prompt = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION),\r
	102	help = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION_HELP),\r
	103	flags = INTERACTIVE,\r
	104	key = KEY_SECURE_BOOT_PK_OPTION;\r
	105	\r
	106	subtitle text = STRING_TOKEN(STR_NULL);\r
	107	\r
	108	goto FORMID_SECURE_BOOT_KEK_OPTION_FORM,\r
	109	prompt = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION),\r
	110	help = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION_HELP),\r
	111	flags = INTERACTIVE,\r
	112	key = KEY_SECURE_BOOT_KEK_OPTION;\r
	113	\r
	114	subtitle text = STRING_TOKEN(STR_NULL);\r
	115	\r
	116	goto FORMID_SECURE_BOOT_DB_OPTION_FORM,\r
	117	prompt = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION),\r
	118	help = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION_HELP),\r
	119	flags = INTERACTIVE,\r
	120	key = KEY_SECURE_BOOT_DB_OPTION;\r
	121	\r
	122	subtitle text = STRING_TOKEN(STR_NULL);\r
	123	\r
	124	goto FORMID_SECURE_BOOT_DBX_OPTION_FORM,\r
	125	prompt = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION),\r
126	help = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION_HELP),\r
127	flags = INTERACTIVE,\r
128	key = KEY_SECURE_BOOT_DBX_OPTION;\r
129	\r
130	endform;\r
131	\r
132	//\r
133	// ##3 Form: 'PK Options'\r
134	//\r
135	form formid = FORMID_SECURE_BOOT_PK_OPTION_FORM,\r
136	title = STRING_TOKEN(STR_SECURE_BOOT_PK_OPTION);\r
137	\r
138	subtitle text = STRING_TOKEN(STR_NULL);\r
139	\r
140	//\r
141	// Define of Check Box: 'Delete PK'\r
142	//\r
143	suppressif TRUE;\r
144	checkbox varid = SECUREBOOT_CONFIGURATION.DeletePk,\r
145	prompt = STRING_TOKEN(STR_NULL),\r
146	help = STRING_TOKEN(STR_NULL),\r
147	endcheckbox;\r
148	endif;\r
149	\r
150	grayoutif ideqval SECUREBOOT_CONFIGURATION.HasPk == 1;\r
151	goto FORMID_ENROLL_PK_FORM,\r
152	prompt = STRING_TOKEN(STR_ENROLL_PK),\r
153	help = STRING_TOKEN(STR_ENROLL_PK_HELP),\r
154	flags = INTERACTIVE,\r
155	key = KEY_ENROLL_PK;\r
156	endif;\r
157	\r
158	subtitle text = STRING_TOKEN(STR_NULL);\r
159	\r
160	//\r
161	// Display of Check Box: 'Delete Pk' \r
162	//\r
163	grayoutif ideqval SECUREBOOT_CONFIGURATION.HideSecureBoot == 1;\r
164	checkbox varid = SECUREBOOT_CONFIGURATION.DeletePk,\r
165	questionid = KEY_SECURE_BOOT_DELETE_PK,\r
166	prompt = STRING_TOKEN(STR_DELETE_PK), \r
167	help = STRING_TOKEN(STR_DELETE_PK_HELP),\r
0fb450fb	168	flags = INTERACTIVE \| RESET_REQUIRED,\r
beda2356	169	endcheckbox;\r
beda2356	170	endif;\r
ecc722ad	171	endform;\r
	172	\r
	173	//\r
	174	// ##4 Form: 'Enroll PK'\r
	175	//\r
	176	form formid = FORMID_ENROLL_PK_FORM,\r
	177	title = STRING_TOKEN(STR_ENROLL_PK);\r
	178	\r
	179	subtitle text = STRING_TOKEN(STR_NULL);\r
	180	\r
	181	goto FORM_FILE_EXPLORER_ID_PK,\r
	182	prompt = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),\r
	183	help = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_PK_FILE),\r
	184	flags = INTERACTIVE,\r
	185	key = SECUREBOOT_ADD_PK_FILE_FORM_ID;\r
	186	endform;\r
	187	\r
	188	//\r
	189	// ##5 Form: 'KEK Options'\r
	190	//\r
	191	form formid = FORMID_SECURE_BOOT_KEK_OPTION_FORM,\r
	192	title = STRING_TOKEN(STR_SECURE_BOOT_KEK_OPTION);\r
	193	\r
	194	//\r
	195	// Display of 'Enroll KEK' \r
	196	//\r
	197	goto FORMID_ENROLL_KEK_FORM,\r
	198	prompt = STRING_TOKEN(STR_ENROLL_KEK),\r
	199	help = STRING_TOKEN(STR_ENROLL_KEK_HELP),\r
	200	flags = INTERACTIVE;\r
	201	\r
	202	subtitle text = STRING_TOKEN(STR_NULL); \r
	203	\r
	204	//\r
	205	// Display of 'Delete KEK' \r
	206	//\r
	207	goto FORMID_DELETE_KEK_FORM,\r
	208	prompt = STRING_TOKEN(STR_DELETE_KEK),\r
	209	help = STRING_TOKEN(STR_DELETE_KEK_HELP),\r
	210	flags = INTERACTIVE,\r
	211	key = KEY_DELETE_KEK;\r
	212	\r
	213	subtitle text = STRING_TOKEN(STR_NULL); \r
	214	endform;\r
	215	\r
	216	//\r
	217	// ##6 Form: 'Enroll KEK' \r
	218	//\r
	219	form formid = FORMID_ENROLL_KEK_FORM,\r
	220	title = STRING_TOKEN(STR_ENROLL_KEK_TITLE);\r
	221	\r
	222	subtitle text = STRING_TOKEN(STR_NULL);\r
	223	\r
	224	goto FORM_FILE_EXPLORER_ID_KEK,\r
	225	prompt = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE),\r
	226	help = STRING_TOKEN(STR_FORM_ENROLL_KEK_FROM_FILE_TITLE_HELP),\r
	227	flags = INTERACTIVE,\r
	228	key = FORMID_ENROLL_KEK_FORM;\r
	229	\r
	230	subtitle text = STRING_TOKEN(STR_NULL);\r
	231	label FORMID_ENROLL_KEK_FORM;\r
	232	label LABEL_END;\r
	233	subtitle text = STRING_TOKEN(STR_NULL);\r
	234	\r
235	string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
236	prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
237	help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
238	flags = INTERACTIVE,\r
239	key = KEY_SECURE_BOOT_KEK_GUID,\r
240	minsize = SECURE_BOOT_GUID_SIZE,\r
241	maxsize = SECURE_BOOT_GUID_SIZE,\r
242	endstring;\r
243	\r
244	subtitle text = STRING_TOKEN(STR_NULL);\r
245	subtitle text = STRING_TOKEN(STR_NULL);\r
246	\r
247	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
248	prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
249	help = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
250	flags = INTERACTIVE,\r
251	key = KEY_VALUE_SAVE_AND_EXIT_KEK;\r
252	\r
253	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
254	prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
255	help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
256	flags = INTERACTIVE,\r
257	key = KEY_VALUE_NO_SAVE_AND_EXIT_KEK;\r
258	\r
259	endform;\r
260	\r
261	//\r
262	// ##7 Form: 'Delete KEK'\r
263	// \r
264	form formid = FORMID_DELETE_KEK_FORM,\r
265	title = STRING_TOKEN(STR_DELETE_KEK_TITLE);\r
266	\r
267	label LABEL_KEK_DELETE;\r
268	label LABEL_END;\r
269	\r
270	subtitle text = STRING_TOKEN(STR_NULL);\r
271	\r
272	endform;\r
273	\r
274	//\r
275	// ##8 Form: 'DB Options'\r
276	//\r
277	form formid = FORMID_SECURE_BOOT_DB_OPTION_FORM,\r
278	title = STRING_TOKEN(STR_SECURE_BOOT_DB_OPTION);\r
279	\r
280	subtitle text = STRING_TOKEN(STR_NULL);\r
281	\r
282	goto SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
283	prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
284	help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
285	flags = 0;\r
286	\r
287	subtitle text = STRING_TOKEN(STR_NULL);\r
288	\r
289	goto SECUREBOOT_DELETE_SIGNATURE_FROM_DB,\r
290	prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
291	help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
292	flags = INTERACTIVE,\r
293	key = SECUREBOOT_DELETE_SIGNATURE_FROM_DB;\r
294	\r
295	endform;\r
296	\r
297	//\r
298	// ##9 Form: 'DBX Options'\r
299	//\r
300	form formid = FORMID_SECURE_BOOT_DBX_OPTION_FORM,\r
301	title = STRING_TOKEN(STR_SECURE_BOOT_DBX_OPTION);\r
302	\r
303	subtitle text = STRING_TOKEN(STR_NULL);\r
304	\r
305	goto SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
306	prompt = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
307	help = STRING_TOKEN (STR_SECURE_BOOT_ENROLL_SIGNATURE),\r
308	flags = 0;\r
309	\r
310	subtitle text = STRING_TOKEN(STR_NULL);\r
311	\r
312	goto SECUREBOOT_DELETE_SIGNATURE_FROM_DBX,\r
313	prompt = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
314	help = STRING_TOKEN (STR_SECURE_BOOT_DELETE_SIGNATURE),\r
315	flags = INTERACTIVE,\r
316	key = SECUREBOOT_DELETE_SIGNATURE_FROM_DBX;\r
317	\r
318	endform;\r
319	\r
320	//\r
321	// Form: 'Delete Signature' for DB Options.\r
322	//\r
323	form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DB,\r
324	title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);\r
325	\r
326	label LABEL_DB_DELETE;\r
327	label LABEL_END;\r
328	subtitle text = STRING_TOKEN(STR_NULL);\r
329	\r
330	endform;\r
331	\r
332	//\r
333	// Form: 'Delete Signature' for DBX Options.\r
334	//\r
335	form formid = SECUREBOOT_DELETE_SIGNATURE_FROM_DBX,\r
336	title = STRING_TOKEN(STR_SECURE_BOOT_DELETE_SIGNATURE);\r
337	\r
338	label LABEL_DBX_DELETE;\r
339	label LABEL_END;\r
340	subtitle text = STRING_TOKEN(STR_NULL);\r
341	\r
342	endform;\r
343	\r
344	//\r
345	// Form: 'Enroll Signature' for DB options.\r
346	//\r
347	form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DB,\r
348	title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
349	\r
350	subtitle text = STRING_TOKEN(STR_NULL);\r
351	\r
352	goto FORM_FILE_EXPLORER_ID_DB,\r
353	prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
354	help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
355	flags = INTERACTIVE,\r
356	key = SECUREBOOT_ENROLL_SIGNATURE_TO_DB;\r
357	\r
358	subtitle text = STRING_TOKEN(STR_NULL);\r
359	label SECUREBOOT_ENROLL_SIGNATURE_TO_DB;\r
360	label LABEL_END;\r
361	subtitle text = STRING_TOKEN(STR_NULL);\r
362	\r
363	string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
364	prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
365	help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
366	flags = INTERACTIVE,\r
367	key = KEY_SECURE_BOOT_SIGNATURE_GUID_DB,\r
368	minsize = SECURE_BOOT_GUID_SIZE,\r
369	maxsize = SECURE_BOOT_GUID_SIZE,\r
370	endstring;\r
371	\r
372	subtitle text = STRING_TOKEN(STR_NULL);\r
373	subtitle text = STRING_TOKEN(STR_NULL);\r
374	\r
375	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
376	prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
377	help = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
378	flags = INTERACTIVE,\r
379	key = KEY_VALUE_SAVE_AND_EXIT_DB;\r
380	\r
381	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
382	prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
383	help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
384	flags = INTERACTIVE,\r
385	key = KEY_VALUE_NO_SAVE_AND_EXIT_DB;\r
386	\r
387	endform;\r
388	\r
389	//\r
390	// Form: 'Enroll Signature' for DBX options.\r
391	//\r
392	form formid = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX,\r
393	title = STRING_TOKEN(STR_SECURE_BOOT_ENROLL_SIGNATURE);\r
394	\r
395	subtitle text = STRING_TOKEN(STR_NULL);\r
396	\r
397	goto FORM_FILE_EXPLORER_ID_DBX,\r
398	prompt = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
399	help = STRING_TOKEN(STR_SECURE_BOOT_ADD_SIGNATURE_FILE),\r
400	flags = INTERACTIVE,\r
401	key = SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;\r
402	\r
403	subtitle text = STRING_TOKEN(STR_NULL);\r
404	label SECUREBOOT_ENROLL_SIGNATURE_TO_DBX;\r
405	label LABEL_END;\r
406	subtitle text = STRING_TOKEN(STR_NULL);\r
407	\r
408	string varid = SECUREBOOT_CONFIGURATION.SignatureGuid,\r
409	prompt = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID),\r
410	help = STRING_TOKEN(STR_SECURE_BOOT_SIGNATURE_GUID_HELP),\r
411	flags = INTERACTIVE,\r
412	key = KEY_SECURE_BOOT_SIGNATURE_GUID_DBX,\r
413	minsize = SECURE_BOOT_GUID_SIZE,\r
414	maxsize = SECURE_BOOT_GUID_SIZE,\r
415	endstring;\r
416	\r
417	subtitle text = STRING_TOKEN(STR_NULL);\r
418	subtitle text = STRING_TOKEN(STR_NULL);\r
419	\r
420	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
421	prompt = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
422	help = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
423	flags = INTERACTIVE,\r
424	key = KEY_VALUE_SAVE_AND_EXIT_DBX;\r
425	\r
426	goto FORMID_SECURE_BOOT_OPTION_FORM,\r
427	prompt = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
428	help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
429	flags = INTERACTIVE,\r
430	key = KEY_VALUE_NO_SAVE_AND_EXIT_DBX;\r
431	\r
432	endform;\r
433	\r
434	//\r
435	// File Explorer for PK\r
436	//\r
437	form formid = FORM_FILE_EXPLORER_ID_PK,\r
438	title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
439	\r
440	label FORM_FILE_EXPLORER_ID;\r
441	label LABEL_END;\r
442	endform;\r
443	\r
444	//\r
445	// File Explorer for KEK\r
446	//\r
447	form formid = FORM_FILE_EXPLORER_ID_KEK,\r
448	title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
449	\r
450	label FORM_FILE_EXPLORER_ID;\r
451	label LABEL_END;\r
452	endform;\r
453	\r
454	//\r
455	// File Explorer for DB\r
456	//\r
457	form formid = FORM_FILE_EXPLORER_ID_DB,\r
458	title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
459	\r
460	label FORM_FILE_EXPLORER_ID;\r
461	label LABEL_END;\r
462	endform;\r
463	\r
464	//\r
465	// File Explorer for DBX\r
466	//\r
467	form formid = FORM_FILE_EXPLORER_ID_DBX,\r
468	title = STRING_TOKEN(STR_FILE_EXPLORER_TITLE);\r
469	\r
470	label FORM_FILE_EXPLORER_ID;\r
471	label LABEL_END;\r
472	endform;\r
473	\r
474	\r
475	//\r
476	// Enroll Pk from File Commit Form\r
477	//\r
478	form formid = SECUREBOOT_ADD_PK_FILE_FORM_ID,\r
479	title = STRING_TOKEN(STR_SAVE_PK_FILE);\r
480	\r
481	label SECUREBOOT_ADD_PK_FILE_FORM_ID;\r
482	label LABEL_END;\r
483	\r
484	subtitle text = STRING_TOKEN(STR_NULL);\r
485	\r
486	text\r
487	help = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
488	text = STRING_TOKEN(STR_SAVE_AND_EXIT),\r
489	text = STRING_TOKEN(STR_NULL),\r
490	flags = INTERACTIVE,\r
491	key = KEY_VALUE_SAVE_AND_EXIT_PK;\r
492	\r
493	text\r
494	help = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
495	text = STRING_TOKEN(STR_NO_SAVE_AND_EXIT),\r
496	text = STRING_TOKEN(STR_NULL),\r
497	flags = INTERACTIVE,\r
498	key = KEY_VALUE_NO_SAVE_AND_EXIT_PK;\r
beda2356	499	\r
	500	endform;\r
	501	\r
	502	endformset;\r