summaryrefslogtreecommitdiff
path: root/Keys/FW/FWkey.sdl
blob: 830f18324de0bd4aeb7a38dc010f68a85aa50844 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
TOKEN
	Name  = "FWpub"
	Value  = "$(FWKey_DIR)\.pubkey"
	Help  = "Root of trust Key for signed BIOS verification.\Public portion of the Key is inserted as ffs file inside BIOS RTU (FV_BB)\RSA Key formatted as PKCS#1v2.1 ASN.1 or X.509 DER file."
	TokenType = Expression
	TargetMAK = Yes
	Token = "FWCAPSULE_CERT_FORMAT" "=" "0"
End

TOKEN
	Name  = "FWpriv"
	Value  = "$(FWKey_DIR)\.prikey"
	Help  = "A Signer Certificate Key in the FwCapsule Hdr.\Used as upgrade(new) key in 2-key signing model\RSA Key formatted as PKCS#1v2.1 ASN.1 or X.509 DER file."
	TokenType = Expression
	TargetMAK = Yes
	Token = "FWCAPSULE_CERT_FORMAT" "=" "0"
End

TOKEN
	Name  = "FWrootKey"
	Value  = "$(FWpriv)"
	Help  = "A Root Certificate key in the FwCapsule Hdr.\Used as back-up(old) key in a dual-key signing model(only for FWCAPSULE_CERT_FORMAT=0)"
	TokenType = Expression
	TargetMAK = Yes
	Token = "FWCAPSULE_CERT_FORMAT" "=" "0"	
End

TOKEN
	Name  = "FWpub"
	Value  = "$(FWKey_DIR)\FW_pubKey.cer"
	Help  = "X.509 Certificate with Public key"
	TokenType = Expression
	TargetMAK = Yes
	Token = "FWCAPSULE_CERT_FORMAT" "=" "1"
End

TOKEN
	Name  = "FWpriv"
	Value  = "$(FWKey_DIR)\FW_priKey.pfx"
	Help  = "File name(.pfx) of Pkcs#12 key container with the private key used for signing of FwCapsule package"
	TokenType = Expression
	TargetMAK = Yes
	Token = "FWCAPSULE_CERT_FORMAT" "=" "1"
End

TOKEN
	Name  = "FW_PFX_Password"
	Value  = " "
	Help  = "Specifies the optional password to unlock PFX - PKCS#12 Private Key container file."
	TokenType = Expression
	TargetMAK = Yes
End

TOKEN
	Name  = "FWKEY_FILE_SIZE"
	Value  = "256"
	Help  = "Default Key file size for RSA2048 Key. Don't change the value."
	Lock = yes
	TokenType = Integer
	TargetMAK = Yes
	Token = "FWKEY_FILE_FORMAT" "=" "0"
End

TOKEN
	Name  = "FWKEY_FILE_SIZE"
	Value  = "32"
	Help  = "Default Key file size for SHA256 Hash. Don't change the value."
	Lock = yes
	TokenType = Integer
	TargetMAK = Yes
	Token = "FWKEY_FILE_FORMAT" "=" "1"
End

TOKEN
	Name  = "FWKEY_FILE_SIZE"
	Value  = "1536"
	Help  = "Default key buffer size (1.5k) for x509 DER formatted Public key."
	TokenType = Integer
	TargetMAK = Yes
	Token = "FWKEY_FILE_FORMAT" "=" "2"
End

PATH
	Name  = "FWKey_DIR"
	Help  = "Path to default Platform FW Signing Key.\User may change this path to point to another location of FW Key."
End

MODULE
	File  = "FWKey.mak"
	Token = "CREATE_FWCAPSULE" "!=" "0"
End

ELINK
	Name  = "$(BUILD_DIR)\FWkey.ffs"
	Parent  = "FV_BB"
	Help  = "Include Key FFS inside BIOS RTU (FV_BB)"
	Token = "CREATE_FWCAPSULE" "!=" "0"
	InvokeOrder = AfterParent
End