diff options
Diffstat (limited to 'Core/EM/HddSecurity/Hddpassword')
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/ForceHddPassword.c | 158 | ||||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddPassword.c | 2631 | ||||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddPassword.cif | 14 | ||||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddPassword.h | 185 | ||||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddPassword.mak | 96 | ||||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddPassword.sdl | 136 | ||||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddPassword.uni | bin | 0 -> 6918 bytes | |||
| -rw-r--r-- | Core/EM/HddSecurity/Hddpassword/HddSecTokens.c | 79 |
8 files changed, 3299 insertions, 0 deletions
diff --git a/Core/EM/HddSecurity/Hddpassword/ForceHddPassword.c b/Core/EM/HddSecurity/Hddpassword/ForceHddPassword.c new file mode 100644 index 0000000..90c9a4d --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/ForceHddPassword.c @@ -0,0 +1,158 @@ +//********************************************************************** +//********************************************************************** +//** ** +//** (C)Copyright 1985-2010, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Suite 200, Norcross, GA 30093 ** +//** ** +//** Phone: (770)-246-8600 ** +//** ** +//********************************************************************** +//********************************************************************** +//********************************************************************** +// $Header: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/ForceHddPassword.c 2 10/11/10 6:19p Krishnakumarg $ +// +// $Revision: 2 $ +// +// $Date: 10/11/10 6:19p $ +//********************************************************************** +// Revision History +// ---------------- +// $Log: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/ForceHddPassword.c $ +// +// 2 10/11/10 6:19p Krishnakumarg +// [TAG] - EIP 45593 +// [Category] - IMPROVEMENT +// [Severity] - Minor +// [Symptom] - Build Errors in ForceHDDPassword.c on new core 4.6.4.1 +// label +// [RootCause]- IDE_CONTROLLER_PROTOCOL structure defined header not +// included +// [Solution] - Include the respective header(PIDEController.h) +// [Files] - ForceHddPassword.c +// +// 1 8/19/10 2:44a Rameshr +// Issue:Need do HDD PSW reset when warmboot +// EIP 40528 +// +// +//********************************************************************** + +//<AMI_FHDR_START> +//---------------------------------------------------------------------------- +// +// Name: ForceHddPassword.c +// +// Description: Send Disable Software Preservation command when the +// FORCE_HDD_PASSWORD_PROMPT token is set to 1 +// +//---------------------------------------------------------------------------- +//<AMI_FHDR_END> + +#include "Efi.h" +#include "token.h" +#include <AmiLib.h> +#include <AmiDxeLib.h> +#include "Protocol\PciIo.h" +#include "Protocol\DevicePath.h" +#include "protocol\DriverBinding.h" +#include "protocol\BlockIo.h" +#include "Protocol\PDiskInfo.h" +#include "Protocol\PIDEController.h" +#include "Protocol\PIDEBus.h" +#include "Protocol\PAhciBus.h" +#include "Protocol\PIDEBus.h" + + +EFI_RUNTIME_SERVICES *gRT; +EFI_BOOT_SERVICES *gBS; + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: DisableSoftwarePreservation +// +// Description: Send the Disable software Preservation +// +// Input: None +// +// Output: None +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID +DisableSoftwarePreservation ( ) +{ +#if FORCE_HDD_PASSWORD_PROMPT + UINTN HandleCount; + EFI_HANDLE *HandleBuffer; + UINT8 i; + AHCI_BUS_PROTOCOL *AhciBusInterface; + EFI_GUID gEfiAhciBusProtocolGuid = AHCI_BUS_INIT_PROTOCOL_GUID; + SATA_DEVICE_INTERFACE *SataDeviceInterface; + DLINK *dlink; + COMMAND_STRUCTURE CommandStructure = {0}; + EFI_STATUS Status; + + + Status = gBS->LocateHandleBuffer ( + ByProtocol, + &gEfiAhciBusProtocolGuid, + NULL, + &HandleCount, + &HandleBuffer + ); + + if(EFI_ERROR(Status) || HandleCount == 0 ) { + return; + } + + // + // Issue Disable Software Preservation command all the Sata Devices connected. + // + for (i = 0; i < HandleCount; i++) { + Status = gBS->HandleProtocol (HandleBuffer[i], &gEfiAhciBusProtocolGuid, &AhciBusInterface); + if (!EFI_ERROR(Status)) { + dlink = AhciBusInterface->SataDeviceList.pHead; + if (dlink){ + do { + SataDeviceInterface = OUTTER(dlink, SataDeviceLink, SATA_DEVICE_INTERFACE); + + if ((SataDeviceInterface->IdentifyData.Reserved_76_79[0] != 0xFFFF )&& + (SataDeviceInterface->IdentifyData.Reserved_76_79[2] & 0x0040)&& // Software Preservation support + (SataDeviceInterface->IdentifyData.Security_Status_128 & 0x0002)&& // Security enabled + (!(SataDeviceInterface->IdentifyData.Security_Status_128 & 0x0004))) { // Security not locked + + // + // Send Disable Software Preservation command. + // + CommandStructure.Features = DISABLE_SATA2_SOFTPREV; + CommandStructure.SectorCount = 6; + CommandStructure.Command = SET_FEATURE_COMMAND; + Status = AhciBusInterface->ExecuteNonDataCommand(SataDeviceInterface, CommandStructure); + } + dlink = dlink-> pNext; + }while (dlink); + } + } + } +#endif + return; +} + + +//********************************************************************** +//********************************************************************** +//** ** +//** (C)Copyright 1985-2010, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Suite 200, Norcross, GA 30093 ** +//** ** +//** Phone: (770)-246-8600 ** +//** ** +//********************************************************************** +//********************************************************************** +//**********************************************************************
\ No newline at end of file diff --git a/Core/EM/HddSecurity/Hddpassword/HddPassword.c b/Core/EM/HddSecurity/Hddpassword/HddPassword.c new file mode 100644 index 0000000..1de9072 --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddPassword.c @@ -0,0 +1,2631 @@ +//**************************************************************************** +//**************************************************************************** +//** ** +//** (C)Copyright 1985-2014, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Norcross, GA 30093 ** +//** ** +//** Phone (770)-246-8600 ** +//** ** +//**************************************************************************** +//**************************************************************************** +// $Header: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddPassword.c 43 3/26/15 2:01a Rameshr $ +// +// $Revision: 43 $ +// +// $Date: 3/26/15 2:01a $ +// +//***************************************************************************** +// Revision History +// ---------------- +// $Log: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddPassword.c $ +// +// 43 3/26/15 2:01a Rameshr +// [TAG] EIP208331 +// [Category] New Feature +// [Description] Avoid sending freeze Lock command to the device if the +// HDD already in frozen state +// [Files] HddPassword.c +// +// 42 3/16/15 5:51a Rameshr +// [TAG] EIP208331 +// [Category] Improvement +// [Description] Avoid sending freeze Lock command to the device if the +// HDD already in frozen state +// [Files] IdeSecurity.c, HddPassword.c +// +// 41 9/10/14 3:07a Divyac +// [TAG] EIP182213 +// [Category] Improvement +// [Description] Use System table conout Clearscreen instead of +// ClearScreen() from TSE to avoid active buffer updation. +// [Files] HddPassword.c +// +// 40 9/10/14 2:58a Divyac +// [TAG] EIP181548 +// [Category] Improvement +// [Description] Implement event signaling during HDD Passwords Prompt. +// [Files] HddPassword.c +// HddPassword.h +// +// 39 12/18/13 4:09a Srikantakumarp +// [TAG] EIP127356 +// [Category] Improvement +// [Description] Flash NVRAM seems to cause HDD can't be unlocked when +// S3 resume. +// [Files] IdeSecurity.c, IDESMM.c, HddPassword.c, AhciBus.c, AhciBus.h +// +// 38 6/06/13 4:10a Rameshr +// [TAG] EIP106423 +// [Category] Improvement +// [Description] HddPassword Support in UEFI Raid and Legacy Raid. And +// also taken care where there is no Conin Device avilable in the post +// [Files] IdeSecurity.cif,IdeSecurity.sdl,IdeSecurity.mak,IdeSecurityB +// dsCall.c,HddPassword.c, Ahcibus.c, Pidebus.h +// +// 37 5/29/13 8:08a Srikantakumarp +// [TAG] EIP123088 +// [Category] Improvement +// [Description] Added the Wrapper function to pass HDD status and flag +// to show maximum unlocking attempt is reached. +// [Files] HddPassword.c +// +// 36 4/29/13 2:30a Kapilporwal +// fixing build errors, when tse soruce is not present, from last check-in +// +// 35 4/25/13 9:28a Kapilporwal +// [TAG] EIP108583 +// [Category] New Feature +// [Description] support set HDD password in same page +// [Files] IdeSecurity.cif, IdeSecurity.mak, IdeSecurity.sdl, +// IdeSecurity.uni, IdeSecurityCommon.sd, IdeSecuritySetup.c, +// HddPassword.c, HddPassword.h, HddPassword.mak, HddPassword.sdl +// +// 34 3/25/13 6:01a Rameshr +// [TAG] EIP113655 +// [Category] Improvement +// [Description] Invoke TSEIDEPasswordCheck() function only if password +// is set to the HDD and also to remove the unnecessary save screen in +// IDEPasswordCheck() of HDD security module. +// [Files] HddPassword.c +// +// 33 3/25/13 5:14a Rameshr +// [TAG] EIP117159 +// [Category] Improvement +// [Description] Proper error message displayed when the Password count +// expired +// [Files] HddPassword.c, HddPassword.uni, HddSecTokens.c +// +// 32 9/03/12 1:49a Srilathasc +// [TAG] EIP99649 +// [Category] Improvement +// [Description] Made IDEPasswordUpdateHdd() symmetric with +// IDEPasswordAuthenticateHdd() when +// token SETUP_PASSWORD_NON_CASE_SENSITIVE is set +// +// +// [Files] HddPassword.c +// +// 31 6/07/12 12:34a Jittenkumarp +// [TAG] EIP89271 +// [Category] Bug Fix +// [Symptom] HDD Security string not displayed properly on multilanguage +// [RootCause] Languages not initilized by AMITSE +// [Solution] Languages is now initilized .Hddsecurity string is +// displayed properly for multilanguage. +// +// [Files] HddPassword.c +// +// 30 2/13/12 1:39a Deepthins +// [TAG] EIP81680 +// [Category] Bug Fix +// [Severity] Normal +// [Symptom] The password set for DEFAULT_MASTER_PASSWORD_TAG token is +// not authenticated when the token SETUP_PASSWORD_NON_CASE_SENSITIVE is +// set to 1. +// [RootCause] When the master password is not installed, Master +// password Prompt window should not displayed +// [Solution] Removed master password prompt window, when the master +// password is not installed +// [Files] HddPassword.c +// +// 29 1/10/12 4:41a Deepthins +// [TAG] EIP76872 +// [Category] Improvement +// [Description] If user password are all wrong, then try master +// password(no need to press 'ESC'). +// [Files] HddPassword.c, HddPassword.sdl +// +// 28 11/16/11 1:19a Rameshr +// [TAG] EIP75245 +// [Category] Improvement +// [Description] RegisterHddNotification does not match AMITSE hook +// return values. Modified the function to match the AMITSE hook return +// values. +// [Files] Hddpassword.c +// +// 27 11/09/11 12:30a Rameshr +// [TAG] EIP62381 +// [Category] Improvement +// [Description] SB template version checking added to avoid the build +// error on old SB template project +// [Files] HddPassword.c +// +// 26 11/08/11 3:33a Rameshr +// [TAG] EIP72999 +// [Category] Improvement +// [Description] Modified the function to support the +// OVERRIDE_TSEIDEPasswordCheck SDL token +// [Files] Hddpassword.c +// +// 25 10/11/11 1:41a Rameshr +// [TAG] EIP69244 +// [Category] Improvement +// [Description] The number of retry count for user and master password +// added based on the MAXIMUM_HDD_UNLOCK_ATTEMPTS SDL token value. +// [Files] HddPassword.c , HddPassword.Sdl +// +// 24 10/07/11 7:01a Rajeshms +// [TAG] EIP71205 +// [Description] Idesecurity module throws build error with AMITSE +// Bootonly flavour. +// [Files] HddPassword.c +// +// 23 9/09/11 4:58a Rameshr +// [TAG] - EIP 69521 +// [Category]- IMPROVEMENT +// [Description]- Idesecurity module to be compatible with AMITSE BootOnly +// flavor +// [Files] - HddPassword.c +// +// 22 9/02/11 4:07a Rameshr +// [TAG] - EIP 67674 +// [Category]- IMPROVEMENT +// [Description]- All buffers allocated from heap during password checking +// should be zeroed before freeing - security requirement +// [Files] - HddPassword.c +// +// 21 7/15/11 7:26a Rameshr +// [TAG] - EIP 63320 +// [Category]- BUG FIX +// [Severity]- Minor +// [Symptom] - Port1 HDD's password setting item is disappeared, if the +// device is connected to another controller. +// [RootCause]- When the second controller HDD detected and comes for the +// Password verfication, the already password validated HDD information is +// lost. +// [Solution] - Saved the existing data if it's already password verified +// and added to the new data +// [Files] - Hddpassword.c +// +// 20 6/28/11 6:31a Anandv +// [TAG] EIP62381 +// [Category] Improvement +// [Description] In IdeSecurity Module, display HDD number in Setup +// based on +// results from WhichIde() function of DiskInfoProtocol. +// [Files] HddPassword.c, HddPassword.h, SBDxe.c, PIDEController.h +// +// 19 2/18/11 5:45a Rameshr +// [TAG]- EIP 37975 +// [Category]-IMPROVEMENT +// [Description]- Klocwork Issues II - IDE/Ahci module +// [Files]- HddPassword.c +// +// 18 2/01/11 6:22a Lavanyap +// [TAG] - EIP52585 +// [Category] - BUG FIX +// [Severity] - N/A +// [Symptom] - HDD password can not be disabled in setup menu when turn on +// token "ALL_HDD_SAME_PW" +// [RootCause] - Authenticate HDD only if it is locked,which fails when +// ALL_HDD_SAME_PW is set. +// [Solution] - Removed the code that checks HDD locked state in +// IDEPasswordAuthenticateAllHdd(). +// [Files] - HddPassword.c +// +// 17 1/10/11 9:54a Rameshr +// [TAG] EIP49732 +// [Category] Improvement +// [Description] Build problem Resolved with Old AMITSE version. +// [Files] Build problem Resolved with Old AMITSE version. +// +// 16 1/07/11 12:08a Rameshr +// [TAG]- EIP 49732 +// [Category]-IMPROVEMENT +// [Description]- Supported added for SETUP_PASSWORD_NON_CASE_SENSITIVE +// [Files]- Hddpassword.c +// +// 15 12/28/10 4:31a Lavanyap +// [TAG] - EIP50988 +// [Category] - BUG FIX +// [Severity] - Important +// [Symptom] - Hddpassword doesn't work properly with more than 1 HDD with +// ALL_HDD_SAME_PW set to 0. +// [RootCause] - Not added the AMITSE changes for the implementation of +// ALL_HDD_SAME_PW token. +// [Solution] - Changes in AMITSE module for the implementation of token +// ALL_HDD_SAME_PW moved to AmitseHddpassword. +// [Files] - HddPassword.c +// +// 14 12/07/10 6:36a Rameshr +// [TAG] - EIP 46116 +// [Category]- BUG FIX +// [Severity]- Minor +// [Symptom] - When enter the BIOS Setup :"security" page ,it will hang +// up. +// [RootCause]- 1. Freepool function doesn't have proper input +// 2. Size variable not initilized. +// [Solution] - 1. Removed using gBs pointer and used Lib Function +// 2. Size variable initilized with 0. +// [Files] - Hddpassword.c +// +// 13 8/27/10 2:30p Yul +// [TAG] EIP40151 +// [Category] NEW FEATURE +// [Description] If system has two HDDs, User need set two HDDs password +// separately with master and user password. +// We want to simply the procedure, if user set master or user password, +// it will set two HDDs with same password. +// While un-lock the HDD password, user just need input one Master/User +// password to un-lock HDD. +// [Files] HddPassword.c +// HddPassword.sdl +// IdeSecurity.sd +// IdeSecurity.uni +// Same as v12. No code update. +// +// 12 8/27/10 10:05a Yul +// EIP 40151 - One Master/User password for all attach HDDs +// +// 11 8/27/10 12:15a Rameshr +// [TAG] - EIP 43059 +// [Category]- BUG FIX +// [Severity]- Minor +// [Symptom]- Build Errors in HddPassword.c on non INTEL_IDE_PROTOCOL +// Projects. +// [RootCause]- Hddpassword.c included the PIdebus.h . PIdebus.h uses the +// IDE_CONTROLLER_PROTOCOL protocol. +// [Solution]- Before Pidebus.h included, included the PIDEController.h +// also. . +// [Files] - Hddpassword.c +// +// 10 8/26/10 2:43a Rameshr +// [TAG] - EIP42594 +// [Category]- BUG FIX +// [Severity]- Minor +// [Symptom]- [IdeSecurity]IdeSecConfig variable not set when there is on +// HDD connected +// [RootCause]- IdeSecConfig variable is not set when no HDD is present, +// thus the HDD count value (IdeSecConfig.Count) checking fails in +// IdeSecurity.sd and displays the label always. +// [Solution]- Initialised the structure IdeSecConfig to zero if no HDD is +// present. +// [Files]- HddPassword.c +// +// 9 6/07/10 7:20p Krishnakumarg +// Build error in "4.6.3_HddSecurity_011" label.EIP#39531 +// +// 8 5/21/10 2:58p Aaronp +// Fix for EIP 38473 - Device names are not displayed when built in UEFI +// 2.1 mode +// +// 7 5/11/10 3:57p Krishnakumarg +// Coding standard. +// +// 6 3/29/10 2:24p Yul +// Refer to EIP 36288. +// Once SETUP_SAME_SYS_HDD_PW is ON, AHCI mode fails to boot OS +// with specific Hard Drive. +// +// 5 3/26/10 5:42p Krishnakumarg +// UEFI2.1 compliance change EIP#34744. +// +// 4 3/11/10 3:49a Rameshr +// Issue: Same Structure definied in Hddpassword and Amitse. +// Solution: Amitse created tsecommon.h with all the common definition. +// EIP: 27339 +// +// 3 1/15/10 10:10a Yul +// Coding Standard +// +// 2 9/28/09 4:59p Rameshr +// The data structure AMI_IFR_MSGBOX in HddPassword.h and MessageBox.h are +// not the same +// EIP 27157 +// +// 1 5/01/09 11:09a Rameshr +// Initial Check-in +//*****************************************************************************// + +//<AMI_FHDR_START> +//--------------------------------------------------------------------------- +// +// Name: Hddpassword.c +// +// Description: Provides the Hddpassword Screen support in the setup. +// +//--------------------------------------------------------------------------- +//<AMI_FHDR_END> + +#include "AmiDxeLib.h" +#include "token.h" +#if EFI_SPECIFICATION_VERSION > 0x20000 +#include "Include\UefiHii.h" +#include "Protocol\HiiDatabase.h" +#include "Protocol\HiiString.h" +#else +#include <Protocol/Hii.h> +#endif +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE +#include "minisetup.h" +#endif +#include "Protocol\PciIo.h" +#include "Protocol\BlockIo.h" +#include "Protocol\PDiskInfo.h" +#include "Protocol\PIDEController.h" +#include "Protocol\PIDEBus.h" +#include "Protocol\PAhciBus.h" +#include <Protocol/SimpleTextIn.h> +#include <Protocol/SimpleTextOut.h> +#include <Protocol/AMIPostMgr.h> +#include "AMITSEStrTokens.h" +#include "AmiVfr.h" +#include "HddPassword.h" +#include "Protocol\DevicePath.h" +#if SETUP_SAME_SYS_HDD_PW +#include "Core\EM\AMITSE\Inc\PwdLib.h" +#include "Core\EM\AMITSE\Inc\Variable.h" +#endif + +#ifdef SB_TEMPLATE_VER +#if SB_TEMPLATE_VER > 6 +SB_HDD_POLICY_PROTOCOL *gSbHddPolicyPtr=NULL; +EFI_GUID gSbHddPolicyProtocolGuid = SB_HDD_POLICY_PROTOCOL_GUID; +#endif +#endif + + +EFI_GUID gDiskInfoProtocolGuid = EFI_DISK_INFO_PROTOCOL_GUID; +EFI_GUID gDevicePathProtocolGuid = EFI_DEVICE_PATH_PROTOCOL_GUID; +EFI_GUID gHddSecurityEndProtocolGuid = HDD_SECURITY_END_PROTOCOL_GUID; +EFI_GUID gHddPasswordVerifiedGuid = HDD_PASSWORD_VERIFIED_GUID; +EFI_GUID gIDESecGuid = IDE_SECURITY_CONFIG_GUID; +EFI_GUID gIDESecurityProtocolGuid = IDE_SECURITY_INTERFACE_GUID; +EFI_GUID gHddPasswordPromptEnterGuid = HDD_PASSWORD_PROMPT_ENTER_GUID; +EFI_GUID gHddPasswordPromptExitGuid = HDD_PASSWORD_PROMPT_EXIT_GUID; + +static EFI_HII_STRING_PROTOCOL *HiiString = NULL; +static CHAR8 *SupportedLanguages=NULL; + + +typedef struct +{ + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity; + UINT16 NameToken; + UINT16 PromptToken; + BOOLEAN Locked; + BOOLEAN LoggedInAsMaster; + BOOLEAN Validated; + UINT8 PWD[IDE_PASSWORD_LENGTH + 1]; +} IDE_SECURITY_DATA; + +#if TSE_BUILD > 0x1206 +BOOLEAN IsPasswordSupportNonCaseSensitive(); +VOID UpdatePasswordToNonCaseSensitive(CHAR16 *Password, UINTN PwdLength); +#endif + +VOID HddNotificationFunction(EFI_EVENT Event, VOID *HddRegContext); +VOID IDEPasswordCheck(VOID); +UINT16 IDEPasswordGetName(UINT16 Index); +UINT16 IDESecurityProtocolInit(); +BOOLEAN HddPasswordGetDeviceName(EFI_HANDLE Controller,CHAR16 **wsName); +BOOLEAN CheckSecurityStatus ( + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity, + BOOLEAN *Locked, + UINT16 Mask ); +EFI_STATUS IDEPasswordAuthenticateHdd( + CHAR16 *Password, + VOID * Ptr, + BOOLEAN bCheckUser ); + +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE +VOID IDEUpdateConfig( + VOID *TempideSecConfig, + UINTN value ); + +VOID SearchTseHardDiskField ( + BOOLEAN *pbCheckUser, BOOLEAN *pEnabledBit, + UINT8 *pHardDiskNumber, VOID *data ); + +EFI_STRING_ID ConfigPromptToken = 0; +extern UINTN gInvalidPasswordFailMsgBox; +#else +UINTN gCurrIDESecPage; +#endif + +IDE_SECURITY_DATA *IDEPasswordSecurityData = NULL; +EFI_HANDLE gHddSecEndHandle = NULL; +EFI_HANDLE HddNotifyHandle; +static EFI_HANDLE *gHandleBuffer = NULL; +EFI_EVENT HddNotifyEvent; +VOID *HddNotifyRegistration; +BOOLEAN HddFreeze = FALSE; +UINT16 gIDESecurityCount = 0; +BOOLEAN gFlag = FALSE; + + +VOID EfiStrCpy (IN CHAR16 *Destination,IN CHAR16 *Source); +UINTN EfiStrLen (IN CHAR16 *String); +extern VOID TSEIDEPasswordCheck(); + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HddSecuritySignalProtocolEvent +// +// Description: Internal function that installs/uninstall protocol +// with a specified GUID and NULL interface. +// Such protocols can be used as event signaling mechanism. +// +// +// Input: ProtocolGuid Pointer to the protocol GUID. +// +// Output: None. +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> + +VOID +HddSecuritySignalProtocolEvent ( + IN EFI_GUID *ProtocolGuid +) +{ + + EFI_HANDLE Handle = NULL; + + pBS->InstallProtocolInterface ( + &Handle, + ProtocolGuid, + EFI_NATIVE_INTERFACE, + NULL ); + + pBS->UninstallProtocolInterface ( + Handle, + ProtocolGuid, + NULL); + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: RegisterHddNotification +// +// Description: Register the Protocol call back event +// +// +// Input: VOID +// +// Output: VOID +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN RegisterHddNotification( VOID ) +{ + EFI_STATUS Status = EFI_UNSUPPORTED; + + Status = gBS->CreateEvent( EFI_EVENT_NOTIFY_SIGNAL, + TPL_CALLBACK, + HddNotificationFunction, + &HddNotifyRegistration, + &HddNotifyEvent); + + Status = gBS->RegisterProtocolNotify( &gHddSecurityEndProtocolGuid, + HddNotifyEvent, + &HddNotifyRegistration); + + // + // get any of these events that have occured in the past + // + gBS->SignalEvent( HddNotifyEvent ); + + return FALSE; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HddNotificationFunction +// +// Description: Hdd notification function gets called when HddSecurityEnd Protocol get installed. +// +// Input: +// EFI_EVENT Event - Event to signal +// void HddRegContext - Event specific context (pointer to NotifyRegisteration +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID HddNotificationFunction( EFI_EVENT Event, VOID *HddRegContext ) +{ + EFI_STATUS Status; + EFI_HANDLE *HandleBuffer = NULL; + IDE_SECURITY_CONFIG *IdeSecConfig = NULL; + IDE_SECURITY_CONFIG ideSecConfig; + IDE_SECURITY_DATA *DataPtr=NULL; + UINTN NumHandles; + UINTN IdeSecConfigSize = 0; + UINTN Index=0; + + if ( HddRegContext == NULL ) + return; + // + // Initialise IdeSecConfig information if this variable is not set already. + // + IdeSecConfig = VarGetNvramName( L"IDESecDev", &gIDESecGuid, NULL, &IdeSecConfigSize ); + + if ( !IdeSecConfig ) { + + IdeSecConfig = EfiLibAllocateZeroPool( sizeof(IDE_SECURITY_CONFIG)); + + if ( IdeSecConfig == NULL ) { + return; + } + MemSet( IdeSecConfig, sizeof(IDE_SECURITY_CONFIG), 0); + VarSetNvramName( L"IDESecDev", + &gIDESecGuid, + EFI_VARIABLE_BOOTSERVICE_ACCESS, + IdeSecConfig, + sizeof(IDE_SECURITY_CONFIG)); + } else { + MemFreePointer( (VOID **)&IdeSecConfig ); + } + + // + //Locate the handle + // + Status = gBS->LocateHandleBuffer( ByRegisterNotify, + NULL, + *(VOID**)HddRegContext, + &NumHandles, + &HandleBuffer); + + // + // If protocol not installed return + // + if ( EFI_ERROR( Status )) + return; + + gHddSecEndHandle = HandleBuffer[0]; + + // + //Locate the Security Protocols + // + gIDESecurityCount = IDESecurityProtocolInit(); + + for(Index=0; Index<gIDESecurityCount; Index++){ + // + //Initialize the DataPtr + // + DataPtr = (IDE_SECURITY_DATA *) IDEPasswordGetDataPtr(Index); + + // + // Search for locked Hard disc and not password verification done + // + if(DataPtr->Locked && !DataPtr->Validated){ + break; + } + } + + // + // Validate the password only if HDD is locked + // + if( (gIDESecurityCount != 0 ) && (NULL != DataPtr ) && + (DataPtr->Locked ) && (!DataPtr->Validated ) ){ + TSEIDEPasswordCheck(); + } else { + // + // Update the IdeSecConfig information . + // + MemSet( &ideSecConfig, sizeof(ideSecConfig), 0 ); + ideSecConfig.Count = gIDESecurityCount; + VarSetNvramName( L"IDESecDev", + &gIDESecGuid, + EFI_VARIABLE_BOOTSERVICE_ACCESS, + &ideSecConfig, + sizeof(ideSecConfig)); + } + + // + // Install the Unlocked Protocol to nitify HDD has been unlocked + // + if ( gHddSecEndHandle != NULL ) { + Status = gBS->InstallProtocolInterface( &gHddSecEndHandle, + &gHddPasswordVerifiedGuid, + EFI_NATIVE_INTERFACE, + NULL); + } + + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: PrivateHiiAddString +// +// Description: Add the String to Hii Database using HiiString Protocol +// +// Input: +// IN EFI_HII_HANDLE HiiHandle, +// IN CHAR16 * String +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STRING_ID PrivateHiiAddString( + IN EFI_HII_HANDLE HiiHandle, + IN CHAR16 * String) +{ + EFI_STATUS Status; + CHAR8* Languages = NULL; + UINTN LangSize = 0; + CHAR8* CurrentLanguage; + BOOLEAN LastLanguage = FALSE; + EFI_STRING_ID StringId = 0; + + if(HiiString == NULL) { + Status = pBS->LocateProtocol(&gEfiHiiStringProtocolGuid, NULL, (VOID **) &HiiString); + if(EFI_ERROR(Status)) { + return 0; + } + } + + if(SupportedLanguages == NULL) { + Status = HiiString->GetLanguages(HiiString, HiiHandle, Languages, &LangSize); + if(Status == EFI_BUFFER_TOO_SMALL) { + Status = pBS->AllocatePool(EfiBootServicesData, LangSize, &Languages); + if(EFI_ERROR(Status)) { + // + //not enough resources to allocate string + // + return NULL; + } + Status = HiiString->GetLanguages(HiiString, HiiHandle, Languages, &LangSize); + } + SupportedLanguages=Languages; + } else { + Languages=SupportedLanguages; + } + + while(!LastLanguage) { + // + //point CurrentLanguage to start of new language + // + CurrentLanguage = Languages; + while(*Languages != ';' && *Languages != 0) + Languages++; + + // + //Last language in language list + // + if(*Languages == 0) { + LastLanguage = TRUE; + if(StringId == 0) { + Status = HiiString->NewString(HiiString, HiiHandle, &StringId, CurrentLanguage, NULL, String, NULL); + } else { + Status = HiiString->SetString(HiiString, HiiHandle, StringId, CurrentLanguage, String, NULL); + } + if(EFI_ERROR(Status)) { + return 0; + } + } else { + // + //put null-terminator + // + *Languages = 0; + if(StringId == 0) { + Status = HiiString->NewString(HiiString, HiiHandle, &StringId, CurrentLanguage, NULL, String, NULL); + } else { + Status = HiiString->SetString(HiiString, HiiHandle, StringId, CurrentLanguage, String, NULL); + } + *Languages = ';'; //restore original character + Languages++; + if(EFI_ERROR(Status)) { + return 0; + } + } + } + return StringId; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: PasswordHiiAddString +// +// Description: Add the String to HiiDatabase +// +// Input: +// IN EFI_HII_HANDLE HiiHandle, +// IN CHAR16 * String +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STRING_ID PasswordHiiAddString( + IN EFI_HII_HANDLE HiiHandle, + IN CHAR16 * String ) +{ + EFI_STRING_ID StringId = 0; + + StringId=PrivateHiiAddString( HiiHandle, String ); + + // + // Error in Adding String. Try with Default function that AMITSE has. + // + if(StringId == 0) { + StringId= HiiAddString( HiiHandle, String ); + } + + return StringId; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDESecurityProtocolInit +// +// Description: Locate the Security Protocols and return the information +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +UINT16 IDESecurityProtocolInit( ) +{ + EFI_STATUS Status; + EFI_HANDLE *HandleBuffer = NULL; + UINT16 i, j, HDDCount = 0; + UINTN Count; + CHAR16 * Name, *Temp1; + CHAR16 Temp[60]; + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity = NULL; + IDE_SECURITY_DATA *DataPtr = NULL; + EFI_DEVICE_PATH_PROTOCOL *DevicePath; + EFI_DEVICE_PATH_PROTOCOL *DevicePathNode; + PCI_DEVICE_PATH *PciDevicePath; + SECURITY_PROTOCOL *Security = NULL; + UINT32 HddPortNumber; + CHAR16 *Buff=L"P"; + EFI_DISK_INFO_PROTOCOL *DiskInfoPtr=NULL; + UINT32 PortNumber; + UINT32 PMPortNumber; + IDE_SECURITY_DATA *TempIDEPasswordSecurityData = NULL; + +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE + if(ConfigPromptToken == 0) + ConfigPromptToken = PasswordHiiAddString( gHiiHandle, L"HDD Security Configuration" ); +#endif + + Status = gBS->LocateHandleBuffer( ByProtocol, + &gIDESecurityProtocolGuid, + NULL, + &Count, + &HandleBuffer); + + // + // If already data has been found return with that information + // + if ( gIDESecurityCount != 0 && IDEPasswordSecurityData != NULL ) { + if ( gIDESecurityCount == Count ) { + return gIDESecurityCount; //the IDE struct is valid + } + + // + // New HDD device found. Need to validate the password for the new HDD + // and skip the HDD that has been already validated. + // + TempIDEPasswordSecurityData = IDEPasswordSecurityData; + IDEPasswordSecurityData = EfiLibAllocateZeroPool( Count * sizeof(IDE_SECURITY_DATA)); + // + // Copy the Existing HDD data + // + MemCopy( IDEPasswordSecurityData, TempIDEPasswordSecurityData, sizeof(IDE_SECURITY_DATA) * gIDESecurityCount ); + MemFreePointer((VOID**)&TempIDEPasswordSecurityData ); + DataPtr = IDEPasswordSecurityData; + // + // DataPtr moved to free Entry + // + DataPtr+=gIDESecurityCount; + HDDCount=gIDESecurityCount; + + } else { + // + // Allocate the buffer for DataPtr + // + IDEPasswordSecurityData = EfiLibAllocateZeroPool( Count * sizeof(IDE_SECURITY_DATA)); + DataPtr = IDEPasswordSecurityData; + } + + if ( EFI_ERROR( Status )) { + return 0; + } + + + if(DataPtr == NULL) { + return 0; + } + + + if ( gHandleBuffer != NULL ) { + MemFreePointer( (VOID **)&gHandleBuffer ); + } + + gHandleBuffer = EfiLibAllocateZeroPool( sizeof(EFI_HANDLE) * Count ); + + for ( i = 0; i < Count; i++ ) { + // + // Check if already Validate or not. If already validate don't verify the password again. + // + if ( gHandleBuffer != NULL && gIDESecurityCount != 0 ) { + j = gIDESecurityCount; + + do { + if ( HandleBuffer[i] == gHandleBuffer[j - 1] ) { + break; + } + j--; + } while ( j != 0 ); + + if ( j != 0 ) + continue; + } + + // + // Get the PasswordSecurity Protocol + // + Status = gBS->OpenProtocol( HandleBuffer[i], + &gIDESecurityProtocolGuid, + (VOID**) &IDEPasswordSecurity, + NULL, + HandleBuffer[i], + EFI_OPEN_PROTOCOL_GET_PROTOCOL); + + if ( EFI_ERROR( Status )) + continue; + // + // Handle the DiskInfo Protocol + // + Status = gBS->OpenProtocol( HandleBuffer[i], + &gDiskInfoProtocolGuid, + (VOID**) &DiskInfoPtr, + NULL, + HandleBuffer[i], + EFI_OPEN_PROTOCOL_GET_PROTOCOL); + + if ( EFI_ERROR( Status )){ + continue; + } + // + // Locate the device path Protocol + // + Status = gBS->OpenProtocol( HandleBuffer[i], + &gDevicePathProtocolGuid, + (VOID**)&DevicePath, + NULL, + HandleBuffer[i], + EFI_OPEN_PROTOCOL_GET_PROTOCOL); + + if ( EFI_ERROR( Status )){ + continue; + } + + DevicePathNode = DevicePath; + + // + // Traverse the Device Path structure till we reach HARDWARE_DEVICE_PATH + // + while (!isEndNode (DevicePathNode)) { + + if ((DevicePathNode->Type == HARDWARE_DEVICE_PATH) && + (DevicePathNode->SubType == HW_PCI_DP)){ + + PciDevicePath = (PCI_DEVICE_PATH *) DevicePathNode; + break; + } + + DevicePathNode = NEXT_NODE (DevicePathNode); + } + + if (PciDevicePath == NULL) continue; + + Security=(SECURITY_PROTOCOL *)IDEPasswordSecurity; + + if(Security->ModeFlag){ + // + // Controller is in Ahci Mode, Call WhichIde function to find out Port Number + // + DiskInfoPtr->WhichIde(DiskInfoPtr,&PortNumber,&PMPortNumber); + // + // Assign the PortNumber to HddPortNumber.This Port Number is displayed in Setup. + // + HddPortNumber=PortNumber; + + gFlag=TRUE; + + }else{ + +#ifdef SB_TEMPLATE_VER +#if SB_TEMPLATE_VER > 6 +{ + UINT32 IdeChannel; + UINT32 IdeDevice; + + if(gSbHddPolicyPtr==NULL){ + Status=gBS->LocateProtocol(&gSbHddPolicyProtocolGuid, + NULL, \ + &gSbHddPolicyPtr); + } + + if(gSbHddPolicyPtr!=NULL){ + + // + // Find out the Primary/Secondary,Master/Slave Info from WhichIde function + // + DiskInfoPtr->WhichIde(DiskInfoPtr,&IdeChannel,&IdeDevice); + // + // Get the Port Number to which the HDD is connected + // + gSbHddPolicyPtr->GeneratePortNumber(PciDevicePath->Device,PciDevicePath->Function, + IdeChannel,IdeDevice,&PortNumber); + + HddPortNumber=PortNumber; + + gFlag=TRUE; + + }else{ + + // + // SB HDD Policy Protocol is not Present. + // + gFlag=FALSE; + } +} +#endif +#endif + + } + if ( CheckSecurityStatus( IDEPasswordSecurity, &(DataPtr->Locked), SecurityLockedMask )) { + DataPtr->IDEPasswordSecurity = IDEPasswordSecurity; + + if ( HddPasswordGetDeviceName( HandleBuffer[i], &Name )) { + DataPtr->NameToken = PasswordHiiAddString( gHiiHandle, Name ); + Name[12] = 0; + if(gFlag){ + // + // Display the the Port Number in Setup + // + SPrint( Temp, 60, L"%s%d:%s", Buff, HddPortNumber, Name ); + DataPtr->PromptToken = PasswordHiiAddString( gHiiHandle, Temp ); + }else{ + // + // If SB HDD Policy Protocol is not Installed Use STR_IDE_SECURITY_PROMPT + // token to display the String Information. + // + Temp1 = HiiGetString( gHiiHandle, STRING_TOKEN( STR_IDE_SECURITY_PROMPT )); + SPrint( Temp, 60, L"%s%d:%s", Temp1,HDDCount,Name); + DataPtr->PromptToken = PasswordHiiAddString( gHiiHandle, Temp ); + } + } else { + if(gFlag){ + // + // Display the the Port Number in Setup + // + SPrint( Temp, 60, L"%s%d", Buff, HddPortNumber ); + DataPtr->NameToken = PasswordHiiAddString( gHiiHandle, Temp ); + DataPtr->PromptToken = PasswordHiiAddString( gHiiHandle, Temp ); + }else{ + // + // If SB HDD Policy Protocol is not Installed Use STR_IDE_SECURITY_PROMPT + // token to display the String Information. + // + Temp1 = HiiGetString( gHiiHandle, STRING_TOKEN( STR_IDE_SECURITY_PROMPT )); + SPrint( Temp, 60, L"%s%d", Temp1, HDDCount); + DataPtr->NameToken = PasswordHiiAddString( gHiiHandle, Temp ); + DataPtr->PromptToken = PasswordHiiAddString( gHiiHandle, Temp ); + } + } + DataPtr->Validated = FALSE; + + if(DataPtr->Locked) { + gHandleBuffer[i]=HandleBuffer[i]; + } + + DataPtr++; + HDDCount++; + }// end if + + }// end of for + + // + //if no hd is supported + // + if ( HDDCount == 0 ) { + MemFreePointer((VOID**)&IDEPasswordSecurityData ); + IDEPasswordSecurityData=NULL; + } + + MemFreePointer((VOID**)&HandleBuffer ); + + return HDDCount; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordGetLocked +// +// Description: Return Hdd Locked Information +// +// Input: UINTN Index +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN IDEPasswordGetLocked( + UINTN Index ) +{ + IDE_SECURITY_DATA *DataPtr = (IDE_SECURITY_DATA*)IDEPasswordGetDataPtr( Index ); + + if(DataPtr == NULL) { + return 0; + } + return DataPtr->Locked; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: CheckSecurityStatus +// +// Description: return the Security Status Information +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN CheckSecurityStatus( + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity, + BOOLEAN *ReqStatus, + UINT16 Mask ) +{ + UINT16 SecurityStatus = 0; + EFI_STATUS Status; + + // + //get the security status of the device + // + Status = IDEPasswordSecurity->ReturnSecurityStatus( IDEPasswordSecurity, &SecurityStatus ); + + if ( EFI_ERROR( Status )) + return FALSE; + + *ReqStatus = (BOOLEAN)((SecurityStatus & Mask) ? TRUE : FALSE ); + return TRUE; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HddPasswordDPLength +// +// Description: return the Device path Length +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +UINTN HddPasswordDPLength( EFI_DEVICE_PATH_PROTOCOL *pDp ) +{ + UINTN Size = 0; + + for (; !(IsDevicePathEnd( pDp )); pDp = NextDevicePathNode( pDp )) + Size += DevicePathNodeLength( pDp ); + + // + // add size of END_DEVICE_PATH node + // + return Size + END_DEVICE_PATH_LENGTH; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HddPasswordDPGetLastNode +// +// Description: Returns pointer on very last DP node before END_OF_DEVICE_PATH node +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID* HddPasswordDPGetLastNode( EFI_DEVICE_PATH_PROTOCOL *pDp ) +{ + EFI_DEVICE_PATH_PROTOCOL *dp = NULL; + + for (; !IsDevicePathEnd( pDp ); pDp = NextDevicePathNode( pDp )) + dp = pDp; + + return dp; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HddPasswordDPCopy +// +// Description: Copy the Device path to another Memory buffer +// +// Input: +// EFI_DEVICE_PATH_PROTOCOL *pDp +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID* HddPasswordDPCopy( EFI_DEVICE_PATH_PROTOCOL *pDp ) +{ + UINTN l = HddPasswordDPLength( pDp ); + UINT8 *p = EfiLibAllocateZeroPool( l ); + + MemCopy( p, pDp, l ); + return p; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HddPasswordGetDeviceName +// +// Description: Return the Drive String Name +// +// Input: EFI_HANDLE Controller - the handle of the drive +// CHAR16 **wsName - returned pointer to the drive string +// +// Output: BOOLEAN - TRUE - drive string has been found and is in wsName +// - FALSE - drive string has not been found +// +// Notes: it is the caller's responsibility to deallocate the space used for +// wsName +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN HddPasswordGetDeviceName(EFI_HANDLE Controller, CHAR16 **wsName) +{ + EFI_STATUS Status; + SECURITY_PROTOCOL *Security = NULL; + + CHAR16 *DeviceName; + BOOLEAN ReturnStatus = FALSE; + + // Get the SECURITY_PROTOCOL (actually getting the IDE_SECURITY_PROTOCOL, but + // the SECURITY_PROTOCOL is an extended version with more information) + Status = gBS->HandleProtocol(Controller, &gIDESecurityProtocolGuid, &Security); + if ( !EFI_ERROR(Status) ) { + // Check the SATA controller operating mode, and based on the mode, get the UnicodeString + // name of the device + if ( Security->ModeFlag ) { + DeviceName = ((SATA_DEVICE_INTERFACE*)Security->BusInterface)->UDeviceName->UnicodeString; + } else { + DeviceName = ((IDE_BUS_PROTOCOL*)Security->BusInterface)->IdeDevice.UDeviceName->UnicodeString; + } + + // Allocate space to copy the unicode device name string + *wsName = EfiLibAllocateZeroPool( sizeof(CHAR16)*(EfiStrLen(DeviceName)+1)); + + if ( *wsName!=NULL ) { + EfiStrCpy( *wsName, DeviceName); + ReturnStatus = TRUE; + } + } + + // Return true to signify that a device name was discovered + return ReturnStatus; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: AMI_CheckIDEPassword +// +// Description: Get the password and Validate the HDD password +// +// Input: +// UINT16 PromptToken, +// VOID *DataPtr +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID AMI_CheckIDEPassword(UINT16 PromptToken, VOID *DataPtr) +{ + UINTN CurrXPos, CurrYPos, i; + CHAR16 *PasswordEntered; + EFI_STATUS Status = EFI_ACCESS_DENIED; + UINT32 IdePasswordFlags = 0; + UINTN BoxLength = IDE_PASSWORD_LENGTH; + CHAR16 *DescToken = NULL; + + UINT16 SecurityStatus=0; + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity = NULL; + CHAR16 *UnlckHddCBToken = NULL; + UINTN CB_BoxLength=0; + + CheckForKeyHook((EFI_EVENT)NULL, NULL ); + gST->ConIn->Reset( gST->ConIn, FALSE ); + DescToken = HiiGetString( gHiiHandle, STRING_TOKEN( STR_IDE_ENTER_USER )); + + if ( DescToken ) { + if ( (TestPrintLength( DescToken ) / NG_SIZE) > BoxLength ) { + BoxLength = TestPrintLength( DescToken ) / NG_SIZE; + } + } + MemFreePointer((VOID**) &DescToken ); + + UnlckHddCBToken = HiiGetString( gHiiHandle, STRING_TOKEN(STR_IDE_UNLCK_COLD)); + if ( UnlckHddCBToken ) { + if ( (TestPrintLength( UnlckHddCBToken ) / NG_SIZE) > CB_BoxLength ) { + CB_BoxLength = TestPrintLength( UnlckHddCBToken ) / NG_SIZE; + } + } + MemFreePointer((VOID**) &UnlckHddCBToken ); + + + HddSecuritySignalProtocolEvent(&gHddPasswordPromptEnterGuid); + // + //Draw password window + // +#if ALL_HDD_SAME_PW + PromptToken = STRING_TOKEN( STR_IDE_SECURITY_PROMPT ); +#endif + + _DrawPasswordWindow( PromptToken, BoxLength, &CurrXPos, &CurrYPos ); + PasswordEntered = EfiLibAllocateZeroPool((IDE_PASSWORD_LENGTH + 1) * sizeof(CHAR16)); + IDEPasswordSecurity=((IDE_SECURITY_DATA* )DataPtr)->IDEPasswordSecurity; + // + //Give four chances to enter user password + // + for ( i = 0; i < USER_PASSWORD_RETRY_ATTEMPTS; i++ ) { + Status = IDEPasswordSecurity->ReturnSecurityStatus(IDEPasswordSecurity, &SecurityStatus ); + if(Status == EFI_SUCCESS && (SecurityStatus>>4)& 0x1){ + _DrawPasswordWindow( PromptToken, CB_BoxLength, &CurrXPos, &CurrYPos ); + _ReportInBox(CB_BoxLength,STRING_TOKEN(STR_IDE_UNLCK_COLD),CurrXPos,CurrYPos,TRUE); + HddSecuritySignalProtocolEvent(&gHddPasswordPromptExitGuid); + if (gST->ConOut != NULL) { + //Disable cursor, set desired attributes and clear screen + gST->ConOut->EnableCursor( gST->ConOut, FALSE ); + gST->ConOut->SetAttribute( gST->ConOut, (EFI_BACKGROUND_BLACK | EFI_WHITE)); + gST->ConOut->ClearScreen( gST->ConOut); + } + return ; + } + _ReportInBox( BoxLength, STRING_TOKEN(STR_IDE_ENTER_USER), CurrXPos, CurrYPos - 1, FALSE ); + + if ( EFI_SUCCESS !=_GetPassword( + PasswordEntered, + IDE_PASSWORD_LENGTH, + CurrXPos, + CurrYPos, + NULL )) { + break; + } // end if + + // + // Validate the Password + // + Status = IDEPasswordAuthenticate( PasswordEntered, DataPtr, TRUE ); + + if ( EFI_SUCCESS == Status ) { + break; + } else if ((i + 1) != USER_PASSWORD_RETRY_ATTEMPTS ) { + _ReportInBox( IDE_PASSWORD_LENGTH, STRING_TOKEN(STR_ERROR_PSWD), CurrXPos, CurrYPos, TRUE ); + } + }// end of for + + + #if SETUP_ASK_MASTER_PASSWORD + + if ( EFI_SUCCESS != Status ) { + _ReportInBox( IDE_PASSWORD_LENGTH, STRING_TOKEN(STR_ERROR_PSWD), CurrXPos, CurrYPos, TRUE ); + // + // Checking if the master password is installed + // + Status=((IDE_SECURITY_DATA*)DataPtr)->IDEPasswordSecurity->ReturnIdePasswordFlags( + ((IDE_SECURITY_DATA*)DataPtr)->IDEPasswordSecurity, + &IdePasswordFlags ); + + if((Status == EFI_SUCCESS)&&((IdePasswordFlags>>16)&1)) { + if ( i < MAXIMUM_HDD_UNLOCK_ATTEMPTS ) { + BoxLength = IDE_PASSWORD_LENGTH; + DescToken = HiiGetString( gHiiHandle, STRING_TOKEN( STR_IDE_ENTER_MASTER )); + + if ( DescToken ) { + if (( TestPrintLength( DescToken ) / NG_SIZE) > BoxLength ) { + BoxLength = TestPrintLength( DescToken ) / NG_SIZE; + } + } + MemFreePointer((VOID**) &DescToken ); + + ClearScreen( EFI_BACKGROUND_BLACK | EFI_LIGHTGRAY ); + + // + //Draw password window + // + _DrawPasswordWindow( PromptToken, BoxLength, &CurrXPos, &CurrYPos ); + } + + // + //Give remaining chances to enter Master password + // + for (; i < MAXIMUM_HDD_UNLOCK_ATTEMPTS; i++ ) { + Status = IDEPasswordSecurity->ReturnSecurityStatus(IDEPasswordSecurity, &SecurityStatus ); + if(Status == EFI_SUCCESS && (SecurityStatus>>4)& 0x1){ + _DrawPasswordWindow( PromptToken, CB_BoxLength, &CurrXPos, &CurrYPos ); + _ReportInBox(CB_BoxLength,STRING_TOKEN(STR_IDE_UNLCK_COLD),CurrXPos,CurrYPos,TRUE); + HddSecuritySignalProtocolEvent(&gHddPasswordPromptExitGuid); + if (gST->ConOut != NULL) { + //Disable cursor, set desired attributes and clear screen + gST->ConOut->EnableCursor( gST->ConOut, FALSE ); + gST->ConOut->SetAttribute( gST->ConOut, (EFI_BACKGROUND_BLACK | EFI_WHITE)); + gST->ConOut->ClearScreen( gST->ConOut); + } + return ; + } + _ReportInBox( BoxLength, STRING_TOKEN( + STR_IDE_ENTER_MASTER ), CurrXPos, CurrYPos - 1, + FALSE ); + + if ( EFI_SUCCESS != + _GetPassword( PasswordEntered, IDE_PASSWORD_LENGTH, CurrXPos, + CurrYPos, NULL )) { + break; + } + + // + // Vaidate the Master password + // + Status = IDEPasswordAuthenticate( PasswordEntered, DataPtr, FALSE ); + + if ( EFI_SUCCESS == Status ) { + break; + } else { + if ( (i + 1) != MAXIMUM_HDD_UNLOCK_ATTEMPTS ) { + _ReportInBox( IDE_PASSWORD_LENGTH, + STRING_TOKEN( + STR_ERROR_PSWD ), CurrXPos, CurrYPos, + TRUE ); + } + } + }// end of for + }// end if + }// end if + #endif + + MemSet( PasswordEntered, (IDE_PASSWORD_LENGTH + 1) * sizeof(CHAR16), 0); + + MemFreePointer((VOID**)&PasswordEntered ); + + if ( EFI_SUCCESS != Status ) { + //Report Invalid password + _ReportInBox( IDE_PASSWORD_LENGTH, STRING_TOKEN( + STR_IDE_ERROR_PSWD ), CurrXPos, CurrYPos, TRUE ); + // Unlock failed. + EfiLibReportStatusCode( EFI_ERROR_CODE | EFI_ERROR_MAJOR, + DXE_INVALID_IDE_PASSWORD, + 0, + NULL, + NULL ); + } + + HddSecuritySignalProtocolEvent(&gHddPasswordPromptExitGuid); + if (gST->ConOut != NULL) { + //Disable cursor, set desired attributes and clear screen + gST->ConOut->EnableCursor( gST->ConOut, FALSE ); + gST->ConOut->SetAttribute( gST->ConOut, (EFI_BACKGROUND_BLACK | EFI_WHITE)); + gST->ConOut->ClearScreen( gST->ConOut); + } + + + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordvices +// +// Description: Send Frezze command all the HDD +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID IDEPasswordFreezeDevices( ) +{ + EFI_STATUS Status; + EFI_HANDLE *HandleBuffer; + UINT16 i; + UINTN Count; + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity = NULL; + + // Return if Hdd FreezeLock command is already sent + if( HddFreeze ) { + return; + } + + if(IDEPasswordSecurityData != NULL) { + // + // Clear the Password + // + MemSet( IDEPasswordSecurityData, sizeof(IDE_SECURITY_DATA) * gIDESecurityCount, 0); + // + // Free up the Memory + // + MemFreePointer((VOID**)&IDEPasswordSecurityData ); + IDEPasswordSecurityData=NULL; + } + + Status = gBS->LocateHandleBuffer( + ByProtocol, + &gIDESecurityProtocolGuid, + NULL, + &Count, + &HandleBuffer + ); + + if ( EFI_ERROR( Status )) { + return; + } + + for ( i = 0; i < Count; i++ ) { + // + // get password security protocol + // + Status = gBS->OpenProtocol( + HandleBuffer[i], + &gIDESecurityProtocolGuid, + (VOID**) &IDEPasswordSecurity, + NULL, + HandleBuffer[i], + EFI_OPEN_PROTOCOL_GET_PROTOCOL + ); + + if ( EFI_ERROR( Status )) { + continue; + } + + // + //Send Freeze lock command + // + Status=IDEPasswordSecurity->SecurityFreezeLock( IDEPasswordSecurity ); + + if(Status == EFI_SUCCESS) { + HddFreeze = TRUE; + } + + }// end of for + MemFreePointer((VOID**)&HandleBuffer ); + + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordUpdateHdd +// +// Description: Updates the HDD password for the current HDD alone. +// +// Input: +// UINT32 Index, +// CHAR16 *Password, +// BOOLEAN bCheckUser +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN IDEPasswordUpdateHdd(UINT32 Index,CHAR16 *Password,BOOLEAN bCheckUser) +{ + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity = NULL; + UINT16 Control = bCheckUser ? 0 : 1; + UINT8 RevisionCode = 0; + BOOLEAN Locked, Enabled; + EFI_STATUS Status = EFI_UNSUPPORTED; + UINT8 Buffer[IDE_PASSWORD_LENGTH + 1]; + UINT8 Selection; + #if !SETUP_SAME_SYS_HDD_PW + UINTN ii; + #endif + IDE_SECURITY_DATA *DataPtr; + +// +// While password is set via hook in tse to perfom some OEM feature +// and SETUP_PASSWORD_NON_CASE_SENSITIVE is set, even then the +// password will be updated as if it is case sensitive but Authenticates +// as non case sensitive so in order to avoid such situation making +// IDEPasswordUpdateHdd() symmetric with IDEPasswordAuthenticateHdd() +// to update case sensivity {EIP99649} +// +#if TSE_BUILD > 0x1206 +{ + UINTN NewPwLen = 0; + if( IsPasswordSupportNonCaseSensitive() ) { + NewPwLen = EfiStrLen(Password); + UpdatePasswordToNonCaseSensitive(Password, NewPwLen); + } +} +#endif + + DataPtr = (IDE_SECURITY_DATA*)IDEPasswordGetDataPtr( Index ); + + if ( DataPtr == NULL ) { + ShowPostMsgBox( + NULL, + HiiGetString( + gHiiHandle, + STRING_TOKEN(STR_IDE_SECURITY_UNSUPPORTED) + ), + MSGBOX_TYPE_OK, + &Selection + ); // ShowPostMsgBox + + return FALSE; + } + IDEPasswordSecurity = DataPtr->IDEPasswordSecurity; + + // + //get the status of the device + // + if ( !( + CheckSecurityStatus( + IDEPasswordSecurity, &Locked, + SecurityLockedMask ) + && CheckSecurityStatus( IDEPasswordSecurity, &Enabled, + SecurityEnabledMask ))) { + return FALSE; + } + + if ( !Locked ) { + if ( Password[0] == 0 ) { + // + //empty string is entered -> disable password + // + Status = IDEPasswordSecurity->SecurityDisablePassword( + IDEPasswordSecurity, + Control, + IDEPasswordSecurityData[Index].PWD ); + } else { + // + //set new password + // + MemSet( &Buffer, IDE_PASSWORD_LENGTH + 1, 0 ); + #if !SETUP_SAME_SYS_HDD_PW + + for ( ii = 0; ii < IDE_PASSWORD_LENGTH + 1; ii++ ) { + Buffer[ii] = (UINT8)Password[ii]; + + if ( Password[ii] == L'\0' ) { + break; + } + }// end of for + #else + MemCopy( Buffer, Password, IDE_PASSWORD_LENGTH + 1 ); + #endif + + Status = IDEPasswordSecurity->SecuritySetPassword( + IDEPasswordSecurity, + Control, + Buffer, + RevisionCode ); + } + }// end if(!Locked) + + if ( EFI_ERROR( Status )) { + return FALSE; + } + + return TRUE; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordUpdateAllHdd +// +// Description: Updates the HDD password for all the HDDs present. +// +// Input: +// UINT32 Index, +// CHAR16 *Password, +// BOOLEAN bCheckUser +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN IDEPasswordUpdateAllHdd( + UINT32 Index, + CHAR16 *Password, + BOOLEAN bCheckUser ) +{ + UINTN i; + BOOLEAN Status = FALSE; + for ( i = 0; i < gIDESecurityCount; i++ ) { + Status = IDEPasswordUpdateHdd( (UINT32)i, Password, bCheckUser); + } + return Status; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordUpdate +// +// Description: Hook function to update the password for the HDDs based +// on the token ALL_HDD_SAME_PW. +// Input: +// UINT32 Index, +// CHAR16 *Password, +// BOOLEAN bCheckUser +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +BOOLEAN IDEPasswordUpdate( + UINT32 Index, + CHAR16 *Password, + BOOLEAN bCheckUser ) +{ + #if ALL_HDD_SAME_PW + return IDEPasswordUpdateAllHdd( Index, Password, bCheckUser); + #else + return IDEPasswordUpdateHdd( Index, Password, bCheckUser); + #endif + +} +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: UnlockHDD +// +// Description: Unlock the HDD +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID UnlockHDD( + VOID ) +{ + #if SETUP_SAME_SYS_HDD_PW + UINTN Size=0, i; + AMITSESETUP *TSESetup; + IDE_SECURITY_DATA *DataPtr; + EFI_STATUS Status; + EFI_GUID AmiTseSetupGuid = AMITSESETUP_GUID; + + // + //Do not proceed if admin pssword is not set + // + if ( !(AMI_PASSWORD_USER & PasswordCheckInstalled()) ) { + return; + } + + // + //Get password from NVRAM + // + Size = 0; + TSESetup = VarGetNvramName (L"AMITSESetup", &AmiTseSetupGuid, NULL, &Size); + + if ( Size ) { + // + //For all drives + // + DataPtr = IDEPasswordSecurityData; + + for ( i = 0; i < gIDESecurityCount; i++ ) { + if ( DataPtr->Locked ) { + // + //ask fot the password if locked + // + Status = IDEPasswordAuthenticateHdd( TSESetup->UserPassword, + DataPtr, + TRUE ); + + if ( EFI_SUCCESS != Status ) { + // + // Unlock failed. + // + EfiLibReportStatusCode( EFI_ERROR_CODE | EFI_ERROR_MAJOR, + DXE_INVALID_IDE_PASSWORD, + 0, + NULL, + NULL ); + } + } + DataPtr++; + } // end of for + } // end if + + MemFreePointer((VOID**) &TSESetup ); + return; + #endif //#if SETUP_SAME_SYS_HDD_PW +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: SetHDDPassword +// +// Description: Set the HDD password +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID SetHDDPassword(VOID) +{ + #if SETUP_SAME_SYS_HDD_PW + UINTN Size=0, i; + AMITSESETUP *TSESetup; + BOOLEAN Status; + EFI_GUID AmiTseSetupGuid = AMITSESETUP_GUID; + + // + //Get password from NVRAM + // + Size = 0; + TSESetup = VarGetNvramName (L"AMITSESetup", &AmiTseSetupGuid, NULL, &Size); + + if ( Size ) { + // + //For all drives + // + for ( i = 0; i < gIDESecurityCount; i++ ) { + Status = IDEPasswordUpdateHdd( (UINT32)i, TSESetup->UserPassword, TRUE); + } + } + + MemFreePointer((VOID**) &TSESetup ); + #endif //#if SETUP_SAME_SYS_HDD_PW +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordCheck +// +// Description: Validate the HDD password +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID IDEPasswordCheck() +{ + #if !SETUP_SAME_SYS_HDD_PW + IDE_SECURITY_DATA *DataPtr; +#if !ALL_HDD_SAME_PW + UINT16 i; +#endif +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE + UINTN IDE_idex = 0; +#endif + BOOLEAN ScreenCorrupted = FALSE; + #endif + IDE_SECURITY_CONFIG ideSecConfig; + + // + // build IDESecurity data + // + + gIDESecurityCount = IDESecurityProtocolInit( ); + + if ( IDEPasswordSecurityData == NULL || gIDESecurityCount == 0 ) { + return; + } + + #if SETUP_SAME_SYS_HDD_PW + UnlockHDD(); + #else + DataPtr = IDEPasswordSecurityData; +#if !ALL_HDD_SAME_PW + for ( i = 0; i < gIDESecurityCount; i++ ) { +#endif + if ( DataPtr->Locked && (!DataPtr->Validated)) { + // + //ask fot the password if locked + // + DataPtr->Validated = TRUE; + AMI_CheckIDEPassword( DataPtr->PromptToken, (VOID*)DataPtr ); + ScreenCorrupted = TRUE; + } +#if !ALL_HDD_SAME_PW + DataPtr++; + }// end of for +#endif + // + // If the Screen Corrupted , Redraw the Screen + // + // if(ScreenCorrupted) { + // DrawScreenAgain(OldScreen); + // } + #endif + + MemSet( &ideSecConfig, sizeof(ideSecConfig), 0 ); + ideSecConfig.Count = gIDESecurityCount; +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE + for( IDE_idex = 0 ; IDE_idex < gIDESecurityCount ; IDE_idex++ ) + { + IDEUpdateConfig( &ideSecConfig, IDE_idex ); + } +#endif + VarSetNvramName( L"IDESecDev", + &gIDESecGuid, + EFI_VARIABLE_BOOTSERVICE_ACCESS, + &ideSecConfig, + sizeof(ideSecConfig)); + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEUpdateConfigHdd +// +// Description: Initializes the structure IDE_SECURITY_CONFIG for the current +// HDD if the data pointer to the structure IDE_SECURITY_DATA is +// initialized already. +// +// Input: +// IDE_SECURITY_CONFIG *ideSecConfig +// UINTN value +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID IDEUpdateConfigHdd( + VOID *TempideSecConfig, + UINTN value ) +{ + IDE_SECURITY_DATA *DataPtr = NULL; + IDE_SECURITY_PROTOCOL *IDEPasswordSecurity = NULL; + BOOLEAN Status; + UINT32 IdePasswordFlags = 0; + EFI_STATUS ReturnStatus; + IDE_SECURITY_CONFIG *ideSecConfig + = (IDE_SECURITY_CONFIG*)TempideSecConfig; + + + // + //Set current IDE security page + // +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE + + DataPtr = (IDE_SECURITY_DATA*)IDEPasswordGetDataPtr( value ); + + if ( DataPtr ) { + IDEPasswordSecurity = DataPtr->IDEPasswordSecurity; + + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecuritySupportedMask ); + ideSecConfig->Supported[value] = Status ? 1 : 0; + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecurityEnabledMask ); + ideSecConfig->Enabled[value] = Status ? 1 : 0; + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecurityLockedMask ); + ideSecConfig->Locked[value] = Status ? 1 : 0; + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecurityFrozenMask ); + ideSecConfig->Frozen[value] = Status ? 1 : 0; + ReturnStatus = IDEPasswordSecurity->ReturnIdePasswordFlags( + IDEPasswordSecurity, + &IdePasswordFlags ); + + if ( EFI_ERROR( ReturnStatus )) { + return; + } + + ideSecConfig->UserPasswordStatus[value] + = (IdePasswordFlags & 0x00020000) ? 1 : 0; + ideSecConfig->MasterPasswordStatus[value] + = (IdePasswordFlags & 0x00010000) ? 1 : 0; + + ideSecConfig->ShowMaster[value] = 0x0000; + + if ( ideSecConfig->Locked[value] ) { + ideSecConfig->ShowMaster[value] = 0x0001; + } else if ( (DataPtr->LoggedInAsMaster)) { + ideSecConfig->ShowMaster[value] = 0x0001; + } else if ( !(ideSecConfig->UserPasswordStatus[value])) { + ideSecConfig->ShowMaster[value] = 0x0001; + } + }// end if +#else + gCurrIDESecPage = value; + + DataPtr = (IDE_SECURITY_DATA*)IDEPasswordGetDataPtr( value ); + + if ( DataPtr ) { + IDEPasswordSecurity = DataPtr->IDEPasswordSecurity; + + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecuritySupportedMask ); + ideSecConfig->Supported = Status ? 1 : 0; + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecurityEnabledMask ); + ideSecConfig->Enabled = Status ? 1 : 0; + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecurityLockedMask ); + ideSecConfig->Locked = Status ? 1 : 0; + CheckSecurityStatus( + IDEPasswordSecurity, + &Status, + SecurityFrozenMask ); + ideSecConfig->Frozen = Status ? 1 : 0; + ReturnStatus = IDEPasswordSecurity->ReturnIdePasswordFlags( + IDEPasswordSecurity, + &IdePasswordFlags ); + + if ( EFI_ERROR( ReturnStatus )) { + return; + } + + ideSecConfig->UserPasswordStatus + = (IdePasswordFlags & 0x00020000) ? 1 : 0; + ideSecConfig->MasterPasswordStatus + = (IdePasswordFlags & 0x00010000) ? 1 : 0; + + ideSecConfig->ShowMaster = 0x0000; + + if ( ideSecConfig->Locked ) { + ideSecConfig->ShowMaster = 0x0001; + } else if ( (DataPtr->LoggedInAsMaster)) { + ideSecConfig->ShowMaster = 0x0001; + } else if ( !(ideSecConfig->UserPasswordStatus)) { + ideSecConfig->ShowMaster = 0x0001; + } + }// end if +#endif + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEUpdateConfigAllHdd +// +// Description: Initializes the structure IDE_SECURITY_CONFIG for all the +// HDDs present if the data pointer to the structure +// IDE_SECURITY_DATA is initialized already. +// +// Input: +// IDE_SECURITY_CONFIG *ideSecConfig +// UINTN value +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID IDEUpdateConfigAllHdd( + VOID *TempideSecConfig, + UINTN value ) +{ + UINTN i; + + for ( i = 0; i < gIDESecurityCount; i++ ) { + IDEUpdateConfigHdd( TempideSecConfig, i); + } + return; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEUpdateConfig +// +// Description: Hook function to Initialize the structure IDE_SECURITY_CONFIG +// for the HDDs based on the token ALL_HDD_SAME_PW. +// +// Input: +// IDE_SECURITY_CONFIG *ideSecConfig +// UINTN value +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID IDEUpdateConfig( + VOID *TempideSecConfig, + UINTN value ) +{ + #if ALL_HDD_SAME_PW + IDEUpdateConfigAllHdd( TempideSecConfig, value); + #else + IDEUpdateConfigHdd( TempideSecConfig, value); + #endif + +} +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordGetName +// +// Description: Get the Hdd name +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +UINT16 IDEPasswordGetName( + UINT16 Index ) +{ +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE + // workaround for code in special.c which fills "goto string" token with + // hdd name string token. In our case we dont need that. + return ConfigPromptToken; +#else + UINTN size=0; + IDE_SECURITY_CONFIG *ideSecConfig; + IDE_SECURITY_DATA *DataPtr; + + ideSecConfig = VarGetNvramName (L"IDESecDev", &gIDESecGuid, NULL, &size); + IDEUpdateConfigHdd (ideSecConfig, Index); + VarSetNvramName (L"IDESecDev", + &gIDESecGuid, + EFI_VARIABLE_BOOTSERVICE_ACCESS, + ideSecConfig, + size); + + MemFreePointer((VOID **)&ideSecConfig); + + DataPtr = (IDE_SECURITY_DATA*)IDEPasswordGetDataPtr( Index ); + + if(DataPtr == NULL) { + return 0; + } + + return DataPtr->PromptToken; +#endif +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordAuthenticateHdd +// +// Description: Validates the Ide password for the current HDD alone. +// +// Input: +// CHAR16 *Password, +// VOID* Ptr, +// BOOLEAN bCheckUser +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STATUS IDEPasswordAuthenticateHdd( + CHAR16 *Password, + VOID * Ptr, + BOOLEAN bCheckUser ) +{ + UINT16 Control = 0; + EFI_STATUS Status; + UINT8 Buffer[IDE_PASSWORD_LENGTH + 1]; + + #if !SETUP_SAME_SYS_HDD_PW + UINTN i; + #endif + + IDE_SECURITY_DATA * DataPtr = (IDE_SECURITY_DATA*)Ptr; + + MemSet( &Buffer, IDE_PASSWORD_LENGTH + 1, 0 ); + +#if TSE_BUILD > 0x1206 +{ + UINTN NewPwLen = 0; + if( IsPasswordSupportNonCaseSensitive() ) { + NewPwLen = EfiStrLen(Password); + UpdatePasswordToNonCaseSensitive(Password, NewPwLen); + } +} +#endif + + #if !SETUP_SAME_SYS_HDD_PW + + for ( i = 0; i < IDE_PASSWORD_LENGTH + 1; i++ ) { + Buffer[i] = (UINT8)Password[i]; + + if ( Password[i] == L'\0' ) { + break; + } + } + #else + MemCopy( Buffer, Password, IDE_PASSWORD_LENGTH + 1 ); + #endif + + Control = bCheckUser ? 0 : 1; + + Status = (DataPtr->IDEPasswordSecurity)->SecurityUnlockPassword( + DataPtr->IDEPasswordSecurity, + Control, + Buffer ); + + if ( EFI_ERROR( Status )) { + return EFI_ACCESS_DENIED; + } + + // + //save password in case we need to disable it during the setup + // + MemCopy( &(DataPtr->PWD), &Buffer, IDE_PASSWORD_LENGTH + 1 ); +// DataPtr->Locked = FALSE; + + if ( !bCheckUser ) { + DataPtr->LoggedInAsMaster = TRUE; + } + + return EFI_SUCCESS; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordAuthenticateAllHdd +// +// Description: Validates the Ide password for all the HDDs Present. +// +// Input: +// CHAR16 *Password, +// VOID* Ptr, +// BOOLEAN bCheckUser +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STATUS IDEPasswordAuthenticateAllHdd( + CHAR16 *Password, + VOID * Ptr, + BOOLEAN bCheckUser ) +{ + IDE_SECURITY_DATA *DataPtr; + UINTN i; + EFI_STATUS Status=EFI_NOT_FOUND; + + // + //For all drives + // + DataPtr = IDEPasswordSecurityData; + + if(DataPtr == NULL) { + return EFI_NOT_FOUND; + } + + for ( i = 0; i < gIDESecurityCount; i++ ) { + + Status = IDEPasswordAuthenticateHdd( Password, + DataPtr, + bCheckUser ); + if ( EFI_SUCCESS != Status ) { + // + // Unlock failed. + // + EfiLibReportStatusCode( EFI_ERROR_CODE | EFI_ERROR_MAJOR, + DXE_INVALID_IDE_PASSWORD, + 0, + NULL, + NULL ); + } + DataPtr++; + } + return Status; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordAuthenticate +// +// Description: Hook function to validate IDE Password for the HDDs based on +// the token ALL_HDD_SAME_PW +// Input: +// CHAR16 *Password, +// VOID* Ptr, +// BOOLEAN bCheckUser +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STATUS IDEPasswordAuthenticate( + CHAR16 *Password, + VOID * Ptr, + BOOLEAN bCheckUser ) +{ + #if ALL_HDD_SAME_PW + return IDEPasswordAuthenticateAllHdd( Password, Ptr, bCheckUser); + #else + return IDEPasswordAuthenticateHdd( Password, Ptr, bCheckUser); + #endif + +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: IDEPasswordGetDataPtr +// +// Description: Get the Ide password Data pointer +// +// Input: none +// +// Output: none +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID* IDEPasswordGetDataPtr( UINTN Index ) +{ + IDE_SECURITY_DATA *DataPtr; + + if ( gIDESecurityCount == 0 || IDEPasswordSecurityData == NULL ) { + // + //try to initialize, if not initialized + // + gIDESecurityCount = IDESecurityProtocolInit( ); + } + + if ( gIDESecurityCount == 0 || IDEPasswordSecurityData == NULL || Index >= + gIDESecurityCount ) { + return NULL; + } + + DataPtr = (IDE_SECURITY_DATA*)IDEPasswordSecurityData; + + if(DataPtr == NULL) { + return 0; + } + + return (VOID*)&DataPtr[Index]; +} + +#if defined(SECUITY_SETUP_ON_SAME_PAGE) && SECUITY_SETUP_ON_SAME_PAGE +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: FramePwdCallbackIdePasswordUpdate +// +// Description: function to update the ide password +// +// Input: CONTROL_DATA *control : Selected password control data, +// VOID *saveData : New password +// +// Output: EFI_STATUS +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STATUS FramePwdCallbackIdePasswordUpdate ( CONTROL_DATA *control, CHAR16 *saveData) +{ + BOOLEAN bCheckUser = FALSE; + VOID * data =control->ControlData.ControlPtr; + UINT8 HardDiskNumber = 0xFF; + + // Check whether selected password control is a HDD Password control + if (control->ControlData.ControlVariable == VARIABLE_ID_IDE_SECURITY ) + { + // find index of currently selected HDD and type of password(user/master) to update + SearchTseHardDiskField( &bCheckUser, NULL, &HardDiskNumber, data ); + + if( HardDiskNumber != 0xFF ) // If HDD index is valid + { + IDEPasswordUpdate( (UINT32)HardDiskNumber, (CHAR16*) saveData, bCheckUser ); //update it + } + return EFI_SUCCESS; + } + else + return EFI_UNSUPPORTED; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: PopupPwdAuthenticateIDEPwd +// +// Description: Function to authenticate the IDE password +// +// Input: POPUP_PASSWORD_DATA *popuppassword, +// BOOLEAN *AbortUpdate, +// VOID *data +// +// Output: EFI_STATUS +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +EFI_STATUS PopupPwdAuthenticateIDEPwd(POPUP_PASSWORD_DATA *popuppassword, BOOLEAN *AbortUpdate,VOID *data) +{ + EFI_STATUS Status = EFI_UNSUPPORTED; + CHAR16 *Text=NULL; + UINT8 HardDiskNumber = 0xFF; + + // Check whether selected password control is a HDD Password control + if(popuppassword->ControlData.ControlVariable == VARIABLE_ID_IDE_SECURITY ) + { + BOOLEAN bCheckUser = FALSE; + BOOLEAN EnabledBit = FALSE; + UINTN size = 0; + IDE_SECURITY_CONFIG *ideSecConfig; + + ideSecConfig = VarGetVariable( VARIABLE_ID_IDE_SECURITY, &size ); // Get the data from setup page + if (NULL == ideSecConfig) { + return EFI_NOT_FOUND; + } + // find index of currently selected HDD and type of password(user/master) to authenticate + SearchTseHardDiskField( &bCheckUser, &EnabledBit, &HardDiskNumber, data ); + // Check if password has been set for selected HDD + if( ( HardDiskNumber != 0xFF ) && ideSecConfig->Enabled[HardDiskNumber] ) + { + EnabledBit = TRUE; + } + + // If password has been set then proceed + if(EnabledBit) + { + if( bCheckUser || ideSecConfig->MasterPasswordStatus[HardDiskNumber] ) + { + // Ask for the password + Status = _DoPopupEdit( popuppassword, STRING_TOKEN(STR_OLD_PSWD), &Text); + if(EFI_SUCCESS != Status ) + { + *AbortUpdate = TRUE; // Status: Password not updated + } + else + { + // Get IDE_SECURITY_PROTOCOL instance for current HDD + void* DataPtr = TSEIDEPasswordGetDataPtr( HardDiskNumber ); + Status = TSEIDEPasswordAuthenticate( Text, DataPtr, bCheckUser ); //Authenticate it + if(EFI_ERROR( Status )) + { + // Show error message if password is wrong + CallbackShowMessageBox( (UINTN)gInvalidPasswordFailMsgBox, MSGBOX_TYPE_OK ); + *AbortUpdate = TRUE; // Status: Password not updated + } + StringZeroFreeMemory ((VOID **)&Text); // Erase string and free allocated memory + } + } + } + + MemFreePointer((VOID **) &ideSecConfig); // Free setup data memory + return EFI_SUCCESS; + } + return EFI_UNSUPPORTED; +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: PopupPwdUpdateIDEPwd +// +// Description: function to update the setup config page after IDE password update +// +// Input: None +// +// Output: None +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> + +VOID PopupPwdUpdateIDEPwd (VOID) +{ + UINTN size = 0; + IDE_SECURITY_CONFIG *ideSecConfig; + UINT8 HardDiskNumber = 0xFF; + + // Get the old setup config data + ideSecConfig = VarGetVariable( VARIABLE_ID_IDE_SECURITY, &size ); + if (NULL == ideSecConfig) { + return; + } + // Update setup data for all HDDs + for( HardDiskNumber = 0 ; HardDiskNumber < ideSecConfig->Count ; HardDiskNumber++ ) + { + IDEUpdateConfig( (VOID*)ideSecConfig, HardDiskNumber ); + } + // Set the new setup config data + VarSetValue (VARIABLE_ID_IDE_SECURITY, 0, size, ideSecConfig); + if (gApp != NULL) + gApp->CompleteRedraw = TRUE; // redraw setup config page to reflect updated configuration + MemFreePointer((VOID **)&ideSecConfig); +} + +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: SearchTseHardDiskField +// +// Description: function to search TSE hard disk field. +// +// Input: IN OUT BOOLEAN *pbCheckUser : Password type - User/Master, +// IN OUT BOOLEAN *pEnabledBit : Password is set / not, +// IN OUT UINT8 *pHardDiskNumber : HDD index, +// IN VOID *data +// +// Output: None +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> +VOID SearchTseHardDiskField ( + IN OUT BOOLEAN *pbCheckUser, IN OUT BOOLEAN *pEnabledBit, + IN OUT UINT8 *pHardDiskNumber, IN VOID *data + ) +{ + UINTN size = 0; + IDE_SECURITY_CONFIG *ideSecConfig; + + ideSecConfig = VarGetVariable( VARIABLE_ID_IDE_SECURITY, &size ); + + // + // Check if User password field is selected, if yes then set HDD index + // + if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEUserPassword) ) + { + *pHardDiskNumber = 0; + *pbCheckUser = TRUE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEUserPassword_HDD2) ) + { + *pHardDiskNumber = 1; + *pbCheckUser = TRUE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEUserPassword_HDD3) ) + { + *pHardDiskNumber = 2; + *pbCheckUser = TRUE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEUserPassword_HDD4) ) + { + *pHardDiskNumber = 3; + *pbCheckUser = TRUE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEUserPassword_HDD5) ) + { + *pHardDiskNumber = 4; + *pbCheckUser = TRUE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEUserPassword_HDD6) ) + { + *pHardDiskNumber = 5; + *pbCheckUser = TRUE; + } + // + // Check if Master password field is selected, if yes then set HDD index + // + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEMasterPassword) ) + { + *pHardDiskNumber = 0; + *pbCheckUser = FALSE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEMasterPassword_HDD2) ) + { + *pHardDiskNumber = 1; + *pbCheckUser = FALSE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEMasterPassword_HDD3) ) + { + *pHardDiskNumber = 2; + *pbCheckUser = FALSE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEMasterPassword_HDD4) ) + { + *pHardDiskNumber = 3; + *pbCheckUser = FALSE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEMasterPassword_HDD5) ) + { + *pHardDiskNumber = 4; + *pbCheckUser = FALSE; + } + else if( UefiGetQuestionOffset(data) /*data->QuestionId*/ + == STRUCT_OFFSET(IDE_SECURITY_CONFIG,IDEMasterPassword_HDD6) ) + { + *pHardDiskNumber = 5; + *pbCheckUser = FALSE; + } + else // Question offset is not from any of the password fields + { + *pHardDiskNumber = 0xFF; // No HDD selected + if( pEnabledBit != NULL ) + { + *pEnabledBit = FALSE; // No HDD ie no password is set + } + } + // if HDD index is invalid, set it to 0xFF + if( *pHardDiskNumber >= ideSecConfig->Count ) + { + *pHardDiskNumber = 0xFF; + } + + MemFreePointer( (VOID **) &ideSecConfig ); + return; +} + +#endif +//<AMI_PHDR_START> +//---------------------------------------------------------------------------- +// Procedure: HDDStatus +// +// Description: Returns EFI_SUCCESS and sets *bHddStatus = TRUE if number of +// attempt to unlock HDD has reached MAXIMUM_HDD_UNLOCK_ATTEMPTS. +// +// Input: VOID *DataPtr +// +// Output: BOOLEAN *bHddStatus +// +//---------------------------------------------------------------------------- +//<AMI_PHDR_END> + +EFI_STATUS HDDStatus(VOID *DataPtr, BOOLEAN *bHddStatus) +{ + EFI_STATUS Status = 0; + UINT16 SecurityStatus = 0; + IDE_SECURITY_DATA *Ptr = (IDE_SECURITY_DATA *)DataPtr; + + *bHddStatus = FALSE; + + Status = Ptr->IDEPasswordSecurity->ReturnSecurityStatus( Ptr->IDEPasswordSecurity, &SecurityStatus ); + if ( EFI_ERROR( Status )) + return Status; + + if (SecurityStatus & 0x10) { + *bHddStatus = TRUE; + } + + return EFI_SUCCESS; +} +//**************************************************************************** +//**************************************************************************** +//** ** +//** (C)Copyright 1985-2014, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Norcross, GA 30093 ** +//** ** +//** Phone (770)-246-8600 ** +//** ** +//**************************************************************************** +//**************************************************************************** diff --git a/Core/EM/HddSecurity/Hddpassword/HddPassword.cif b/Core/EM/HddSecurity/Hddpassword/HddPassword.cif new file mode 100644 index 0000000..5529e64 --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddPassword.cif @@ -0,0 +1,14 @@ +<component> + name = "AmiTseHddPassword" + category = ModulePart + LocalRoot = "Core\EM\HddSecurity\Hddpassword" + RefName = "AmiTseHddPassword" +[files] +"HddPassword.mak" +"HddPassword.sdl" +"HddPassword.c" +"HddPassword.h" +"HddPassword.uni" +"HddSecTokens.c" +"ForceHddPassword.c" +<endComponent> diff --git a/Core/EM/HddSecurity/Hddpassword/HddPassword.h b/Core/EM/HddSecurity/Hddpassword/HddPassword.h new file mode 100644 index 0000000..ccfdffb --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddPassword.h @@ -0,0 +1,185 @@ +//**************************************************************************** +//**************************************************************************** +//** ** +//** (C)Copyright 1985-2014, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Norcross, GA 30093 ** +//** ** +//** Phone (770)-246-8600 ** +//** ** +//**************************************************************************** +//**************************************************************************** +// $Header: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddPassword.h 11 9/10/14 2:59a Divyac $ +// +// $Revision: 11 $ +// +// $Date: 9/10/14 2:59a $ +// +//***************************************************************************** +// Revision History +// ---------------- +// $Log: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddPassword.h $ +// +// 11 9/10/14 2:59a Divyac +// [TAG] EIP181548 +// [Category] Improvement +// [Description] Implement event signaling during HDD Passwords Prompt. +// [Files] HddPassword.c +// HddPassword.h +// +// 10 4/29/13 2:30a Kapilporwal +// fixing build errors, when tse soruce is not present, from last check-in +// +// 9 4/25/13 9:28a Kapilporwal +// [TAG] EIP108583 +// [Category] New Feature +// [Description] support set HDD password in same page +// [Files] IdeSecurity.cif, IdeSecurity.mak, IdeSecurity.sdl, +// IdeSecurity.uni, IdeSecurityCommon.sd, IdeSecuritySetup.c, +// HddPassword.c, HddPassword.h, HddPassword.mak, HddPassword.sdl +// +// 8 6/28/11 6:24a Anandv +// [TAG] EIP62381 +// [Category] Improvement +// [Description] In IdeSecurity Module, display HDD number in Setup +// based +// on results from WhichIde() function of +// DiskInfo Protocol. +// +// [Files] HddPassword.c, HddPassword.h, SBDxe.c, PIDEController.h +// +// 7 5/21/10 2:58p Aaronp +// Fix for EIP 38473 - Device names are not displayed when built in UEFI +// 2.1 mode +// +// 6 3/11/10 3:50a Rameshr +// Issue: Same Structure definied in Hddpassword and Amitse. +// Solution: Amitse created tsecommon.h with all the common definition. +// EIP: 27339 +// +// 5 1/15/10 10:11a Yul +// Coding Standard +// +// 4 9/28/09 4:59p Rameshr +// +// 3 9/21/09 3:48p Rameshr +// The data structure AMI_IFR_MSGBOX in HddPassword.h and MessageBox.h are +// not the same +// EIP 27157 +// +// 2 7/27/09 5:37p Pats +// EIP 22925: Request to set HDD password length by token. +// Solution: Token added to IdeSecurity.sdl, and definition removed from +// HddPassword.h +// +// 1 5/01/09 11:09a Rameshr +// Initial Check-in +//*****************************************************************************// + +//<AMI_FHDR_START> +//--------------------------------------------------------------------------- +// +// Name: HddPassword.h +// +// Description: Header file for the HddPassword +// +//--------------------------------------------------------------------------- +//<AMI_FHDR_END> + +#ifndef _IDEPASSWORD_H_ +#define _IDEPASSWORD_H_ + +#include "AmiStatusCodes.h" + +#define IDE_SECURITY_INTERFACE_GUID \ + { 0xF4F63529, 0x281E, 0x4040, 0xA3, 0x13, 0xC1, 0xD6, 0x76, 0x63, 0x84,\ + 0xBE } + +#define HDD_SECURITY_END_PROTOCOL_GUID \ + { 0xad77ae29, 0x4c20, 0x4fdd, 0x85, 0x04, 0x81, 0x76, 0x61, 0x9b, 0x67,\ + 0x6a } + +#define HDD_UNLOCKED_GUID \ + { 0x1fd29be6, 0x70d0, 0x42a4, 0xa6, 0xe7, 0xe5, 0xd1, 0xe, 0x6a, 0xc3, 0x76}; + +#define HDD_PASSWORD_PROMPT_ENTER_GUID \ + { 0x8e8d584a, 0x6e32, 0x44bf, { 0xb9, 0x6e, 0x1d, 0x27, 0x7, 0xc4, 0xeb, 0x5c } } + +#define HDD_PASSWORD_PROMPT_EXIT_GUID \ + { 0xe22af903, 0xfd6f, 0x4d22, { 0x94, 0xce, 0xf8, 0x49, 0xc6, 0x14, 0xc3, 0x45 } } + +#define SECURITY_SET_PASSWORD 0xF1 +#define SECURITY_UNLOCK 0xF2 +#define SECURITY_ERASE_PREPARE 0xF3 +#define SECURITY_ERASE_UNIT 0xF4 +#define SECURITY_FREEZE_LOCK 0xF5 +#define SECURITY_DISABLE_PASSWORD 0xF6 +#define SECURITY_BUFFER_LENGTH 512 // Bytes + +#define SecuritySupportedMask 0x0001 +#define SecurityEnabledMask 0x0002 +#define SecurityLockedMask 0x0004 +#define SecurityFrozenMask 0x0008 + + +#ifndef AMI_DXE_BS_EC_INVALID_IDE_PASSWORD + #define AMI_DXE_BS_EC_INVALID_IDE_PASSWORD (AMI_STATUS_CODE_CLASS\ + | 0x00000005) +#endif + +#ifndef DXE_INVALID_IDE_PASSWORD + #define DXE_INVALID_IDE_PASSWORD (EFI_SOFTWARE_DXE_BS_DRIVER\ + | AMI_DXE_BS_EC_INVALID_IDE_PASSWORD) +#endif + +#define NG_SIZE 19 +#define VARIABLE_ID_AMITSESETUP 5 +#if !defined(SECUITY_SETUP_ON_SAME_PAGE) || SECUITY_SETUP_ON_SAME_PAGE == 0 +#define INVALID_HANDLE ((VOID*)-1) +#endif +#include "tsecommon.h" + +#define EFI_DP_TYPE_MASK 0x7F +#define EFI_DP_TYPE_UNPACKED 0x80 +#if !defined(SECUITY_SETUP_ON_SAME_PAGE) || SECUITY_SETUP_ON_SAME_PAGE == 0 +#define END_DEVICE_PATH_TYPE 0x7f +#define END_ENTIRE_DEVICE_PATH_SUBTYPE 0xff + +#define DevicePathType( a ) (((a)->Type) & EFI_DP_TYPE_MASK) +#define DevicePathSubType( a ) ((a)->SubType) +#define DevicePathNodeLength( a ) (((a)->Length[0]) | ((a)->Length[1] << 8)) +#define NextDevicePathNode( a ) ((EFI_DEVICE_PATH_PROTOCOL*) (((UINT8*) (\ + a))\ + +\ + DevicePathNodeLength( a ))) +#define IsDevicePathEndType( a ) (\ + DevicePathType( \ + a ) == END_DEVICE_PATH_TYPE) +#define IsDevicePathEndSubType( a ) ((a)->SubType ==\ + END_ENTIRE_DEVICE_PATH_SUBTYPE) +#define IsDevicePathEnd( a ) (IsDevicePathEndType( a )\ + && IsDevicePathEndSubType( a )) +VOID +HddSecuritySignalProtocolEvent ( + IN EFI_GUID *ProtocolGuid +); + +#endif + +#endif /* _PASSWORD_H_ */ + +//**************************************************************************** +//**************************************************************************** +//** ** +//** (C)Copyright 1985-2014, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Norcross, GA 30093 ** +//** ** +//** Phone (770)-246-8600 ** +//** ** +//**************************************************************************** +//**************************************************************************** diff --git a/Core/EM/HddSecurity/Hddpassword/HddPassword.mak b/Core/EM/HddSecurity/Hddpassword/HddPassword.mak new file mode 100644 index 0000000..445a4a8 --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddPassword.mak @@ -0,0 +1,96 @@ +#********************************************************************** +#********************************************************************** +#** ** +#** (C)Copyright 1985-2013, American Megatrends, Inc. ** +#** ** +#** All Rights Reserved. ** +#** ** +#** 5555 Oakbrook Pkwy, Suite 200, Norcross, GA 30093 ** +#** ** +#** Phone: (770)-246-8600 ** +#** ** +#********************************************************************** +#********************************************************************** + +#********************************************************************** +# $Header: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddPassword.mak 5 4/25/13 9:29a Kapilporwal $ +# +# $Revision: 5 $ +# +# $Date: 4/25/13 9:29a $ +#********************************************************************** +# Revision History +# ---------------- +# $Log: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddPassword.mak $ +# +# 5 4/25/13 9:29a Kapilporwal +# [TAG] EIP108583 +# [Category] New Feature +# [Description] support set HDD password in same page +# [Files] IdeSecurity.cif, IdeSecurity.mak, IdeSecurity.sdl, +# IdeSecurity.uni, IdeSecurityCommon.sd, IdeSecuritySetup.c, +# HddPassword.c, HddPassword.h, HddPassword.mak, HddPassword.sdl +# +# 4 8/19/10 2:46a Rameshr +# Issue:Need do HDD PSW reset when warmboot +# EIP 40528 +# +# 3 6/30/10 4:15a Rameshr +# Modified the Hddpassword build procedure, so that customer can add +# their password oem files and build without modifying the Mak file +# +# 2 3/11/10 3:50a Rameshr +# Issue: Same Structure definied in Hddpassword and Amitse. +# Solution: Amitse created tsecommon.h with all the common definition. +# EIP: 27339 +# +# 1 5/01/09 11:09a Rameshr +# Initial Check-in +# +# +#********************************************************************** +#<AMI_FHDR_START> +# +# Name: HddPassword.mak +# +# Description: Make file for the Hddpassword.obj +# +#<AMI_FHDR_END> +#********************************************************************** +EDK_TSE_INCLUDES = \ + -I EDK\MiniSetup\TseLite \ + -I EDK\MiniSetup\Ezport \ + -I EDK\MiniSetup\BootOnly \ + -I EDK\MiniSetup\BootOnly\AMILogo \ + -I EDK\MiniSetup\uefi2.1 \ + /DTSE_FOR_APTIO_4_50 + +AMITSEBin : $(BUILD_DIR)\HddPassword.obj $(BUILD_DIR)\ForceHddPassword.obj + +{$(AMITSE_HDD_PASSWORD_DIR)}.c{$(BUILD_DIR)}.obj :: + $(CC) $(CFLAGS) $(EDK_TSE_INCLUDES) -I $(TSEBIN_DIR)\Inc -I $(TSEBIN_DIR) /Fo$(BUILD_DIR)\ $< + +$(BUILD_DIR)\HddPassword.mak : $(AMITSE_HDD_PASSWORD_DIR)\$(@B).cif $(AMITSE_HDD_PASSWORD_DIR)\$(@B).mak $(BUILD_RULES) + $(CIF2MAK) $(AMITSE_HDD_PASSWORD_DIR)\$(@B).cif $(CIF2MAK_DEFAULTS) + +AMITSESDB : HddPassWordSDB + +HddPassWordSDB : $(BUILD_DIR)\HddPassword.mak + $(MAKE) /$(MAKEFLAGS) $(BUILD_DEFAULTS)\ + /f $(BUILD_DIR)\HddPassword.mak all\ + "UNI_INCLUDE_PATH=$(TSEBIN_DIR) $(TSE_UNI_INCLUDE_PATH)"\ + "STRING_CONSUMERS=$(AMITSE_HDD_PASSWORD_DIR)\HddSecTokens.c"\ + TYPE=SDB NAME=HddPassword +#********************************************************************** +#********************************************************************** +#** ** +#** (C)Copyright 1985-2013, American Megatrends, Inc. ** +#** ** +#** All Rights Reserved. ** +#** ** +#** 5555 Oakbrook Pkwy, Suite 200, Norcross, GA 30093 ** +#** ** +#** Phone: (770)-246-8600 ** +#** ** +#********************************************************************** +#********************************************************************** diff --git a/Core/EM/HddSecurity/Hddpassword/HddPassword.sdl b/Core/EM/HddSecurity/Hddpassword/HddPassword.sdl new file mode 100644 index 0000000..a020c63 --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddPassword.sdl @@ -0,0 +1,136 @@ +TOKEN + Name = "SETUP_IDE_SECURITY_SUPPORT" + Value = "1" + Help = "Main switch to enable Hdd password Screen in Project" + TokenType = Boolean + TargetEQU = Yes + TargetMAK = Yes + TargetH = Yes + Master = Yes +End + +TOKEN + Name = "SETUP_ASK_MASTER_PASSWORD" + Value = "0" + Help = "Enable / Disable IDE Master password support" + TokenType = Boolean + TargetH = Yes +End + +TOKEN + Name = "SETUP_SAME_SYS_HDD_PW" + Value = "0" + Help = "Enable to have User password as IDE password" + TokenType = Boolean + TargetMAK = Yes + TargetH = Yes +End + + +TOKEN + Name = "USER_PASSWORD_RETRY_ATTEMPTS" + Value = "3" + Help = "Maximum number of attempts allowed to the HDD User Password. This token value should be less than or equal to MAXIMUM_HDD_UNLOCK_ATTEMPTS token. If all the attempts by user password failed then (MAXIMUM_HDD_UNLOCK_ATTEMPTS - USER_PASSWORD_RETRY_ATTEMPTS) attempts will be given to Master password" + TokenType = Integer + TargetH = Yes + TargetMAK = Yes + Range = "1 - MAXIMUM_HDD_UNLOCK_ATTEMPTS" +End + +TOKEN + Name = "MAXIMUM_HDD_UNLOCK_ATTEMPTS" + Value = "5" + Help = "Maximum number of attempts in POST in which the user has to enter the HDD User Password/Master Password to unlock the HDD.This token value should not exceed 5 times because the ATA SECURITY UNLOCK command fails even if the correct User/Master password is entered on the sixth time because the ATA Security Expire Count is 5" + TokenType = Integer + TargetH = Yes + TargetMAK = Yes + Range = "1 - 5" +End + +TOKEN + Name = "ALL_HDD_SAME_PW" + Value = "0" + Help = "1-Enable to have one password for all HDD drives,0-Different HDD could have different password" + TokenType = Boolean + TargetMAK = Yes + TargetH = Yes +End +PATH + Name = "AMITSE_HDD_PASSWORD_DIR" +End + +MODULE + Help = "Includes HddPassword.mak to Project" + File = "HddPassword.mak" +End + +ELINK + Name = "RegisterHddNotification," + Parent = "ProcessConInAvailability," + InvokeOrder = AfterParent +End + +ELINK + Name = "$(BUILD_DIR)\HddPassword.obj" + Parent = "AMITSE_Objects" + InvokeOrder = AfterParent +End + +ELINK + Name = "$(AMITSE_HDD_PASSWORD_DIR)\HddSecTokens.c" + Parent = "TSE_STRING_CONSUMERS_LIST" + InvokeOrder = AfterParent +End + +ELINK + Name = "-i $(AMITSE_HDD_PASSWORD_DIR)" + Parent = "TSE_UNI_INCLUDE_PATH" + InvokeOrder = AfterParent +End + +ELINK + Name = "$(BUILD_DIR)\HddPassword.sdb" + Parent = "TSE_SDBS" + InvokeOrder = AfterParent +End + +ELINK + Name = "DisableSoftwarePreservation," + Parent = "PreSystemResetHookHook," + InvokeOrder = AfterParent + Token = "FORCE_HDD_PASSWORD_PROMPT" "=" "1" +End + +ELINK + Name = "$(BUILD_DIR)\ForceHddPassword.obj" + Parent = "AMITSE_Objects" + InvokeOrder = AfterParent + Token = "FORCE_HDD_PASSWORD_PROMPT" "=" "1" +End + +TOKEN + Name = "OVERRIDE_FramePwdCallbackIdePasswordUpdate" + Value = "1" + Help = "set to 1 if oem wants to override the FramePwdCallbackIdePasswordUpdate function from Board module." + TokenType = Boolean + Token = "SECUITY_SETUP_ON_SAME_PAGE" "=" "1" + TargetH = Yes +End + +TOKEN + Name = "OVERRIDE_PopupPwdAuthenticateIDEPwd" + Value = "1" + Help = "set to 1 if oem wants to override the PopupPwdAuthenticateIDEPwd function from Board module." + TokenType = Boolean + Token = "SECUITY_SETUP_ON_SAME_PAGE" "=" "1" + TargetH = Yes +End + +TOKEN + Name = "OVERRIDE_PopupPwdUpdateIDEPwd" + Value = "1" + Help = "set to 1 if oem wants to override the PopupPwdUpdateIDEPwd function from Board module." + TokenType = Boolean + Token = "SECUITY_SETUP_ON_SAME_PAGE" "=" "1" + TargetH = Yes +End diff --git a/Core/EM/HddSecurity/Hddpassword/HddPassword.uni b/Core/EM/HddSecurity/Hddpassword/HddPassword.uni Binary files differnew file mode 100644 index 0000000..8fdd12d --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddPassword.uni diff --git a/Core/EM/HddSecurity/Hddpassword/HddSecTokens.c b/Core/EM/HddSecurity/Hddpassword/HddSecTokens.c new file mode 100644 index 0000000..082fae5 --- /dev/null +++ b/Core/EM/HddSecurity/Hddpassword/HddSecTokens.c @@ -0,0 +1,79 @@ +//********************************************************************** +//********************************************************************** +//** ** +//** (C)Copyright 1985-2013, American Megatrends, Inc. ** +//** ** +//** All Rights Reserved. ** +//** ** +//** 5555 Oakbrook Pkwy, Suite 200, Norcross, GA 30093 ** +//** ** +//** Phone: (770)-246-8600 ** +//** ** +//********************************************************************** +//********************************************************************** +//********************************************************************** +// $Header: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddSecTokens.c 2 3/25/13 5:16a Rameshr $ +// +// $Revision: 2 $ +// +// $Date: 3/25/13 5:16a $ +//********************************************************************** +// Revision History +// ---------------- +// $Log: /Alaska/SOURCE/Modules/HddSecurity/HddPassword/HddSecTokens.c $ +// +// 2 3/25/13 5:16a Rameshr +// [TAG] EIP117159 +// [Category] Improvement +// [Description] Proper error message displayed when the Password count +// expired +// [Files] HddPassword.c, HddPassword.uni, HddSecTokens.c +// +// 1 3/11/10 3:51a Rameshr +// Issue: Same Structure definied in Hddpassword and Amitse. +// Solution: Amitse created tsecommon.h with all the common definition. +// EIP: 27339 +// +// Initial check-in +// +//********************************************************************** +//<AMI_FHDR_START> +// +// Name: HddSecTokens.c +// +// Description: +// This file does not add any code. It has, all the string tokens that +// are used by Minisetup, to fake the usage to strgather.exe. Add to +// this list, the new string tokens that are defined in +// AmiTSEStrstr.uni and to be used by Minisetup +// +//<AMI_FHDR_END> +//********************************************************************** + + +//Following code is to force strgatherer to include these strings +#if 0 + +STRING_TOKEN(STR_IDE_SECURITY_UNSUPPORTED) +STRING_TOKEN(STR_IDE_SECURITY_LOCKED) +STRING_TOKEN(STR_IDE_ERROR_PSWD) +STRING_TOKEN(STR_IDE_SECURITY_PROMPT) +STRING_TOKEN(STR_IDE_ENTER_USER) +STRING_TOKEN(STR_IDE_ENTER_MASTER) +STRING_TOKEN(STR_IDE_UNLCK_COLD) + +#endif + +//*****************************************************************// +//*****************************************************************// +//** **// +//** (C)Copyright 2013, American Megatrends, Inc. **// +//** **// +//** All Rights Reserved. **// +//** **// +//** 5555 Oakbrook Pkwy, Norcross, Georgia 30093 **// +//** **// +//** Phone (770)-246-8600 **// +//** **// +//*****************************************************************// +//*****************************************************************// |