Skip to content

Commit

Permalink
SecurityPkg/Tcg2Config: Set TPM2.0 for default of Attempt TPM Device
Browse files Browse the repository at this point in the history
As TPM2.0 is popular, updating default value for the Setup menu supports
a benefit for some systems that have another TPM Setup menu to select
TPM2.0 devices (e.g. dTPM, fTPM) depending on platform bios.
For example, when loading default configuration using F9 key in Setup
(Brower Action: SystemLevel), it is possible for them to load an
unsynchronized value. If user does not adjust the value before saving
Setup, it could influence an unexpected TPM initialization at next boot.
Setting TPM2.0 as default value supports the benefit related to the case.

Signed-off-by: Phil Noh <[email protected]>
  • Loading branch information
philnoh2 authored and mergify[bot] committed Nov 26, 2024
1 parent 468b3d9 commit c15bd99
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions SecurityPkg/Tcg/Tcg2Config/Tcg2Config.vfr
Original file line number Diff line number Diff line change
Expand Up @@ -47,8 +47,8 @@ formset
prompt = STRING_TOKEN(STR_TCG2_DEVICE_PROMPT),
help = STRING_TOKEN(STR_TCG2_DEVICE_HELP),
flags = INTERACTIVE,
option text = STRING_TOKEN(STR_TCG2_TPM_1_2), value = TPM_DEVICE_1_2, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
option text = STRING_TOKEN(STR_TCG2_TPM_2_0_DTPM), value = TPM_DEVICE_2_0_DTPM, flags = RESET_REQUIRED;
option text = STRING_TOKEN(STR_TCG2_TPM_1_2), value = TPM_DEVICE_1_2, flags = RESET_REQUIRED;
option text = STRING_TOKEN(STR_TCG2_TPM_2_0_DTPM), value = TPM_DEVICE_2_0_DTPM, flags = DEFAULT | MANUFACTURING | RESET_REQUIRED;
endoneof;

suppressif ideqvallist TCG2_CONFIGURATION.TpmDevice == TPM_DEVICE_NULL TPM_DEVICE_1_2;
Expand Down

0 comments on commit c15bd99

Please sign in to comment.