Add TPM2 commands which might be used in provision.

[mirror_edk2.git] / SecurityPkg / Include / Library / Tpm2CommandLib.h

diff --git a/SecurityPkg/Include/Library/Tpm2CommandLib.h b/SecurityPkg/Include/Library/Tpm2CommandLib.h
index 6e406fd698d985d88474728963e7b5a2ce23bdd3..c4915496ddb63fd08d4f023b63cba9da2ebb9cad 100644 (file)
--- a/SecurityPkg/Include/Library/Tpm2CommandLib.h
+++ b/SecurityPkg/Include/Library/Tpm2CommandLib.h
@@ -872,6 +872,25 @@ Tpm2PolicySecret (
   OUT     TPMT_TK_AUTH              *PolicyTicket\r
   );\r
 \r
+/**\r
+  This command allows options in authorizations without requiring that the TPM evaluate all of the options.\r
+  If a policy may be satisfied by different sets of conditions, the TPM need only evaluate one set that\r
+  satisfies the policy. This command will indicate that one of the required sets of conditions has been\r
+  satisfied.\r
+\r
+  @param[in] PolicySession      Handle for the policy session being extended.\r
+  @param[in] HashList           the list of hashes to check for a match.\r
+  \r
+  @retval EFI_SUCCESS            Operation completed successfully.\r
+  @retval EFI_DEVICE_ERROR       The command was unsuccessful.\r
+**/\r
+EFI_STATUS\r
+EFIAPI\r
+Tpm2PolicyOR (\r
+  IN TPMI_SH_POLICY           PolicySession,\r
+  IN TPML_DIGEST              *HashList\r
+  );\r
+\r
 /**\r
   This command indicates that the authorization will be limited to a specific command code.\r
 \r