From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <zqsmith4926@gmail.com>
Received: from mail-qt0-x235.google.com (mail-qt0-x235.google.com
 [IPv6:2607:f8b0:400d:c0d::235])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by ml01.01.org (Postfix) with ESMTPS id 6448021AEB0BA
 for <edk2-devel@lists.01.org>; Mon,  7 Aug 2017 09:36:19 -0700 (PDT)
Received: by mail-qt0-x235.google.com with SMTP id t37so5644903qtg.5
 for <edk2-devel@lists.01.org>; Mon, 07 Aug 2017 09:38:35 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:from:date:message-id:subject:to;
 bh=ig5QE2oJ1lHPP0SI7stb7Jvn3XGg53jOtcjKBfjuyzQ=;
 b=d2cxFrkoUqBGO24dhBygwcDyRg6H0h21AJ3QeWgc+X6TGVtFdkzh3wMWhBFeO21jPk
 4pCsK/0qL6kDALfgZtZZ3CuWJRXuO6r2IhrcY52Vk19ZryKOGlRHhL2AUDuawhqIdH3B
 Eye3PBL+6n0tu8Ze5fUngQrJa9XjmD3eDZ/RgdR9Qq0mgWwnQYJg3W3sXm0Qj2csEqAf
 0Wj1VO9ct9eudWowg37MvYoM9asvtB5QOLkDL5TYuVKlqgyNdnRj/8FjC7zzwUZKJ84R
 9jzv/lP73C09f+Yc/gXn/7Dk3zxw2zCKubKAd6r1WfBJUpsIjnaCHzu1MspNp/g1aRfO
 HGHQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=ig5QE2oJ1lHPP0SI7stb7Jvn3XGg53jOtcjKBfjuyzQ=;
 b=hdnRBy8YIc3xTcchkEaPRadbgZMCHaTIaZ13OMhBF/EeowiNSgPySFJEncx6zoKKiM
 Ye1SeQP1XSUBJIUtDgp0zw1oFN6LegNUDd82ZUnoTjKN8At8oSZmYFfjz3e6BCdo8VTD
 EsO11iyKv/wlOPEaseGLnmhOnj5U+WdaYTZuyOnvcBiBmJOXx3e1E15Peghak4ToGxHS
 D9OLDfE2eZfASBWA7YMPdC+2l8NrCpOHM+h5AMMmUskFh/uOg9sMWXOqQer41qaInMTr
 qAshJDrqMz9m3A2dFb21uw8HHugPQ5MGaTDksrSQS9O9OiAR9GdqXbUpyRNvTu8dF99z
 Lygw==
X-Gm-Message-State: AHYfb5i2jLgb/JbsTqPIjwqLjbWT1vUWY0qtkXkOL5LIrSvbIQCpNH4m
 rli90pYNpnaBDBtyVDaS0oPy5vq+zFFp
X-Received: by 10.237.41.135 with SMTP id o7mr1734417qtd.75.1502123914303;
 Mon, 07 Aug 2017 09:38:34 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.237.37.161 with HTTP; Mon, 7 Aug 2017 09:38:33 -0700 (PDT)
From: Zach Smith <zqsmith4926@gmail.com>
Date: Mon, 7 Aug 2017 11:38:33 -0500
Message-ID: <CACPodBzkmYf5tnsry8gzEmchdBsw-gw2zN0oGpKx4qC5ruNKcA@mail.gmail.com>
To: edk2-devel@lists.01.org
X-Content-Filtered-By: Mailman/MimeDel 2.1.22
Subject: Setting Secure Boot Variables
X-BeenThere: edk2-devel@lists.01.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: EDK II Development  <edk2-devel.lists.01.org>
List-Unsubscribe: <https://lists.01.org/mailman/options/edk2-devel>,
 <mailto:edk2-devel-request@lists.01.org?subject=unsubscribe>
List-Archive: <http://lists.01.org/pipermail/edk2-devel/>
List-Post: <mailto:edk2-devel@lists.01.org>
List-Help: <mailto:edk2-devel-request@lists.01.org?subject=help>
List-Subscribe: <https://lists.01.org/mailman/listinfo/edk2-devel>,
 <mailto:edk2-devel-request@lists.01.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Aug 2017 16:36:19 -0000
Content-Type: text/plain; charset="UTF-8"

Is there any way I can pre-set the values for the PK, KEK, certificate,
etc. for using Secure Boot?

I have found an array in SecurityPkg/Tcg/Tcg2Dxe/Tcg2Dxe.c that seems to
use variable names which are defined in
MdePkg/Include/Guid/GlobalVariable.h, but I haven't been able to locate any
way to associate these names with key values. Is this possible? I am trying
to automate the setup of Secure Boot and its keys.

Thanks,

Zach