Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[DO NOT MERGE] [PROTOTYPE] Stabilizing PCR4 Measurements #637

Draft
wants to merge 1 commit into
base: dev/202405
Choose a base branch
from

Conversation

Flickdm
Copy link
Member

@Flickdm Flickdm commented Feb 19, 2025

Description

This is an effort to stabilize PCR4 measurements.

There are a few known issues with PCR4 measurements that need to be addressed.

Applications that originate from a measured FV and are an extension of the BDS environment should not signal ready to boot nor be measured into PCR4.
File paths that do not exist should not be loaded thus should not signal ready to boot nor should they be measured into PCR4.
Applications that originate from a measured FV should not be measured into PCR4
(microsoft/mu_tiano_plus#330)

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?
  • Backport to release branch?

How This Was Tested

Various Boot Paths

Integration Instructions

TODO

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
impact:breaking-change Requires integration attention impact:security Has a security impact
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant