blob: 830f18324de0bd4aeb7a38dc010f68a85aa50844 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
TOKEN
Name = "FWpub"
Value = "$(FWKey_DIR)\.pubkey"
Help = "Root of trust Key for signed BIOS verification.\Public portion of the Key is inserted as ffs file inside BIOS RTU (FV_BB)\RSA Key formatted as PKCS#1v2.1 ASN.1 or X.509 DER file."
TokenType = Expression
TargetMAK = Yes
Token = "FWCAPSULE_CERT_FORMAT" "=" "0"
End
TOKEN
Name = "FWpriv"
Value = "$(FWKey_DIR)\.prikey"
Help = "A Signer Certificate Key in the FwCapsule Hdr.\Used as upgrade(new) key in 2-key signing model\RSA Key formatted as PKCS#1v2.1 ASN.1 or X.509 DER file."
TokenType = Expression
TargetMAK = Yes
Token = "FWCAPSULE_CERT_FORMAT" "=" "0"
End
TOKEN
Name = "FWrootKey"
Value = "$(FWpriv)"
Help = "A Root Certificate key in the FwCapsule Hdr.\Used as back-up(old) key in a dual-key signing model(only for FWCAPSULE_CERT_FORMAT=0)"
TokenType = Expression
TargetMAK = Yes
Token = "FWCAPSULE_CERT_FORMAT" "=" "0"
End
TOKEN
Name = "FWpub"
Value = "$(FWKey_DIR)\FW_pubKey.cer"
Help = "X.509 Certificate with Public key"
TokenType = Expression
TargetMAK = Yes
Token = "FWCAPSULE_CERT_FORMAT" "=" "1"
End
TOKEN
Name = "FWpriv"
Value = "$(FWKey_DIR)\FW_priKey.pfx"
Help = "File name(.pfx) of Pkcs#12 key container with the private key used for signing of FwCapsule package"
TokenType = Expression
TargetMAK = Yes
Token = "FWCAPSULE_CERT_FORMAT" "=" "1"
End
TOKEN
Name = "FW_PFX_Password"
Value = " "
Help = "Specifies the optional password to unlock PFX - PKCS#12 Private Key container file."
TokenType = Expression
TargetMAK = Yes
End
TOKEN
Name = "FWKEY_FILE_SIZE"
Value = "256"
Help = "Default Key file size for RSA2048 Key. Don't change the value."
Lock = yes
TokenType = Integer
TargetMAK = Yes
Token = "FWKEY_FILE_FORMAT" "=" "0"
End
TOKEN
Name = "FWKEY_FILE_SIZE"
Value = "32"
Help = "Default Key file size for SHA256 Hash. Don't change the value."
Lock = yes
TokenType = Integer
TargetMAK = Yes
Token = "FWKEY_FILE_FORMAT" "=" "1"
End
TOKEN
Name = "FWKEY_FILE_SIZE"
Value = "1536"
Help = "Default key buffer size (1.5k) for x509 DER formatted Public key."
TokenType = Integer
TargetMAK = Yes
Token = "FWKEY_FILE_FORMAT" "=" "2"
End
PATH
Name = "FWKey_DIR"
Help = "Path to default Platform FW Signing Key.\User may change this path to point to another location of FW Key."
End
MODULE
File = "FWKey.mak"
Token = "CREATE_FWCAPSULE" "!=" "0"
End
ELINK
Name = "$(BUILD_DIR)\FWkey.ffs"
Parent = "FV_BB"
Help = "Include Key FFS inside BIOS RTU (FV_BB)"
Token = "CREATE_FWCAPSULE" "!=" "0"
InvokeOrder = AfterParent
End
|