AuthenticatedVariableFormat.h 2.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869
  1. /** @file
  2. The variable data structures are related to EDKII-specific
  3. implementation of UEFI authenticated variables.
  4. AuthenticatedVariableFormat.h defines variable data headers
  5. and variable storage region headers that has been moved to
  6. VariableFormat.h.
  7. Copyright (c) 2009 - 2016, Intel Corporation. All rights reserved.<BR>
  8. SPDX-License-Identifier: BSD-2-Clause-Patent
  9. **/
  10. #ifndef __AUTHENTICATED_VARIABLE_FORMAT_H__
  11. #define __AUTHENTICATED_VARIABLE_FORMAT_H__
  12. #include <Guid/VariableFormat.h>
  13. #define EFI_SECURE_BOOT_ENABLE_DISABLE \
  14. { 0xf0a30bc7, 0xaf08, 0x4556, { 0x99, 0xc4, 0x0, 0x10, 0x9, 0xc9, 0x3a, 0x44 } }
  15. extern EFI_GUID gEfiSecureBootEnableDisableGuid;
  16. extern EFI_GUID gEfiCertDbGuid;
  17. extern EFI_GUID gEfiCustomModeEnableGuid;
  18. extern EFI_GUID gEfiVendorKeysNvGuid;
  19. ///
  20. /// "SecureBootEnable" variable for the Secure Boot feature enable/disable.
  21. /// This variable is used for allowing a physically present user to disable
  22. /// Secure Boot via firmware setup without the possession of PKpriv.
  23. ///
  24. /// GUID: gEfiSecureBootEnableDisableGuid
  25. ///
  26. /// Format: UINT8
  27. ///
  28. #define EFI_SECURE_BOOT_ENABLE_NAME L"SecureBootEnable"
  29. #define SECURE_BOOT_ENABLE 1
  30. #define SECURE_BOOT_DISABLE 0
  31. ///
  32. /// "CustomMode" variable for two Secure Boot modes feature: "Custom" and "Standard".
  33. /// Standard Secure Boot mode is the default mode as UEFI Spec's description.
  34. /// Custom Secure Boot mode allows for more flexibility as specified in the following:
  35. /// Can enroll or delete PK without existing PK's private key.
  36. /// Can enroll or delete KEK without existing PK's private key.
  37. /// Can enroll or delete signature from DB/DBX without KEK's private key.
  38. ///
  39. /// GUID: gEfiCustomModeEnableGuid
  40. ///
  41. /// Format: UINT8
  42. ///
  43. #define EFI_CUSTOM_MODE_NAME L"CustomMode"
  44. #define CUSTOM_SECURE_BOOT_MODE 1
  45. #define STANDARD_SECURE_BOOT_MODE 0
  46. ///
  47. /// "VendorKeysNv" variable to record the out of band secure boot keys modification.
  48. /// This variable is a read-only NV variable that indicates whether someone other than
  49. /// the platform vendor has used a mechanism not defined by the UEFI Specification to
  50. /// transition the system to setup mode or to update secure boot keys.
  51. ///
  52. /// GUID: gEfiVendorKeysNvGuid
  53. ///
  54. /// Format: UINT8
  55. ///
  56. #define EFI_VENDOR_KEYS_NV_VARIABLE_NAME L"VendorKeysNv"
  57. #define VENDOR_KEYS_VALID 1
  58. #define VENDOR_KEYS_MODIFIED 0
  59. #endif // __AUTHENTICATED_VARIABLE_FORMAT_H__