X-Git-Url: https://git.proxmox.com/?p=mirror_edk2.git;a=blobdiff_plain;f=SecurityPkg%2FSecurityPkg.dec;h=288897671989077083a2378818b523f56a089843;hp=8cf9b39f73346f0c83b7e13161b1e978c856e810;hb=675723cbcaa67746062d8af9af16f5d342ba12f6;hpb=68fc0c7319d9c72e2f2e7fffdf9e1e8fb1e272d1 diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec index 8cf9b39f73..2888976719 100644 --- a/SecurityPkg/SecurityPkg.dec +++ b/SecurityPkg/SecurityPkg.dec @@ -2,7 +2,7 @@ # This package includes the security drivers, defintions(including PPIs/PROTOCOLs/GUIDs # and library classes) and libraries instances. # -# Copyright (c) 2009 - 2013, Intel Corporation. All rights reserved.
+# Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.
# This program and the accompanying materials are licensed and made available under # the terms and conditions of the BSD License which accompanies this distribution. # The full text of the license may be found at @@ -17,14 +17,14 @@ DEC_SPECIFICATION = 0x00010005 PACKAGE_NAME = SecurityPkg PACKAGE_GUID = 24369CAC-6AA6-4fb8-88DB-90BF061668AD - PACKAGE_VERSION = 0.92 + PACKAGE_VERSION = 0.93 [Includes] Include [LibraryClasses] ## @libraryclass Definitions for common TPM commands as library API for TPM - # module use. + # module use. HashLib|Include/Library/HashLib.h PlatformSecureLib|Include/Library/PlatformSecureLib.h TcgPhysicalPresenceLib|Include/Library/TcgPhysicalPresenceLib.h @@ -182,67 +182,67 @@ [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx] ## This PCD indicates whether to set TPM physicalPresenceLifetimeLock bit. - ## Once this bit is set, it can not be cleared (It is locked for TPM life time). + # Once this bit is set, it can not be cleared (It is locked for TPM life time). gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceLifetimeLock|FALSE|BOOLEAN|0x00010003 [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx] ## This PCD is used to specify the default value for physicalPresenceCMDEnable bit when setting physicalPresenceLifetimeLock bit. - ## If PcdPhysicalPresenceCmdEnable is set to TRUE, physicalPresenceCMDEnable bit will be set, else this bit will be cleared. + # If PcdPhysicalPresenceCmdEnable is set to TRUE, physicalPresenceCMDEnable bit will be set, else this bit will be cleared. gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceCmdEnable|TRUE|BOOLEAN|0x00010004 [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx] ## This PCD is used to specify the default value for physicalPresenceHWEnable bit when setting physicalPresenceLifetimeLock bit. - ## If PcdPhysicalPresenceHwEnable is set to TRUE, physicalPresenceHWEnable bit will be set, else this bit will be cleared. + # If PcdPhysicalPresenceHwEnable is set to TRUE, physicalPresenceHWEnable bit will be set, else this bit will be cleared. gEfiSecurityPkgTokenSpaceGuid.PcdPhysicalPresenceHwEnable|TRUE|BOOLEAN|0x00010005 [PcdsFixedAtBuild, PcdsPatchableInModule, PcdsDynamic, PcdsDynamicEx] ## This PCD indicates if debugger exists. gEfiSecurityPkgTokenSpaceGuid.PcdFirmwareDebuggerInitialized|FALSE|BOOLEAN|0x00010009 - ## This PCD indicates the TPM2 initializatin policy. - ## 0: No initialization needed - most likely used for chipset SRTM sloution, in which TPM is already initialized. - ## 1: Initialization needed. + ## This PCD indicates the TPM2 initialization policy. + # 0: No initialization needed - most likely used for chipset SRTM solution, in which TPM is already initialized. + # 1: Initialization needed. gEfiSecurityPkgTokenSpaceGuid.PcdTpm2InitializationPolicy|1|UINT8|0x0001000A - ## This PCD indicates the TPM initializatin policy. - ## 0: No initialization needed - most likely used for chipset SRTM sloution, in which TPM is already initialized. - ## 1: Initialization needed. + ## This PCD indicates the TPM initialization policy. + # 0: No initialization needed - most likely used for chipset SRTM solution, in which TPM is already initialized. + # 1: Initialization needed. gEfiSecurityPkgTokenSpaceGuid.PcdTpmInitializationPolicy|1|UINT8|0x0001000B ## This PCD indicates the TPM2 SelfTest policy. - ## 0: No SelfTest needed - most likely used for fTPM, because it might already be tested. - ## 1: SelfTest needed. + # 0: No SelfTest needed - most likely used for fTPM, because it might already be tested. + # 1: SelfTest needed. gEfiSecurityPkgTokenSpaceGuid.PcdTpm2SelfTestPolicy|1|UINT8|0x0001000C ## This PCD indicates the TPM2 SCRTM policy. - ## 0: No SCRTM needed - In this case, it is already done. - ## 1: SCRTM done by BIOS. + # 0: No SCRTM needed - In this case, it is already done. + # 1: SCRTM done by BIOS. gEfiSecurityPkgTokenSpaceGuid.PcdTpm2ScrtmPolicy|1|UINT8|0x0001000D ## This PCD indicates the TPM SCRTM policy. - ## 0: No SCRTM needed - In this case, it is already done. - ## 1: SCRTM done by BIOS. + # 0: No SCRTM needed - In this case, it is already done. + # 1: SCRTM done by BIOS. gEfiSecurityPkgTokenSpaceGuid.PcdTpmScrtmPolicy|1|UINT8|0x0001000E ## Guid name to identify TPM instance - ## TPM_DEVICE_INTERFACE_NONE means disable - ## TPM_DEVICE_INTERFACE_TPM12 means TPM1.2 DTPM - ## TPM_DEVICE_INTERFACE_DTPM2 means TPM2 DTPM + # TPM_DEVICE_INTERFACE_NONE means disable + # TPM_DEVICE_INTERFACE_TPM12 means TPM1.2 DTPM + # TPM_DEVICE_INTERFACE_DTPM2 means TPM2 DTPM gEfiSecurityPkgTokenSpaceGuid.PcdTpmInstanceGuid |{ 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 }|VOID*|0x0001000F ## This PCD indicates the TPM2 Hash mask. - ## BIT0: SHA1 - ## BIT1: SHA256 - ## BIT2: SHA384 - ## BIT3: SHA512 - ## If this bit is set, that means this algorithm is needed to extend to PCR. - ## If this bit is clear, that means this algorithm is NOT needed to extend to PCR. - ## 0xFFFFFFFF means extend all. + # BIT0: SHA1 + # BIT1: SHA256 + # BIT2: SHA384 + # BIT3: SHA512 + # If this bit is set, that means this algorithm is needed to extend to PCR. + # If this bit is clear, that means this algorithm is NOT needed to extend to PCR. + # 0xFFFFFFFF means extend all. gEfiSecurityPkgTokenSpaceGuid.PcdTpm2HashMask|0xFFFFFFFF|UINT32|0x00010010 ## This PCD indicates if BIOS auto detect TPM1.2 or dTPM2.0. - ## 0: No auto detection. - ## 1: Auto detection. + # 0: No auto detection. + # 1: Auto detection. gEfiSecurityPkgTokenSpaceGuid.PcdTpmAutoDetection|TRUE|BOOLEAN|0x00010011 ## This PCD indicates TPM base address.