]> git.proxmox.com Git - mirror_edk2.git/blob - SecurityPkg/Tcg/Tcg2Config/Tcg2Config.vfr
SecurityPkg Tcg2ConfigDxe: Add setup option to configure PPI version
[mirror_edk2.git] / SecurityPkg / Tcg / Tcg2Config / Tcg2Config.vfr
1 /** @file
2 VFR file used by the TCG2 configuration component.
3
4 Copyright (c) 2015 - 2017, Intel Corporation. All rights reserved.<BR>
5 This program and the accompanying materials
6 are licensed and made available under the terms and conditions of the BSD License
7 which accompanies this distribution. The full text of the license may be found at
8 http://opensource.org/licenses/bsd-license.php
9
10 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
11 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
12
13 **/
14
15 #include "Tcg2ConfigNvData.h"
16
17 formset
18 guid = TCG2_CONFIG_FORM_SET_GUID,
19 title = STRING_TOKEN(STR_TCG2_TITLE),
20 help = STRING_TOKEN(STR_TCG2_HELP),
21 classguid = EFI_HII_PLATFORM_SETUP_FORMSET_GUID,
22
23 efivarstore TCG2_CONFIGURATION_INFO,
24 varid = TCG2_CONFIGURATION_INFO_VARSTORE_ID,
25 attribute = 0x02, // EFI variable attribures EFI_VARIABLE_BOOTSERVICE_ACCESS
26 name = TCG2_CONFIGURATION_INFO,
27 guid = TCG2_CONFIG_FORM_SET_GUID;
28
29 efivarstore TCG2_CONFIGURATION,
30 varid = TCG2_CONFIGURATION_VARSTORE_ID,
31 attribute = 0x03, // EFI variable attribures EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_NON_VOLATILE
32 name = TCG2_CONFIGURATION,
33 guid = TCG2_CONFIG_FORM_SET_GUID;
34
35 efivarstore TCG2_VERSION,
36 varid = TCG2_VERSION_VARSTORE_ID,
37 attribute = 0x03, // EFI variable attribures EFI_VARIABLE_BOOTSERVICE_ACCESS | EFI_VARIABLE_NON_VOLATILE
38 name = TCG2_VERSION,
39 guid = TCG2_CONFIG_FORM_SET_GUID;
40
41 form formid = TCG2_CONFIGURATION_FORM_ID,
42 title = STRING_TOKEN(STR_TCG2_TITLE);
43
44 subtitle text = STRING_TOKEN(STR_NULL);
45
46 text
47 help = STRING_TOKEN(STR_TCG2_DEVICE_STATE_HELP),
48 text = STRING_TOKEN(STR_TCG2_DEVICE_STATE_PROMPT),
49 text = STRING_TOKEN(STR_TCG2_DEVICE_STATE_CONTENT);
50
51 oneof varid = TCG2_CONFIGURATION.TpmDevice,
52 questionid = KEY_TPM_DEVICE,
53 prompt = STRING_TOKEN(STR_TCG2_DEVICE_PROMPT),
54 help = STRING_TOKEN(STR_TCG2_DEVICE_HELP),
55 flags = INTERACTIVE,
56 option text = STRING_TOKEN(STR_TCG2_TPM_1_2), value = TPM_DEVICE_1_2, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
57 option text = STRING_TOKEN(STR_TCG2_TPM_2_0_DTPM), value = TPM_DEVICE_2_0_DTPM, flags = RESET_REQUIRED;
58 endoneof;
59
60 suppressif ideqvallist TCG2_CONFIGURATION.TpmDevice == TPM_DEVICE_NULL TPM_DEVICE_1_2;
61
62 subtitle text = STRING_TOKEN(STR_NULL);
63
64 text
65 help = STRING_TOKEN(STR_TPM2_ACPI_HID_HELP),
66 text = STRING_TOKEN(STR_TPM2_ACPI_HID_PROMPT),
67 text = STRING_TOKEN(STR_TPM2_ACPI_HID_CONTENT);
68
69 text
70 help = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_STATE_HELP),
71 text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_STATE_PROMPT),
72 text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_STATE_CONTENT);
73
74 text
75 help = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_CAPABILITY_HELP),
76 text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_CAPABILITY_PROMPT),
77 text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_CAPABILITY_CONTENT);
78
79 suppressif ideqval TCG2_CONFIGURATION_INFO.TpmDeviceInterfacePtpFifoSupported == 0
80 OR ideqval TCG2_CONFIGURATION_INFO.TpmDeviceInterfacePtpCrbSupported == 0;
81 oneof varid = TCG2_CONFIGURATION_INFO.TpmDeviceInterfaceAttempt,
82 questionid = KEY_TPM_DEVICE_INTERFACE,
83 prompt = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_PROMPT),
84 help = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_HELP),
85 flags = INTERACTIVE,
86 option text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_TIS), value = TPM_DEVICE_INTERFACE_TIS, flags = RESET_REQUIRED;
87 option text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_PTP_FIFO), value = TPM_DEVICE_INTERFACE_PTP_FIFO, flags = RESET_REQUIRED;
88 option text = STRING_TOKEN(STR_TCG2_DEVICE_INTERFACE_PTP_CRB), value = TPM_DEVICE_INTERFACE_PTP_CRB, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
89 endoneof;
90 endif;
91
92 endif;
93
94 subtitle text = STRING_TOKEN(STR_NULL);
95
96 suppressif ideqvallist TCG2_CONFIGURATION.TpmDevice == TPM_DEVICE_NULL TPM_DEVICE_1_2;
97 text
98 help = STRING_TOKEN(STR_TPM2_ACTIVE_HASH_ALGO_HELP),
99 text = STRING_TOKEN(STR_TPM2_ACTIVE_HASH_ALGO),
100 text = STRING_TOKEN(STR_TPM2_ACTIVE_HASH_ALGO_CONTENT);
101 text
102 help = STRING_TOKEN(STR_TPM2_SUPPORTED_HASH_ALGO_HELP),
103 text = STRING_TOKEN(STR_TPM2_SUPPORTED_HASH_ALGO),
104 text = STRING_TOKEN(STR_TPM2_SUPPORTED_HASH_ALGO_CONTENT);
105 text
106 help = STRING_TOKEN(STR_BIOS_HASH_ALGO_HELP),
107 text = STRING_TOKEN(STR_BIOS_HASH_ALGO),
108 text = STRING_TOKEN(STR_BIOS_HASH_ALGO_CONTENT);
109
110 subtitle text = STRING_TOKEN(STR_NULL);
111 subtitle text = STRING_TOKEN(STR_TCG2_PP_OPERATION);
112
113 text
114 help = STRING_TOKEN(STR_TCG2_PPI_VERSION_STATE_HELP),
115 text = STRING_TOKEN(STR_TCG2_PPI_VERSION_STATE_PROMPT),
116 text = STRING_TOKEN(STR_TCG2_PPI_VERSION_STATE_CONTENT);
117
118 oneof varid = TCG2_VERSION.PpiVersion,
119 questionid = KEY_TCG2_PPI_VERSION,
120 prompt = STRING_TOKEN(STR_TCG2_PPI_VERSION_PROMPT),
121 help = STRING_TOKEN(STR_TCG2_PPI_VERSION_HELP),
122 flags = INTERACTIVE,
123 option text = STRING_TOKEN(STR_TCG2_PPI_VERSION_1_2), value = TCG2_PPI_VERSION_1_2, flags = RESET_REQUIRED;
124 option text = STRING_TOKEN(STR_TCG2_PPI_VERSION_1_3), value = TCG2_PPI_VERSION_1_3, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
125 endoneof;
126
127 oneof name = Tpm2Operation,
128 questionid = KEY_TPM2_OPERATION,
129 prompt = STRING_TOKEN(STR_TCG2_OPERATION),
130 help = STRING_TOKEN(STR_TCG2_OPERATION_HELP),
131 flags = INTERACTIVE | NUMERIC_SIZE_1,
132 option text = STRING_TOKEN(STR_TCG2_NO_ACTION), value = TCG2_PHYSICAL_PRESENCE_NO_ACTION, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
133 option text = STRING_TOKEN(STR_TCG2_ENABLE), value = TCG2_PHYSICAL_PRESENCE_ENABLE, flags = RESET_REQUIRED;
134 option text = STRING_TOKEN(STR_TCG2_DISABLE), value = TCG2_PHYSICAL_PRESENCE_DISABLE, flags = RESET_REQUIRED;
135 option text = STRING_TOKEN(STR_TCG2_CLEAR), value = TCG2_PHYSICAL_PRESENCE_CLEAR, flags = RESET_REQUIRED;
136 option text = STRING_TOKEN(STR_TCG2_SET_PCD_BANKS), value = TCG2_PHYSICAL_PRESENCE_SET_PCR_BANKS, flags = RESET_REQUIRED;
137 option text = STRING_TOKEN(STR_TCG2_CHANGE_EPS), value = TCG2_PHYSICAL_PRESENCE_CHANGE_EPS, flags = RESET_REQUIRED;
138 option text = STRING_TOKEN(STR_TCG2_LOG_ALL_DIGESTS), value = TCG2_PHYSICAL_PRESENCE_LOG_ALL_DIGESTS, flags = RESET_REQUIRED;
139 option text = STRING_TOKEN(STR_TCG2_DISABLE_ENDORSEMENT_ENABLE_STORAGE_HIERARCHY), value = TCG2_PHYSICAL_PRESENCE_DISABLE_ENDORSEMENT_ENABLE_STORAGE_HIERARCHY, flags = RESET_REQUIRED;
140 endoneof;
141
142 suppressif NOT questionref(Tpm2Operation) == TCG2_PHYSICAL_PRESENCE_SET_PCR_BANKS;
143 numeric name = Tpm2OperationParameter,
144 questionid = KEY_TPM2_OPERATION_PARAMETER,
145 prompt = STRING_TOKEN(STR_TCG2_OPERATION_PARAMETER),
146 help = STRING_TOKEN(STR_TCG2_OPERATION_PARAMETER_HELP),
147 flags = DISPLAY_UINT_HEX | INTERACTIVE | NUMERIC_SIZE_4,
148 minimum = 0,
149 maximum = 0xFFFFFFFF,
150 step = 0,
151 default = 0,
152 endnumeric;
153 endif;
154
155 subtitle text = STRING_TOKEN(STR_NULL);
156 subtitle text = STRING_TOKEN(STR_TCG2_CONFIGURATION);
157
158 text
159 help = STRING_TOKEN(STR_TCG2_SUPPORTED_EVENT_LOG_FORMAT_HELP),
160 text = STRING_TOKEN(STR_TCG2_SUPPORTED_EVENT_LOG_FORMAT),
161 text = STRING_TOKEN(STR_TCG2_SUPPORTED_EVENT_LOG_FORMAT_CONTENT);
162
163 text
164 help = STRING_TOKEN(STR_TCG2_HASH_ALGO_BITMAP_HELP),
165 text = STRING_TOKEN(STR_TCG2_HASH_ALGO_BITMAP),
166 text = STRING_TOKEN(STR_TCG2_HASH_ALGO_BITMAP_CONTENT);
167
168 text
169 help = STRING_TOKEN(STR_TCG2_NUMBER_OF_PCR_BANKS_HELP),
170 text = STRING_TOKEN(STR_TCG2_NUMBER_OF_PCR_BANKS),
171 text = STRING_TOKEN(STR_TCG2_NUMBER_OF_PCR_BANKS_CONTENT);
172
173 text
174 help = STRING_TOKEN(STR_TCG2_ACTIVE_PCR_BANKS_HELP),
175 text = STRING_TOKEN(STR_TCG2_ACTIVE_PCR_BANKS),
176 text = STRING_TOKEN(STR_TCG2_ACTIVE_PCR_BANKS_CONTENT);
177
178 subtitle text = STRING_TOKEN(STR_NULL);
179
180 suppressif ideqval TCG2_CONFIGURATION_INFO.Sha1Supported == 0;
181 checkbox name = TCG2ActivatePCRBank0,
182 questionid = KEY_TPM2_PCR_BANKS_REQUEST_0,
183 prompt = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA1),
184 help = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA1_HELP),
185 flags = INTERACTIVE | RESET_REQUIRED,
186 default = 1,
187 endcheckbox;
188 endif;
189
190 suppressif ideqval TCG2_CONFIGURATION_INFO.Sha256Supported == 0;
191 checkbox name = TCG2ActivatePCRBank1,
192 questionid = KEY_TPM2_PCR_BANKS_REQUEST_1,
193 prompt = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA256),
194 help = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA256_HELP),
195 flags = INTERACTIVE | RESET_REQUIRED,
196 default = 0,
197 endcheckbox;
198 endif;
199
200 suppressif ideqval TCG2_CONFIGURATION_INFO.Sha384Supported == 0;
201 checkbox name = TCG2ActivatePCRBank2,
202 questionid = KEY_TPM2_PCR_BANKS_REQUEST_2,
203 prompt = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA384),
204 help = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA384_HELP),
205 flags = INTERACTIVE | RESET_REQUIRED,
206 default = 0,
207 endcheckbox;
208 endif;
209
210 suppressif ideqval TCG2_CONFIGURATION_INFO.Sha512Supported == 0;
211 checkbox name = TCG2ActivatePCRBank3,
212 questionid = KEY_TPM2_PCR_BANKS_REQUEST_3,
213 prompt = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA512),
214 help = STRING_TOKEN(STR_TCG2_PCR_BANK_SHA512_HELP),
215 flags = INTERACTIVE | RESET_REQUIRED,
216 default = 0,
217 endcheckbox;
218 endif;
219
220 suppressif ideqval TCG2_CONFIGURATION_INFO.Sm3Supported == 0;
221 checkbox name = TCG2ActivatePCRBank4,
222 questionid = KEY_TPM2_PCR_BANKS_REQUEST_4,
223 prompt = STRING_TOKEN(STR_TCG2_PCR_BANK_SM3_256),
224 help = STRING_TOKEN(STR_TCG2_PCR_BANK_SM3_256_HELP),
225 flags = INTERACTIVE | RESET_REQUIRED,
226 default = 0,
227 endcheckbox;
228 endif;
229
230 endif;
231
232 endform;
233
234 endformset;