7.5 Configuration

7.5 Configuration

This section defines the configurable items that must be available to achieve Stage IV functionality.
These definitions may be both source and binary in nature.
Component
Name
Producer
Consumer
Purpose
Porting Category
Post Build
PK
Board
Core
PK variable
Platform Policy: UEFI Secure Boot
KEK
Board
Core
KEK variable
Platform Policy: UEFI Secure Boot
db
Board
Core
db variable
Platform Policy: UEFI Secure Boot
dbx
Board
Core
dbx variable
Platform Policy: UEFI Secure Boot
PcdTpmInstance Guid
GUID
Board
Core
Select TPM instance
Platform Policy: TCG trusted boot
PcdTpm2 InitializationPolicy
UINT8
Board
Core
Choose if TPM driver need send Tpm2Init.
Platform Policy: TCG trusted boot
PcdTpm2Self TestPolicy
UINT8
Board
Core
Choose if TPM driver need send Tpm2SelfTest
Platform Policy: TCG trusted boot
PRE_MEM_SILICON_POLICY
MOR data
Board
Silicon
The board code consumes the MOR variable and pass it to MemoryInit module as policy
Platform Policy: TCG MOR
L"MemoryOverwrite RequestControl"
MOR Variable
OS
Board
OS indicates to UEFI FW the MOR request.
Platform Policy: TCG MOR
PcdVTdPolicy PropertyMask
VTd policy mask
Platform
Core
VTd policy
Platform Policy: DMA

Table 62 Stage V Security Configuration

PCD
Purpose
gEfiMdeModulePkgTokenSpaceGuid. PcdFlashNvStorageVariableBase
Base address of the NV variable range in flash device.
gEfiMdeModulePkgTokenSpaceGuid. PcdFlashNvStorageVariableSize
Size of the non-volatile variable range. Note that this value should less than or equal to PcdFlashNvStorageFtwSpareSize.
gEfiMdeModulePkgTokenSpaceGuid. PcdFlashNvStorageFtwWorkingBase
Base address of the FTW working block range in flash device.
gEfiMdeModulePkgTokenSpaceGuid. PcdFlashNvStorageFtwWorkingSize
Size of the FTW working block range.
gEfiMdeModulePkgTokenSpaceGuid. PcdFlashNvStorageFtwSpareBase
Base address of the FTW spare block range in flash device. Note that this value should be block size aligned.
gEfiMdeModulePkgTokenSpaceGuid. PcdFlashNvStorageFtwSpareSize
Size of the FTW spare block range. Note that this value should larger than PcdFlashNvStorageVariableSize and block size aligned.
gMinPlatformPkgTokenSpaceGuid. PcdFlashFvSecurityBase
Security FV base address.
gMinPlatformPkgTokenSpaceGuid. PcdFlashFvSecuritySize
Security FV size.

Table 63 Stage V Flash Map Configuration PCDs

PCD
Purpose
gMinPlatformModuleTokenSpaceGuid.PcdSmiHandlerProfileEnable
Enable SMI handler profile.
gMinPlatformModuleTokenSpaceGuid.PcdTpm2Enable
Enable TPM2.
gMinPlatformModuleTokenSpaceGuid.PcdUefiSecureBootEnable
Enable UEFI Secure Boot.

Table 64 Stage V Feature Configuration