SETTINGS Settings;\r
UINT8 *PkKek1;\r
UINTN SizeOfPkKek1;\r
+ BOOLEAN NoDefault;\r
+\r
+ if (Argc == 2 && StrCmp (Argv[1], L"--no-default") == 0) {\r
+ NoDefault = TRUE;\r
+ } else {\r
+ NoDefault = FALSE;\r
+ }\r
\r
//\r
// Prepare for failure.\r
//\r
// Enroll db.\r
//\r
- Status = EnrollListOfCerts (\r
- EFI_IMAGE_SECURITY_DATABASE,\r
- &gEfiImageSecurityDatabaseGuid,\r
- &gEfiCertX509Guid,\r
- mMicrosoftPca, mSizeOfMicrosoftPca, &gMicrosoftVendorGuid,\r
- mMicrosoftUefiCa, mSizeOfMicrosoftUefiCa, &gMicrosoftVendorGuid,\r
- NULL);\r
+ if (NoDefault) {\r
+ Status = EnrollListOfCerts (\r
+ EFI_IMAGE_SECURITY_DATABASE,\r
+ &gEfiImageSecurityDatabaseGuid,\r
+ &gEfiCertX509Guid,\r
+ PkKek1, SizeOfPkKek1, &gEfiCallerIdGuid,\r
+ NULL);\r
+ } else {\r
+ Status = EnrollListOfCerts (\r
+ EFI_IMAGE_SECURITY_DATABASE,\r
+ &gEfiImageSecurityDatabaseGuid,\r
+ &gEfiCertX509Guid,\r
+ mMicrosoftPca, mSizeOfMicrosoftPca, &gMicrosoftVendorGuid,\r
+ mMicrosoftUefiCa, mSizeOfMicrosoftUefiCa, &gMicrosoftVendorGuid,\r
+ NULL);\r
+ }\r
if (EFI_ERROR (Status)) {\r
goto FreePkKek1;\r
}\r
//\r
// Enroll KEK.\r
//\r
- Status = EnrollListOfCerts (\r
- EFI_KEY_EXCHANGE_KEY_NAME,\r
- &gEfiGlobalVariableGuid,\r
- &gEfiCertX509Guid,\r
- PkKek1, SizeOfPkKek1, &gEfiCallerIdGuid,\r
- mMicrosoftKek, mSizeOfMicrosoftKek, &gMicrosoftVendorGuid,\r
- NULL);\r
+ if (NoDefault) {\r
+ Status = EnrollListOfCerts (\r
+ EFI_KEY_EXCHANGE_KEY_NAME,\r
+ &gEfiGlobalVariableGuid,\r
+ &gEfiCertX509Guid,\r
+ PkKek1, SizeOfPkKek1, &gEfiCallerIdGuid,\r
+ NULL);\r
+ } else {\r
+ Status = EnrollListOfCerts (\r
+ EFI_KEY_EXCHANGE_KEY_NAME,\r
+ &gEfiGlobalVariableGuid,\r
+ &gEfiCertX509Guid,\r
+ PkKek1, SizeOfPkKek1, &gEfiCallerIdGuid,\r
+ mMicrosoftKek, mSizeOfMicrosoftKek, &gMicrosoftVendorGuid,\r
+ NULL);\r
+ }\r
if (EFI_ERROR (Status)) {\r
goto FreePkKek1;\r
}\r