- This function detects whether a secure platform-specific method to clear PK(Platform Key)\r
- is configured by platform owner. This method is provided for users force to clear PK \r
- in case incorrect enrollment mis-haps.\r
- \r
- UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using \r
- a secure platform-specific method. In this case, the global variable SetupMode \r
- must also be updated to 1.\r
+ This function provides a platform-specific method to detect whether the platform\r
+ is operating by a physically present user. \r
+\r
+ Programmatic changing of platform security policy (such as disable Secure Boot,\r
+ or switch between Standard/Custom Secure Boot mode) MUST NOT be possible during\r
+ Boot Services or after exiting EFI Boot Services. Only a physically present user\r
+ is allowed to perform these operations.\r