• Mark Pearson's avatar
    platform/x86: think-lmi: Certificate authentication support · b49f72e7
    Mark Pearson authored
    Implementation of certificate authentication feature for Lenovo
    platforms. This allows for signed updates of BIOS settings.
    
    Functionality supported:
     - Cert support available check. At initialisation check if BIOS
       supports certification authentication and if a certificate is
       installed. Enable the sysfs nodes appropriately
     - certificate and signature authentication attributes to enable
       a user to install, update and delete a certificate using signed
       signatures
     - certificate_thumbprint to confirm installed certificate details
     - support to go from certificate to password based authentication
     - signature and save_signature attributes needed for setting BIOS
       attributes using certificate authentication.
    
    Tested on X1 Carbon G10 and X1 Yoga G7. This feature is not
    generally available yet but will be released later this year.
    
    Note, I also cleaned up the formating of the GUIDs when I was adding
    the new defines. Hope that's OK to combine in this commit.
    Signed-off-by: default avatarMark Pearson <markpearson@lenovo.com>
    Link: https://lore.kernel.org/r/20220317214008.3459-2-markpearson@lenovo.comReviewed-by: default avatarHans de Goede <hdegoede@redhat.com>
    Signed-off-by: default avatarHans de Goede <hdegoede@redhat.com>
    b49f72e7
think-lmi.c 42 KB