1. Reset system when user changes secure boot state in secure boot configuration...

[mirror_edk2.git] / SecurityPkg / Include / Guid / AuthenticatedVariableFormat.h

diff --git a/SecurityPkg/Include/Guid/AuthenticatedVariableFormat.h b/SecurityPkg/Include/Guid/AuthenticatedVariableFormat.h
index f18f4aa7eb44eaa76b10e7ac44a16f84aa3c5bf6..da71e774efea8a89e60e38dd91bdf25e34cadde4 100644 (file)
--- a/SecurityPkg/Include/Guid/AuthenticatedVariableFormat.h
+++ b/SecurityPkg/Include/Guid/AuthenticatedVariableFormat.h
@@ -29,7 +29,9 @@ extern EFI_GUID gEfiAuthenticatedVariableGuid;
 extern EFI_GUID gEfiSecureBootEnableDisableGuid;\r
 \r
 ///\r
-/// "SecureBootEnable" variable for the Secure boot feature enable/disable.\r
+/// "SecureBootEnable" variable for the Secure Boot feature enable/disable.\r
+/// This variable is used for allowing a physically present user to disable\r
+/// Secure Boot via firmware setup without the possession of PKpriv.\r
 ///\r
 #define EFI_SECURE_BOOT_ENABLE_NAME      L"SecureBootEnable"\r
 #define SECURE_BOOT_ENABLE               1\r