SecurityPkg: INF/DEC file updates to EDK II packages

[mirror_edk2.git] / SecurityPkg / SecurityPkg.dec

diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec
index f2b3ac66effcc39149538a32dce617c505062e02..1d44095af46f62bdd2ea8db1e1ba0fa862f26802 100644 (file)
--- a/SecurityPkg/SecurityPkg.dec
+++ b/SecurityPkg/SecurityPkg.dec
@@ -216,10 +216,6 @@
   # IMAGE_FROM_FIXED_MEDIA                0x00000010\r
   gEfiSecurityPkgTokenSpaceGuid.PcdDeferImageLoadPolicy|0x0000001F|UINT32|0x0000004\r
   \r
-  ## The token file name used to save credential in USB credential provider driver.\r
-  #  The specified file should be saved at the root directory of USB storage disk.\r
-  gEfiSecurityPkgTokenSpaceGuid.PcdFixedUsbCredentialProviderTokenFileName|L"Token.bin"|VOID*|0x00000005\r
-\r
   ## The size of Append variable buffer. This buffer is reserved for runtime use, OS can append data into one existing variable.\r
   gEfiSecurityPkgTokenSpaceGuid.PcdMaxAppendVariableSize|0x2000|UINT32|0x30000005  \r
 \r
@@ -229,14 +225,12 @@
   #  If 1, TCG platform type is server.\r
   gEfiSecurityPkgTokenSpaceGuid.PcdTpmPlatformClass|0|UINT8|0x00000006\r
 \r
-  ## The PCD is used to control whether to support hiding the TPM.\r
-  #  If TRUE, PcdHideTpm controls whether to hide the TPM.\r
-  gEfiSecurityPkgTokenSpaceGuid.PcdHideTpmSupport|FALSE|BOOLEAN|0x00000007\r
+[PcdsFixedAtBuild, PcdsPatchableInModule]\r
+  ## Null-terminated Unicode string of the file name that is the default name to save USB credential.\r
+  #  The specified file should be saved at the root directory of USB storage disk.\r
+  # @Prompt File name to save credential.\r
+  gEfiSecurityPkgTokenSpaceGuid.PcdFixedUsbCredentialProviderTokenFileName|L"Token.bin"|VOID*|0x00000005\r
   \r
-[PcdsDynamic, PcdsDynamicEx]\r
-  ## The PCD is used to control whether to hide the TPM.\r
-  gEfiSecurityPkgTokenSpaceGuid.PcdHideTpm|FALSE|BOOLEAN|0x00010002\r
-\r
 [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx]\r
   ## This PCD indicates the presence or absence of the platform operator.\r
   gEfiSecurityPkgTokenSpaceGuid.PcdTpmPhysicalPresence|TRUE|BOOLEAN|0x00010001\r
@@ -308,3 +302,10 @@
 \r
   ## This PCD indicates TPM base address.\r
   gEfiSecurityPkgTokenSpaceGuid.PcdTpmBaseAddress|0xFED40000|UINT64|0x00010012\r
+\r
+  ## Provides one or more SHA 256 Hashes of the RSA 2048 public keys used to verify Recovery and Capsule Update images\r
+  #\r
+  # @Prompt One or more SHA 256 Hashes of RSA 2048 bit public keys used to verify Recovery and Capsule Update images\r
+  #\r
+  gEfiSecurityPkgTokenSpaceGuid.PcdRsa2048Sha256PublicKeyBuffer|{0x91, 0x29, 0xc4, 0xbd, 0xea, 0x6d, 0xda, 0xb3, 0xaa, 0x6f, 0x50, 0x16, 0xfc, 0xdb, 0x4b, 0x7e, 0x3c, 0xd6, 0xdc, 0xa4, 0x7a, 0x0e, 0xdd, 0xe6, 0x15, 0x8c, 0x73, 0x96, 0xa2, 0xd4, 0xa6, 0x4d}|VOID*|0x00010013\r
+    
\ No newline at end of file