SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy

[mirror_edk2.git] / SecurityPkg / SecurityPkg.dec

diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec
index d5ace6f654498f90365f542eca13f6de4c2bb007..2cb5bfa0acd0ad1b3f09fa905964173eeb38da7e 100644 (file)
--- a/SecurityPkg/SecurityPkg.dec
+++ b/SecurityPkg/SecurityPkg.dec
@@ -342,6 +342,12 @@
   # @Prompt Physical presence of the platform operator.\r
   gEfiSecurityPkgTokenSpaceGuid.PcdTpmPhysicalPresence|TRUE|BOOLEAN|0x00010001\r
 \r
+  ## Indicates whether the TPM2 platform hierarchy will be disabled by using\r
+  #  a random password or by disabling the hierarchy\r
+  #   TRUE  - A random password will be used\r
+  #   FALSE - The hierarchy will be disabled\r
+  gEfiSecurityPkgTokenSpaceGuid.PcdRandomizePlatformHierarchy|TRUE|BOOLEAN|0x00010024\r
+\r
 [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]\r
   ## Indicates whether TPM physical presence is locked during platform initialization.\r
   #  Once it is locked, it can not be unlocked for TPM life time.<BR><BR>\r