SecurityPkg: Add TCG_EfiSpecIDEventStruct_SPEC_ERRATA_TPM2_REV_106 check

Signed-off-by: Wenxing Hou <wenxing.hou@intel.com>
tianocore · Jan 26, 2024 · 8dffa20 · 8dffa20
1 parent 30c1e7d
commit 8dffa20
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmSecurityLib.c b/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmSecurityLib.c
@@ -74,6 +74,10 @@ SpdmDeviceAuthenticationAndMeasurement (
   BOOLEAN              IsValidCertChain;
   BOOLEAN              RootCertMatch;
 
+  if (PcdGet32 (PcdTcgPfpMeasurementRevision) < TCG_EfiSpecIDEventStruct_SPEC_ERRATA_TPM2_REV_106) {
+    return EFI_UNSUPPORTED;
+  }
+
   SpdmDeviceContext = CreateSpdmDeviceContext (SpdmDeviceInfo, SecurityState);
   if (SpdmDeviceContext == NULL) {
     return EFI_UNSUPPORTED;

diff --git a/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmSecurityLib.inf b/SecurityPkg/DeviceSecurity/SpdmSecurityLib/SpdmSecurityLib.inf
@@ -48,3 +48,6 @@
   gEdkiiDeviceSignatureDatabaseGuid       ## CONSUMES
   gEfiCertX509Guid                        ## CONSUMES
   gEfiDeviceSecuritySpdmUidGuid           ## PRODUCES AND CONSUMES
+
+[Pcd]
+  gEfiMdeModulePkgTokenSpaceGuid.PcdTcgPfpMeasurementRevision            ## CONSUMES