From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) by mx.groups.io with SMTP id smtpd.web11.7983.1585130086291405980 for ; Wed, 25 Mar 2020 02:54:46 -0700 Authentication-Results: mx.groups.io; dkim=missing; spf=pass (domain: intel.com, ip: 192.55.52.43, mailfrom: jiewen.yao@intel.com) IronPort-SDR: x2gPdaHDMQnEuDWUy72863XmCHQBcffvXrnFAPQYD6KgQ2eFZ5MW6K444LsK5cXEMrGNcKqFCL AH5UtBo8T3vg== X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by fmsmga105.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 25 Mar 2020 02:54:45 -0700 IronPort-SDR: JyjQPsC7WkT02GMyocVWJ7ajS1KL81kKeS/uLNdrJUg0oNgRutih7s752QTEbbMLRpb+hEJ5ra Vf/lYRGnE90A== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.72,303,1580803200"; d="scan'208,217";a="326183626" Received: from fmsmsx107.amr.corp.intel.com ([10.18.124.205]) by orsmga001.jf.intel.com with ESMTP; 25 Mar 2020 02:54:45 -0700 Received: from FMSMSX109.amr.corp.intel.com (10.18.116.9) by fmsmsx107.amr.corp.intel.com (10.18.124.205) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 25 Mar 2020 02:54:45 -0700 Received: from shsmsx106.ccr.corp.intel.com (10.239.4.159) by fmsmsx109.amr.corp.intel.com (10.18.116.9) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 25 Mar 2020 02:54:44 -0700 Received: from shsmsx102.ccr.corp.intel.com ([169.254.2.50]) by SHSMSX106.ccr.corp.intel.com ([169.254.10.86]) with mapi id 14.03.0439.000; Wed, 25 Mar 2020 17:54:41 +0800 From: "Yao, Jiewen" To: Bret Barkelew , "devel@edk2.groups.io" , "Wang, Jian J" CC: "Zhang, Chao B" , "Mistry, Nishant C" Subject: Re: [EXTERNAL] [edk2-devel] [PATCH v4 1/3] SecurityPkg: add RpmcLib and VariableKeyLib public headers Thread-Topic: [EXTERNAL] [edk2-devel] [PATCH v4 1/3] SecurityPkg: add RpmcLib and VariableKeyLib public headers Thread-Index: AQHWAaZ2KRN+SYSp7keOLdpXPgMT2ahXfkYAgAGSTTA= Date: Wed, 25 Mar 2020 09:54:40 +0000 Message-ID: <74D8A39837DF1E4DA445A8C0B3885C503F99952D@shsmsx102.ccr.corp.intel.com> References: <20200324063523.336-1-jian.j.wang@intel.com>,<20200324063523.336-2-jian.j.wang@intel.com> In-Reply-To: Accept-Language: zh-CN, en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.2.0.6 dlp-reaction: no-action msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-03-24T17:43:46.7432723Z;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0;MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Privileged x-originating-ip: [10.239.127.40] MIME-Version: 1.0 Return-Path: jiewen.yao@intel.com Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_74D8A39837DF1E4DA445A8C0B3885C503F99952Dshsmsx102ccrcor_" --_000_74D8A39837DF1E4DA445A8C0B3885C503F99952Dshsmsx102ccrcor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Good point. I think the original design limits the usage to be variable driver. As such= , the API only gets a "variable root key". A "platform root key" can derive the "variable root key" and some "other fe= atures' root key". The tricky part is to regenerate the key, when the variable is under attack= . In that case, we want to only regenerate the "variable root key", instead o= f "platform root key". That's why we want to introduce a variablekeylib module. To make API consistent, maybe we should rename GetVariableRootKey() to GetV= ariableKey(), RegenerateKey() to RegenerateVariableKey(), and LockKeyInterf= ace() to LockVariableKeyInterface() If we really want to create a generic platformkeylib module, then we need a= dd a key indicator. Such as: EFI_STATUS EFIAPI GetPlatformKey ( IN GUID *KeyIndicator, OUT VOID **PlatformKey, IN OUT UINTN *PlatformKeySize ); Then the variable driver can pass a GUID, and any other feature driver can = pass anther GUID. Thank you Yao Jiewen From: Bret Barkelew Sent: Wednesday, March 25, 2020 1:44 AM To: devel@edk2.groups.io; Wang, Jian J Cc: Yao, Jiewen ; Zhang, Chao B ; Mistry, Nishant C Subject: RE: [EXTERNAL] [edk2-devel] [PATCH v4 1/3] SecurityPkg: add RpmcLi= b and VariableKeyLib public headers Is there a reason this needs to be called "VariableKeyLib" rather than any = other "KeyLib"? It seems general-purpose as an interface. - Bret ________________________________ From: devel@edk2.groups.io > on behalf of Wang, Jian J via Groups.Io > Sent: Monday, March 23, 2020 11:35:21 PM To: devel@edk2.groups.io > Cc: Jiewen Yao >; Chao Zh= ang >; Nishant C Mist= ry > Subject: [EXTERNAL] [edk2-devel] [PATCH v4 1/3] SecurityPkg: add RpmcLib an= d VariableKeyLib public headers > v4: remove CounterId which should not be exposed REF: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fbu= gzilla.tianocore.org%2Fshow_bug.cgi%3Fid%3D2594&data=3D02%7C01%7Cbret.b= arkelew%40microsoft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141= af91ab2d7cd011db47%7C1%7C0%7C637206285305504454&sdata=3DwCxxsc6cc%2Ffdu= q88XOZOZv6debpAQMZiIdsFjD0zHXE%3D&reserved=3D0 RpmcLib.h and VariableKeyLib.h are header files required to access RPMC device and Key generator from platform. They will be used to ensure the integrity and confidentiality of NV variables. Cc: Jiewen Yao > Cc: Chao Zhang > Cc: Nishant C Mistry > Signed-off-by: Jian J Wang > --- SecurityPkg/Include/Library/RpmcLib.h | 42 ++++++++++++++ SecurityPkg/Include/Library/VariableKeyLib.h | 59 ++++++++++++++++++++ SecurityPkg/SecurityPkg.dec | 8 +++ 3 files changed, 109 insertions(+) create mode 100644 SecurityPkg/Include/Library/RpmcLib.h create mode 100644 SecurityPkg/Include/Library/VariableKeyLib.h diff --git a/SecurityPkg/Include/Library/RpmcLib.h b/SecurityPkg/Include/Li= brary/RpmcLib.h new file mode 100644 index 0000000000..8e3868516c --- /dev/null +++ b/SecurityPkg/Include/Library/RpmcLib.h @@ -0,0 +1,42 @@ +/** @file + Public definitions for the Replay Protected Monotonic Counter (RPMC) Lib= rary. + +Copyright (c) 2020, Intel Corporation. All rights reserved.
+SPDX-License-Identifier: BSD-2-Clause-Patent + +**/ + +#ifndef _RPMC_LIB_H_ +#define _RPMC_LIB_H_ + +#include + +/** + Requests the monotonic counter from the designated RPMC counter. + + @param[out] CounterValue A pointer to a buffer to store the= RPMC value. + + @retval EFI_SUCCESS The operation completed successful= ly. + @retval EFI_DEVICE_ERROR A device error occurred while atte= mpting to update the counter. + @retval EFI_UNSUPPORTED The operation is un-supported. +**/ +EFI_STATUS +EFIAPI +RequestMonotonicCounter ( + OUT UINT32 *CounterValue + ); + +/** + Increments the monotonic counter in the SPI flash device by 1. + + @retval EFI_SUCCESS The operation completed successful= ly. + @retval EFI_DEVICE_ERROR A device error occurred while atte= mpting to update the counter. + @retval EFI_UNSUPPORTED The operation is un-supported. +**/ +EFI_STATUS +EFIAPI +IncrementMonotonicCounter ( + VOID + ); + +#endif \ No newline at end of file diff --git a/SecurityPkg/Include/Library/VariableKeyLib.h b/SecurityPkg/Inc= lude/Library/VariableKeyLib.h new file mode 100644 index 0000000000..fe642b3d66 --- /dev/null +++ b/SecurityPkg/Include/Library/VariableKeyLib.h @@ -0,0 +1,59 @@ +/** @file + Public definitions for Variable Key Library. + +Copyright (c) 2020, Intel Corporation. All rights reserved.
+SPDX-License-Identifier: BSD-2-Clause-Patent + +**/ + +#ifndef _VARIABLE_KEY_LIB_H_ +#define _VARIABLE_KEY_LIB_H_ + +#include + +/** + Retrieves the variable root key. + + @param[out] VariableRootKey A pointer to pointer for the var= iable root key buffer. + @param[in,out] VariableRootKeySize The size in bytes of the variabl= e root key. + + @retval EFI_SUCCESS The variable root key was returned= . + @retval EFI_DEVICE_ERROR An error occurred while attempting= to get the variable root key. + @retval EFI_ACCESS_DENIED The function was invoked after loc= king the key interface. + @retval EFI_UNSUPPORTED The variable root key is not suppo= rted in the current boot configuration. +**/ +EFI_STATUS +EFIAPI +GetVariableRootKey ( + OUT VOID **VariableRootKey, + IN OUT UINTN *VariableRootKeySize + ); + +/** + Regenerates the variable root key. + + @retval EFI_SUCCESS The variable root key was regenera= ted successfully. + @retval EFI_DEVICE_ERROR An error occurred while attempting= to regenerate the root key. + @retval EFI_ACCESS_DENIED The function was invoked after loc= king the key interface. + @retval EFI_UNSUPPORTED Key regeneration is not supported = in the current boot configuration. +**/ +EFI_STATUS +EFIAPI +RegenerateKey ( + VOID + ); + +/** + Locks the regenerate key interface. + + @retval EFI_SUCCESS The key interface was locked succe= ssfully. + @retval EFI_UNSUPPORTED Locking the key interface is not s= upported in the current boot configuration. + @retval Others An error occurred while attempting= to lock the key interface. +**/ +EFI_STATUS +EFIAPI +LockKeyInterface ( + VOID + ); + +#endif \ No newline at end of file diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec index 5335cc5397..2cdfb02cc5 100644 --- a/SecurityPkg/SecurityPkg.dec +++ b/SecurityPkg/SecurityPkg.dec @@ -76,6 +76,14 @@ # TcgStorageOpalLib|Include/Library/TcgStorageOpalLib.h + ## @libraryclass Provides interfaces to access RPMC device. + # + RpmcLib|Include/Library/RpmcLib.h + + ## @libraryclass Provides interfaces to access variable root key. + # + VariableKeyLib|Include/Library/VariableKeyLib.h + [Guids] ## Security package token space guid. # Include/Guid/SecurityPkgTokenSpace.h -- 2.24.0.windows.2 -=3D-=3D-=3D-=3D-=3D-=3D Groups.io Links: You receive all messages sent to this group. View/Reply Online (#56132): https://nam06.safelinks.protection.outlook.com/= ?url=3Dhttps%3A%2F%2Fedk2.groups.io%2Fg%2Fdevel%2Fmessage%2F56132&data= =3D02%7C01%7Cbret.barkelew%40microsoft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b= 82%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637206285305514447&sdat= a=3DCoBs9mwnHTAAZiErAEHS3E7dbdRd%2FZefJPKXKPmJwfc%3D&reserved=3D0 Mute This Topic: https://nam06.safelinks.protection.outlook.com/?url=3Dhttp= s%3A%2F%2Fgroups.io%2Fmt%2F72512084%2F1852292&data=3D02%7C01%7Cbret.bar= kelew%40microsoft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141af= 91ab2d7cd011db47%7C1%7C0%7C637206285305514447&sdata=3D%2B14%2BIfGmu88GS= nKZnpb51EGaW3MqfFCT1%2BWI5Bhdlo0%3D&reserved=3D0 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A= %2F%2Fedk2.groups.io%2Fg%2Fdevel%2Funsub&data=3D02%7C01%7Cbret.barkelew= %40microsoft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141af91ab2= d7cd011db47%7C1%7C0%7C637206285305514447&sdata=3DJLLWLjx0OW0eTjn7xXG5aN= HdAfWQqhY4qLXSuNhhcys%3D&reserved=3D0 [bret.barkelew@microsoft.com] -=3D-=3D-=3D-=3D-=3D-=3D --_000_74D8A39837DF1E4DA445A8C0B3885C503F99952Dshsmsx102ccrcor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Good point.

 

I think the original design limits the usage to be v= ariable driver. As such, the API only gets a “variable root key”= ;.

 

A “platform root key” can derive the = 220;variable root key” and some “other features’ root key= ”.

 

The tricky part is to regenerate the key, when the v= ariable is under attack.

In that case, we want to only regenerate the “= variable root key”, instead of “platform root key”.<= /o:p>

That’s why we want to introduce a variablekeyl= ib module.

To make API consistent, maybe we should rename GetVa= riableRootKey() to GetVariableKey(), RegenerateKey() to RegenerateVariableK= ey(), and LockKeyInterface() to LockVariableKeyInterface()

 

 

If we really want to create a generic platformkeylib= module, then we need add a key indicator. Such as:

EFI_STATUS
EFIAPI
GetPlatformKey (

  IN GUID   *KeyIndicator,
  OUT VOID    **PlatformKey,
  IN  OUT UINTN   *PlatformKeySize
  );

Then the variable driver can pass a GUID, and any ot= her feature driver can pass anther GUID.

 

Thank you

Yao Jiewen

 

 

From: Bret Barkelew <Bret.Barkelew@microso= ft.com>
Sent: Wednesday, March 25, 2020 1:44 AM
To: devel@edk2.groups.io; Wang, Jian J <jian.j.wang@intel.com>=
Cc: Yao, Jiewen <jiewen.yao@intel.com>; Zhang, Chao B <chao= .b.zhang@intel.com>; Mistry, Nishant C <nishant.c.mistry@intel.com>= ;
Subject: RE: [EXTERNAL] [edk2-devel] [PATCH v4 1/3] SecurityPkg: add= RpmcLib and VariableKeyLib public headers

 

Is there a reason this needs to be called “Var= iableKeyLib” rather than any other “KeyLib”? It seems gen= eral-purpose as an interface.

 

- Bret

 

From: devel@edk2.groups.io <devel@edk2.groups.io> on behalf of= Wang, Jian J via Groups.Io <jian.j.wang=3Dintel.com@groups.io>
Sent: Monday, March 23, 2020 11:35:21 PM
To: devel@edk2.groups.io= <devel@edk2.groups.io> Cc: Jiewen Yao <jiewen.ya= o@intel.com>; Chao Zhang <chao.b.zhang@intel.com>; Nishant C Mistry <nishant.c.mistry@intel.com>
Subject: [EXTERNAL] [edk2-devel] [PATCH v4 1/3] SecurityPkg: add Rpm= cLib and VariableKeyLib public headers

 

> v4: remove Count= erId which should not be exposed

REF: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fbugzill= a.tianocore.org%2Fshow_bug.cgi%3Fid%3D2594&amp;data=3D02%7C01%7Cbret.ba= rkelew%40microsoft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141a= f91ab2d7cd011db47%7C1%7C0%7C637206285305504454&amp;sdata=3DwCxxsc6cc%2F= fduq88XOZOZv6debpAQMZiIdsFjD0zHXE%3D&amp;reserved=3D0

RpmcLib.h and VariableKeyLib.h are header files required to access RPMC
device and Key generator from platform. They will be used to ensure the
integrity and confidentiality of NV variables.

Cc: Jiewen Yao <jiewen.yao@intel= .com>
Cc: Chao Zhang <chao.b.zhang@i= ntel.com>
Cc: Nishant C Mistry <nish= ant.c.mistry@intel.com>
Signed-off-by: Jian J Wang <jia= n.j.wang@intel.com>
---
 SecurityPkg/Include/Library/RpmcLib.h     &n= bsp;  | 42 ++++++++++++= ;++
 SecurityPkg/Include/Library/VariableKeyLib.h | 59 ++++= ;+++++++++++++++= ;+
 SecurityPkg/SecurityPkg.dec       =            |  8 += ;++
 3 files changed, 109 insertions(+)
 create mode 100644 SecurityPkg/Include/Library/RpmcLib.h
 create mode 100644 SecurityPkg/Include/Library/VariableKeyLib.h

diff --git a/SecurityPkg/Include/Library/RpmcLib.h b/SecurityPkg/Include/Li= brary/RpmcLib.h
new file mode 100644
index 0000000000..8e3868516c
--- /dev/null
+++ b/SecurityPkg/Include/Library/RpmcLib.h
@@ -0,0 +1,42 @@
+/** @file

+  Public definitions for the Replay Protected Monotonic Counter (= RPMC) Library.

+

+Copyright (c) 2020, Intel Corporation. All rights reserved.<BR><= br>
+SPDX-License-Identifier: BSD-2-Clause-Patent

+

+**/

+

+#ifndef _RPMC_LIB_H_

+#define _RPMC_LIB_H_

+

+#include <Uefi/UefiBaseType.h>

+

+/**

+  Requests the monotonic counter from the designated RPMC counter= .

+

+  @param[out]   CounterValue    &nb= sp;       A pointer to a buffer to store the = RPMC value.

+

+  @retval       EFI_SUCCESS &n= bsp;           The operat= ion completed successfully.

+  @retval       EFI_DEVICE_ERROR&nb= sp;       A device error occurred while attem= pting to update the counter.

+  @retval       EFI_UNSUPPORTED&nbs= p;        The operation is un-supported.=

+**/

+EFI_STATUS

+EFIAPI

+RequestMonotonicCounter (

+  OUT UINT32  *CounterValue

+  );

+

+/**

+  Increments the monotonic counter in the SPI flash device by 1.<= br>
+

+  @retval       EFI_SUCCESS &n= bsp;           The operat= ion completed successfully.

+  @retval       EFI_DEVICE_ERROR&nb= sp;       A device error occurred while attem= pting to update the counter.

+  @retval       EFI_UNSUPPORTED&nbs= p;        The operation is un-supported.=

+**/

+EFI_STATUS

+EFIAPI

+IncrementMonotonicCounter (

+  VOID

+  );

+

+#endif
\ No newline at end of file
diff --git a/SecurityPkg/Include/Library/VariableKeyLib.h b/SecurityPkg/Inc= lude/Library/VariableKeyLib.h
new file mode 100644
index 0000000000..fe642b3d66
--- /dev/null
+++ b/SecurityPkg/Include/Library/VariableKeyLib.h
@@ -0,0 +1,59 @@
+/** @file

+  Public definitions for Variable Key Library.

+

+Copyright (c) 2020, Intel Corporation. All rights reserved.<BR><= br>
+SPDX-License-Identifier: BSD-2-Clause-Patent

+

+**/

+

+#ifndef _VARIABLE_KEY_LIB_H_

+#define _VARIABLE_KEY_LIB_H_

+

+#include <Uefi/UefiBaseType.h>

+

+/**

+  Retrieves the variable root key.

+

+  @param[out]     VariableRootKey  =        A pointer to pointer for the variable = root key buffer.

+  @param[in,out]  VariableRootKeySize    = ; The size in bytes of the variable root key.

+

+  @retval       EFI_SUCCESS &n= bsp;           The variab= le root key was returned.

+  @retval       EFI_DEVICE_ERROR&nb= sp;       An error occurred while attempting = to get the variable root key.

+  @retval       EFI_ACCESS_DENIED&n= bsp;      The function was invoked after locking t= he key interface.

+  @retval       EFI_UNSUPPORTED&nbs= p;        The variable root key is not s= upported in the current boot configuration.

+**/

+EFI_STATUS

+EFIAPI

+GetVariableRootKey (

+      OUT VOID    **VariableRo= otKey,

+  IN  OUT UINTN   *VariableRootKeySize

+  );

+

+/**

+  Regenerates the variable root key.

+

+  @retval       EFI_SUCCESS &n= bsp;           The variab= le root key was regenerated successfully.

+  @retval       EFI_DEVICE_ERROR&nb= sp;       An error occurred while attempting = to regenerate the root key.

+  @retval       EFI_ACCESS_DENIED&n= bsp;      The function was invoked after locking t= he key interface.

+  @retval       EFI_UNSUPPORTED&nbs= p;        Key regeneration is not suppor= ted in the current boot configuration.

+**/

+EFI_STATUS

+EFIAPI

+RegenerateKey (

+  VOID

+  );

+

+/**

+  Locks the regenerate key interface.

+

+  @retval       EFI_SUCCESS &n= bsp;           The key in= terface was locked successfully.

+  @retval       EFI_UNSUPPORTED&nbs= p;        Locking the key interface is n= ot supported in the current boot configuration.

+  @retval       Others  &= nbsp;           &nbs= p;   An error occurred while attempting to lock the key interface= .

+**/

+EFI_STATUS

+EFIAPI

+LockKeyInterface (

+  VOID

+  );

+

+#endif
\ No newline at end of file
diff --git a/SecurityPkg/SecurityPkg.dec b/SecurityPkg/SecurityPkg.dec
index 5335cc5397..2cdfb02cc5 100644
--- a/SecurityPkg/SecurityPkg.dec
+++ b/SecurityPkg/SecurityPkg.dec
@@ -76,6 +76,14 @@
   #

   TcgStorageOpalLib|Include/Library/TcgStorageOpalLib.h

 

+  ## @libraryclass  Provides interfaces to access RPMC devic= e.

+  #

+  RpmcLib|Include/Library/RpmcLib.h

+

+  ## @libraryclass  Provides interfaces to access variable r= oot key.

+  #

+  VariableKeyLib|Include/Library/VariableKeyLib.h

+

 [Guids]

   ## Security package token space guid.

   # Include/Guid/SecurityPkgTokenSpace.h

--
2.24.0.windows.2


-=3D-=3D-=3D-=3D-=3D-=3D
Groups.io Links: You receive all messages sent to this group.

View/Reply Online (#56132): https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fedk2.gr= oups.io%2Fg%2Fdevel%2Fmessage%2F56132&amp;data=3D02%7C01%7Cbret.barkele= w%40microsoft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141af91ab= 2d7cd011db47%7C1%7C0%7C637206285305514447&amp;sdata=3DCoBs9mwnHTAAZiErA= EHS3E7dbdRd%2FZefJPKXKPmJwfc%3D&amp;reserved=3D0
Mute This Topic: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fgroups.= io%2Fmt%2F72512084%2F1852292&amp;data=3D02%7C01%7Cbret.barkelew%40micro= soft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141af91ab2d7cd011d= b47%7C1%7C0%7C637206285305514447&amp;sdata=3D%2B14%2BIfGmu88GSnKZnpb51E= GaW3MqfFCT1%2BWI5Bhdlo0%3D&amp;reserved=3D0
Group Owner: devel+ow= ner@edk2.groups.io
Unsubscribe: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fedk2.gr= oups.io%2Fg%2Fdevel%2Funsub&amp;data=3D02%7C01%7Cbret.barkelew%40micros= oft.com%7C3e34ac4a40d94c82e86b08d7cfbd8b82%7C72f988bf86f141af91ab2d7cd011db= 47%7C1%7C0%7C637206285305514447&amp;sdata=3DJLLWLjx0OW0eTjn7xXG5aNHdAfW= QqhY4qLXSuNhhcys%3D&amp;reserved=3D0  [bret.barkelew@microsoft.com]
-=3D-=3D-=3D-=3D-=3D-=3D

--_000_74D8A39837DF1E4DA445A8C0B3885C503F99952Dshsmsx102ccrcor_--