UefiPayloadPkg/UefiPayloadPkg.dsc: Allow setting default Secure Boot …

…state Signed-off-by: Michał Żygowski <[email protected]>
Dasharo · Oct 24, 2023 · 315c4fa · 315c4fa
1 parent 2248bad
commit 315c4fa
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/UefiPayloadPkg/UefiPayloadPkg.dsc b/UefiPayloadPkg/UefiPayloadPkg.dsc
@@ -91,6 +91,7 @@
   # Security options:
   #
   DEFINE SECURE_BOOT_ENABLE             = FALSE
+  DEFINE SECURE_BOOT_DEFAULT_ENABLE     = TRUE
   DEFINE TPM_ENABLE                     = TRUE
   DEFINE SATA_PASSWORD_ENABLE           = FALSE
   DEFINE OPAL_PASSWORD_ENABLE           = FALSE
@@ -439,6 +440,12 @@
   gUefiPayloadPkgTokenSpaceGuid.PcdLoadOptionRoms|$(LOAD_OPTION_ROMS)
   gEfiMdeModulePkgTokenSpaceGuid.PcdSdMmcGenericTimeoutValue|$(SD_MMC_TIMEOUT)
 
+!if $(SECURE_BOOT_DEFAULT_ENABLE) == TRUE
+  gEfiSecurityPkgTokenSpaceGuid.PcdSecureBootDefaultEnable|1
+!else
+  gEfiSecurityPkgTokenSpaceGuid.PcdSecureBootDefaultEnable|0
+!endif
+
 !if $(SOURCE_DEBUG_ENABLE)
   gEfiSourceLevelDebugPkgTokenSpaceGuid.PcdDebugLoadImageMethod|0x2
 !endif