1 files changed, 42 insertions, 0 deletions
diff --git a/SecurityPkg/Include/Library/PlatformSecureLib.h b/SecurityPkg/Include/Library/PlatformSecureLib.h
new file mode 100644
index 000000000..c544719ba
--- /dev/null
+++ b/SecurityPkg/Include/Library/PlatformSecureLib.h
@@ -0,0 +1,42 @@
+/** @file
+  Provides a secure platform-specific method to clear PK(Platform Key).
+
+Copyright (c) 2011, Intel Corporation. All rights reserved.<BR>
+This program and the accompanying materials 
+are licensed and made available under the terms and conditions of the BSD License 
+which accompanies this distribution.  The full text of the license may be found at 
+http://opensource.org/licenses/bsd-license.php
+
+THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, 
+WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
+
+**/
+
+#ifndef __PLATFORM_SECURE_LIB_H__
+#define __PLATFORM_SECURE_LIB_H__
+
+
+/**
+
+  This function detects whether a secure platform-specific method to clear PK(Platform Key)
+  is configured by platform owner. This method is provided for users force to clear PK 
+  in case incorrect enrollment mis-haps.
+  
+  UEFI231 spec chapter 27.5.2 stipulates: The platform key may also be cleared using 
+  a secure platform-specific method. In  this case, the global variable SetupMode 
+  must also be updated to 1.
+
+  NOTE THAT: This function cannot depend on any EFI Variable Service since they are
+  not available when this function is called in AuthenticateVariable driver.
+  
+  @retval  TRUE       The Platform owner wants to force clear PK.
+  @retval  FALSE      The Platform owner doesn't want to force clear PK. 
+
+**/
+BOOLEAN
+EFIAPI
+ForceClearPK (
+  VOID
+  );
+
+#endif
+\ No newline at end of file