summaryrefslogtreecommitdiff
path: root/Core/EM/SecurityPkg/SecFlashUpd/SecFlashUpd.sdl
blob: a21f7693387e684ee73cbce8ea23ca700560b7ab (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
TOKEN
	Name  = "SecFlashUpd_SUPPORT"
	Value  = "1"
	Help  = "Main switch to enable Secured FlashUpdate support in Project"
	TokenType = Boolean
	TargetMAK = Yes
	TargetH = Yes
	Master = Yes
End

TOKEN
	Name  = "FlashUpdatePolicy"
	Value  = "7"
	Help  = "Flash update policy bitmap\0-Disabled, \bit0-Cold Reboot(recovery),bit1-Warm Reboot(capsule),bit2-Runtime,\bits 3..31-Reserved"
	TokenType = Integer
	TargetH = Yes
End

TOKEN
	Name  = "BBUpdatePolicy"
	Value  = "7"
	Help  = "Select Boot Block (CRTM) Flash update policy."
	TokenType = Integer
	TargetH = Yes
End

TOKEN
	Name  = "IGNORE_IMAGE_ROLLBACK"
	Value  = "0"
	Help  = "1-FW Capsule Validate logic will skip image Revision check"
	TokenType = Boolean
	TargetH = Yes
End

TOKEN
	Name  = "IGNORE_RUNTIME_UPDATE_IMAGE_REVISION_CHECK"
	Value  = "0"
	Help  = "When set, FW Capsule Validate logic will skip image Revision check during Runtime updates"
	TokenType = Boolean
	TargetH = Yes
End

TOKEN
	Name  = "IGNORE_RUNTIME_UPDATE_IMAGE_REVISION_CHECK"
	Value  = "1"
	Help  = "Force Ignore_runtime. if master Ignore_image_rollback is set"
	TokenType = Boolean
	TargetH = Yes
	Token = "IGNORE_IMAGE_ROLLBACK" "=" "1"
End

TOKEN
	Name  = "RUNTIME_SECURE_UPDATE_FLOW"
	Value  = "1"
	Help  = "Force security checks during runtime SMM flash update process"
	TokenType = Boolean
	TargetH = Yes
End

TOKEN
	Name  = "FWCAPSULE_RECOVERY_SUPPORT"
	Value  = "0"
	Help  = "Enable APTIO FW Capsule recovery PPI"
	TokenType = Boolean
	TargetMAK = Yes
	TargetH = Yes
End

TOKEN
	Name  = "FWCAPSULE_RECOVERY_SUPPORT"
	Value  = "1"
	Help  = "Don't modify this value!"
	TokenType = Boolean
	TargetMAK = Yes
	TargetH = Yes
	Token = "Recovery_SUPPORT" "=" "1"
	Token = "CAPSULE_SUPPORT" "=" "1"
	Token = "WARM_BOOT_SUPPORT" "=" "1"
	Token = "UEFI_2_0_CAPSULE" "=" "1"
End

TOKEN
	Name  = "FWCAPSULE_RECOVERY_SUPPORT"
	Value  = "1"
	Help  = "Don't modify this value!"
	TokenType = Boolean
	TargetMAK = Yes
	TargetH = Yes
	Token = "Recovery_SUPPORT" "=" "1"
	Token = "CAPSULE2_0_SUPPORT" "=" "1"
	Token = "SUPPORT_UPDATE_CAPSULE_RESET" "=" "1"
End

TOKEN
	Name  = "FWCAPSULE_2_0_SUPPORT"
	Value  = "1"
	Help  = "Older Aptio Capsule formats expected extra Cap Hdr in Mailbox"
	TokenType = Boolean
	TargetMAK = Yes
	TargetH = Yes
	Token = "CAPSULE2_0_SUPPORT" "=" "1"
End

TOKEN
	Name  = "FLASH_LOCK_EVENT_NOTIFY"
	Value  = "1"
	Help  = "1:Issue Flash Ready to Lock Event"
	TokenType = Boolean
	TargetH = Yes
End

PATH
	Name  = "SecFlashUpd_DIR"
	Help  = "Path to FlashUpdate Module in Project"
End

MODULE
	File  = "SecFlashUpd.mak"
End

ELINK
	Name  = "$(BUILD_DIR)\FwCapsuleRecoveryPPI.ffs"
	Parent  = "FV_BB"
	Token = "FWCAPSULE_RECOVERY_SUPPORT" "=" "1"
	InvokeOrder = AfterParent
End

ELINK
	Name  = "IsFlashUpdateRecovery,"
	Parent  = "IsRecovery"
	InvokeOrder = AfterParent
End

ELINK
	Name  = "IsFlashUpdateCapsuleInit,"
	Parent  = "PeiCoreInitialize"
	Token = "FWCAPSULE_RECOVERY_SUPPORT" "=" "1"
	InvokeOrder = AfterParent
End

ELINK
	Name  = "FwCapsuleInfo"
	Parent  = "AmiGetRecoveryFileInfo"
	InvokeOrder = ReplaceParent
End

ELINK
	Name  = "$(BUILD_DIR)\SecFlashUpdDxe.ffs"
	Parent  = "FV_MAIN"
	InvokeOrder = AfterParent
End