Hi Laszlo,

Thanks for your report, I have fixed this issue in patch 14380, please help to 
verify it. Thanks.

Revision: 14380
          http://edk2.svn.sourceforge.net/edk2/?rev=14380&view=rev
Author:   ydong10
Date:     2013-05-21 05:50:23 +0000 (Tue, 21 May 2013)
Log Message:
-----------
When finish using the browser storage for one formset, browser should clean the 
ConfigRequest string for this formset.

Signed-off-by: Eric Dong <eric.d...@intel.com>
Reviewed-by: Liming Gao <liming....@intel.com>


Thanks,
Eric

-----Original Message-----
From: Laszlo Ersek [mailto:ler...@redhat.com] 
Sent: Monday, May 20, 2013 6:01 AM
To: Dong, Eric
Cc: edk2-devel@lists.sourceforge.net; Gao, Liming
Subject: SetupBrowserDxe: r14370 breaks PK enrolment / secure boot in OvmfPkg

Hi,

SVN r14370 ("Update the logic about get initial value for one storage.") breaks 
Platform Key enrolment in OvmfPkg, and as a consequence Secure Boot in general.

Normally in OvmfPkg we enrol PK, one KEK and maybe one DB entry, and 
immediately boot a boot option. The "enrol PK" step happens as:

Device Manager
  Secure Boot Configuration
    Secure Boot Mode
      -> set Custom Mode
  Custom Secure Boot Options
    PK Options
      Enroll PK
        Enroll PK Using File
          -> select file
          Commit Changes and Exit
  Secure Boot Configuration (*)
    /* ... continue with KEK ... */

At the point marked with (*), the

  Attempt Secure Boot [X]

checkbox can be highlighted with the cursor, and is actually X-ed after PK 
enrolment. SVN r14370 breaks this; it is impossible to navigate to, or to set 
the Attempt Secure Boot checkbox. Secure Boot is hence unreachable.

Reverting r14370 fixes the problem for me (but of course restores the original 
bug that r14370 was meant to fix).

Thanks,
Laszlo

------------------------------------------------------------------------------
Try New Relic Now & We'll Send You this Cool Shirt
New Relic is the only SaaS-based application performance monitoring service 
that delivers powerful full stack analytics. Optimize and monitor your
browser, app, & servers with just a few lines of code. Try New Relic
and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
_______________________________________________
edk2-devel mailing list
edk2-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/edk2-devel

Reply via email to