SecurityPkg/HddPassword: Add Security feature set support for ATA dev
authorHao Wu <hao.a.wu@intel.com>
Tue, 15 Jan 2019 08:33:09 +0000 (16:33 +0800)
committerHao Wu <hao.a.wu@intel.com>
Fri, 22 Feb 2019 00:20:08 +0000 (08:20 +0800)
commite8959f81003ccd80317b820f00287897191796ee
treee437fc6af3b9e3220e8978f1e95abee0fe9c3f42
parenta3efbc29c45183fe69bcb311c2d974ddc4e7c00a
SecurityPkg/HddPassword: Add Security feature set support for ATA dev

REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1529

This commit will add the 'Security feature set' support for ATA devices.

According to the AT Attachment 8 - ATA/ATAPI Command Set (ATA8-ACS)
specification, the Security feature set is an optional feature. In
summary, the feature is a password system that restricts access to user
data stored on an ATA device. A more detailed introduction of this feature
can be referred from the ATA8-ACS spec.

The HddPassword driver is composed of 2 parts:
* A DXE driver and
* A PEI driver

The DXE driver consumes EFI_ATA_PASS_THRU_PROTOCOL instances and installs
an HII GUI to manage the devices. If the managing device supports Security
feature set, the HII page will provide the user with the ability to
set/update/disable the password for this device. Also, if a password is
being set via the Security feature set, a popup window will show during
boot requesting the user to input password.

Another feature supported by this driver is that for those managing
devices with password set, they will be automatically unlocked during the
S3 resume. This is done by the co-work of the DXE driver and the PEI
driver:

The DXE driver will save the password and the identification information
for these devices into a LockBox, which is only allowed to restore during
S3 resume.

The PEI driver, during S3 resume, will restore the content in the LockBox
and will consume EDKII_PEI_ATA_PASS_THRU_PPI instances to unlock devices.

Cc: Chao Zhang <chao.b.zhang@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Ray Ni <ray.ni@intel.com>
Reviewed-by: Eric Dong <eric.dong@intel.com>
SecurityPkg/HddPassword/HddPassword.vfr [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordCommon.h [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordDxe.c [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordDxe.h [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordDxe.inf [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordHiiDataStruc.h [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordPei.c [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordPei.h [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordPei.inf [new file with mode: 0644]
SecurityPkg/HddPassword/HddPasswordStrings.uni [new file with mode: 0644]
SecurityPkg/SecurityPkg.dsc