pldmbios: Add BIOS attributes hb_key_clear_request
This commit introduces a new BIOS attribute for key clear requests.
Depending on the value set, HB will determine if physical presence is
required to clear the requested security keys before passing the value
to HDAT.
Tested: manually added bios attr in rainier simics and HW, and verified
defualt case as well as setting BIOS hb_key_clear_request to ALL picked
up in hb attr and passing the value to HDAT.
Signed-off-by: Isaac Salem <isaac.salem@ibm.com>
Change-Id: I26c78f8fcdead0c49d3ceddb9539be95398934aa
diff --git a/oem/ibm/configurations/bios/enum_attrs.json b/oem/ibm/configurations/bios/enum_attrs.json
index 81ee998..145a525 100644
--- a/oem/ibm/configurations/bios/enum_attrs.json
+++ b/oem/ibm/configurations/bios/enum_attrs.json
@@ -388,6 +388,38 @@
],
"helpText" : "When the 'TPM Required Policy' is 'Required', a functional TPM is required to boot the system. Do not set this attribute directly; set hb_tpm_required instead.",
"displayName" : "TPM Required Policy (current)"
+ },
+ {
+ "attribute_name":"hb_key_clear_request",
+ "possible_values":[
+ "NONE",
+ "ALL",
+ "OS_KEYS",
+ "POWERVM_SYSKEY",
+ "MFG_ALL",
+ "MFG"
+ ],
+ "default_values":[
+ "NONE"
+ ],
+ "helpText" : "Specifies the requested level of security keys to be cleared from the system, requires a reboot to take effect",
+ "displayName" : "Key Clear Request (pending)"
+ },
+ {
+ "attribute_name":"hb_key_clear_request_current",
+ "possible_values":[
+ "NONE",
+ "ALL",
+ "OS_KEYS",
+ "POWERVM_SYSKEY",
+ "MFG_ALL",
+ "MFG"
+ ],
+ "default_values":[
+ "NONE"
+ ],
+ "helpText" : "Specifies the requested level of security keys to be cleared from the system for the current IPL. Do not set this attribute directly; set hb_key_clear_request instead.",
+ "displayName" : "Key Clear Request (current)"
}
]
}