OvmfPkg/Include/Guid/MicrosoftVendor.h

   1 /** @file
   2   Declare the GUID that is expected:
   3
   4   - as EFI_SIGNATURE_DATA.SignatureOwner GUID in association with X509 and
   5     RSA2048 Secure Boot certificates issued by/for Microsoft,
   6
   7   - as UEFI variable vendor GUID in association with (unspecified)
   8     Microsoft-owned variables.
   9
  10   Copyright (C) 2014-2019, Red Hat, Inc.
  11
  12   SPDX-License-Identifier: BSD-2-Clause-Patent
  13
  14   @par Specification Reference:
  15   - MSDN: System.Fundamentals.Firmware at
  16     <https://msdn.microsoft.com/en-us/ie/dn932805(v=vs.94)>.
  17 **/
  18
  19 #ifndef MICROSOFT_VENDOR_H_
  20 #define MICROSOFT_VENDOR_H_
  21
  22 #include <Uefi/UefiBaseType.h>
  23
  24 //
  25 // The following test cases of the Secure Boot Logo Test in the Microsoft
  26 // Hardware Certification Kit:
  27 //
  28 // - Microsoft.UefiSecureBootLogo.Tests.OutOfBoxVerifyMicrosoftKEKpresent
  29 // - Microsoft.UefiSecureBootLogo.Tests.OutOfBoxConfirmMicrosoftSignatureInDB
  30 //
  31 // expect the EFI_SIGNATURE_DATA.SignatureOwner GUID to be
  32 // 77FA9ABD-0359-4D32-BD60-28F4E78F784B, when the
  33 // EFI_SIGNATURE_DATA.SignatureData field carries any of the following X509
  34 // certificates:
  35 //
  36 // - "Microsoft Corporation KEK CA 2011" (in KEK)
  37 // - "Microsoft Windows Production PCA 2011" (in db)
  38 // - "Microsoft Corporation UEFI CA 2011" (in db)
  39 //
  40 // This is despite the fact that the UEFI specification requires
  41 // EFI_SIGNATURE_DATA.SignatureOwner to reflect the agent (i.e., OS,
  42 // application or driver) that enrolled and therefore owns
  43 // EFI_SIGNATURE_DATA.SignatureData, and not the organization that issued
  44 // EFI_SIGNATURE_DATA.SignatureData.
  45 //
  46 #define MICROSOFT_VENDOR_GUID                           \
  47   { 0x77fa9abd,                                         \
  48     0x0359,                                             \
  49     0x4d32,                                             \
  50     { 0xbd, 0x60, 0x28, 0xf4, 0xe7, 0x8f, 0x78, 0x4b }, \
  51   }
  52
  53 extern EFI_GUID  gMicrosoftVendorGuid;
  54
  55 #endif /* MICROSOFT_VENDOR_H_ */