[202405][Rebase&&FF] Everything MS Changes #311
Commits on Aug 10, 2024
-
SecurityPkg: Update DSC to include additional libraries and PCDs
Adds the following: + SecurityPkg/Library/DxeTpmMeasurementLib/DxeTpmMeasurementLib.inf + SecurityPkg/Library/PlatformSecureLibNull/PlatformSecureLibNull.inf + SecurityPkg/Library/Tcg2PpVendorLibNull/Tcg2PpVendorLibNull.inf + SecurityPkg/Library/TcgPpVendorLibNull/TcgPpVendorLibNull.inf -
SecurityPkg: Add Debug Message to show the TPM2 PCR bank info
Add a debug message to show the TPM2 PCR bank info in Tcg2Dxe. Prints out both the TpmHashalgorithmBitmap and the Pcr banks.
-
SecurityPkg: Check for Tpm2GetCapabilitySupportedAndActivePcrs()
This replaces a assert for a proper runtime check for the status of Tpm2GetCapabilitySupportedAndActivePcrs()
-
SecurityPkg: Add support for checking if hash algorithms are supported
This commit adds support to Tpm2Help.c to query the TPM for supported hash algorithms.
-
SecurityPkg: Create Tcg2PreUefiEventLogLib interface
This change describes the interface that should be published by instances of the Tcg2PreUefiEventLogLib. This library can be used to publish TPM EventLog entries for measurements that may have been made prior to driver initialization
-
SecurityPkg: Do not allow SecureBootEnable to override mPlatformMode
Ensures that if SecureBootEnable is found and mPlatformMode is USER_MODE that SecureBootEnable == SECURE_BOOT_MODE_ENABLE.
-
SecurityPkg: Use helper function to display confirmation dialog
The code to display the confirmation dialog is moved to a helper function to make the code more readable and maintainable. This is for DxeTcg2PhysicalPresenceLib.
-
SecurityPkg: Do not allow Flags to bypass confirmation in Production
Adds a flag to disable TCG2 flags from bypassing confirmation in production mode.
-
-
SecurityPkg: Make TPM2_Startup() return an error
The TPM2_Startup() function is called in the Tcg2Pei driver to start the TPM. The function is expected to return an error if the TPM is not in the correct state.
-
SecurityPkg: Override change for DxeTcg2PhysicalPresenceLib.inf
Since the commit: "SecurityPkg: Do not allow Flags to bypass confirmation in Production" modified DxeTcg2PhysicalPresenceLib.inf the override in DxeTcg2PhysicalPresenceMinimumLib.inf needs to be updated to reflect the changes.
