summaryrefslogtreecommitdiff
path: root/payloads/external/edk2
diff options
context:
space:
mode:
Diffstat (limited to 'payloads/external/edk2')
-rw-r--r--payloads/external/edk2/Kconfig8
-rw-r--r--payloads/external/edk2/Makefile4
2 files changed, 12 insertions, 0 deletions
diff --git a/payloads/external/edk2/Kconfig b/payloads/external/edk2/Kconfig
index 2c8152f27d..c166975f81 100644
--- a/payloads/external/edk2/Kconfig
+++ b/payloads/external/edk2/Kconfig
@@ -242,6 +242,14 @@ config EDK2_SERIAL_SUPPORT
Enable serial port output in edk2. Serial output limits the performance of edk2's
FrontPage.
+config EDK2_SECURE_BOOT_SUPPORT
+ bool "Enable UEFI Secure Boot support"
+ depends on EDK2_REPO_MRCHROMEBOX && SMMSTORE_V2
+ default y if EDK2_REPO_MRCHROMEBOX && SMMSTORE_V2
+ help
+ Select this option to enable UEFI SecureBoot support in edk2.
+ UEFI SecureBoot will be disabled by default and can be enabled from the menu option.
+
config EDK2_CUSTOM_BUILD_PARAMS
string "edk2 additional custom build parameters"
default "-D VARIABLE_SUPPORT=SMMSTORE" if EDK2_REPO_MRCHROMEBOX && SMMSTORE_V2
diff --git a/payloads/external/edk2/Makefile b/payloads/external/edk2/Makefile
index b241cf9688..21812422fb 100644
--- a/payloads/external/edk2/Makefile
+++ b/payloads/external/edk2/Makefile
@@ -111,6 +111,10 @@ endif
ifneq ($(CONFIG_EDK2_SD_MMC_TIMEOUT),)
BUILD_STR += -D SD_MMC_TIMEOUT=$(shell echo $$(( $(CONFIG_EDK2_SD_MMC_TIMEOUT) * 1000)) )
endif
+# EDK2_SECURE_BOOT_SUPPORT = FALSE
+ifeq ($(CONFIG_EDK2_SECURE_BOOT_SUPPORT), y)
+BUILD_STR += -D SECURE_BOOT_ENABLE=TRUE
+endif
#
# EDKII has the below PCDs that are relevant to coreboot: