Fix a bug about the “VendorKey” variable update logic.

Signed-off-by: Fu Siyuan <siyuan.fu@intel.com>
Reviewed-by: Ye Ting <ting.ye@intel.com>
Reviewed-by: Dong Guo <guo.dong@intel.com>
git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@14746 6f19259b-4bc3-4df7-8a09-765794883524

diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
index 1f930e8a11e820d1dbe83025bf6c126c22675f21..71de272bf2e5f6dd0848a4b255927e1f3ca68252 100644 (file)
--- a/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
+++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/AuthService.c
@@ -1089,7 +1089,7 @@ ProcessVarWithPk (
       return Status;\r
     }\r
 \r
-    if (mPlatformMode != SETUP_MODE) {\r
+    if (mPlatformMode != SETUP_MODE || IsPk) {\r
       Status = VendorKeyIsModified ();\r
     }\r
   } else if (mPlatformMode == USER_MODE) {\r