SecurityPkg/Library/PlatformSecureLibNull/PlatformSecureLibNull.c

   1 /** @file
   2   Provides a secure platform-specific method to clear PK(Platform Key).
   3
   4 Copyright (c) 2011, Intel Corporation. All rights reserved.<BR>
   5 This program and the accompanying materials
   6 are licensed and made available under the terms and conditions of the BSD License
   7 which accompanies this distribution.  The full text of the license may be found at
   8 http://opensource.org/licenses/bsd-license.php
   9
  10 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
  11 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
  12
  13 **/
  14
  15 /**
  16
  17   This function detects whether a secure platform-specific method to clear PK(Platform Key)
  18   is configured by platform owner. This method is provided for users force to clear PK
  19   in case incorrect enrollment mis-haps.
  20
  21   UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using
  22   a secure platform-specific method. In  this case, the global variable SetupMode
  23   must also be updated to 1.
  24
  25   NOTE THAT: This function cannot depend on any EFI Variable Service since they are
  26   not available when this function is called in AuthenticateVariable driver.
  27
  28   @retval  TRUE       The Platform owner wants to force clear PK.
  29   @retval  FALSE      The Platform owner doesn't want to force clear PK.
  30
  31 **/
  32 BOOLEAN
  33 EFIAPI
  34 ForceClearPK (
  35   VOID
  36   )
  37 {
  38   return FALSE;
  39 }