Add Secure Version Lockin BIOS Attribute
This commit introduces a new BIOS attribute for secure version lockin
support. When the attribute is set, HB will accept the new incoming
secure version as the default min secure version on the system. When
the lockin is disabled, the min secure version will stay the same
despite code updates.
Signed-off-by: Ilya Smirnov <ismirno@us.ibm.com>
Change-Id: I100c7cecfb148d9cab3879b2a98320a1eaf62dcf
diff --git a/oem/ibm/configurations/bios/enum_attrs.json b/oem/ibm/configurations/bios/enum_attrs.json
index d1aecd8..81f79b6 100644
--- a/oem/ibm/configurations/bios/enum_attrs.json
+++ b/oem/ibm/configurations/bios/enum_attrs.json
@@ -227,6 +227,18 @@
],
"helpText" : "Specifies if the power limit is enabled.",
"displayName" : "Power Limit Enable"
+ },
+ {
+ "attribute_name":"hb_secure_ver_lockin_enabled",
+ "possible_values":[
+ "Enabled",
+ "Disabled"
+ ],
+ "default_values":[
+ "Disabled"
+ ],
+ "helpText" : "Specifies whether the secure version lockin functionality is enabled.",
+ "displayName" : "Secure Version Lockin Enabled"
}
]
}