EFI Preboot Guidelines and Windows 8 UEFI Secure Boot for HP Business Notebooks and Desktops PPS Business Notebook and Desktop - Technical White Paper

ManualsBrandsHP ManualsComputersD8C54UT

Technical white paper | UEFI Secure Boot on HP business notebooks, desktops, and workstations

Appendix

General UEFI requirements

The BIOS incorporated in the HP business notebooks, desktops, and workstations supporting Windows 8 conforms to the

following sections of the UEFI 2.3.1 Class 2 specification:

2.3, 3.1, 4.3, 6.1 ~ 6.5, 7.1~7.5, 8.1, 8.2, 9.1, 9.5, 11.2 ~ 11.4, 11.8, 11.9, 12.4, 12.7, 12.8, 12.9, 18.5, 21.1, 21.3, 21.5,

27.1~27.8.

PCR boot measurements for notebook products

Table A1 lists the PCR boot measurements for notebook products. Section references indicated in Table A1 refer to the UEFI

2.3.1 Class 2 specification document.

Table A1..PCR boot measurements for hp business notebook products

PCR Expected measurement Actual measurement

PCR 0 S-CRTM’s version identifier using the

event type EV_S_CRTM_VERSION

All Host Platform firmware using the

event type EV_POST_CODE

ACPI data using event type

EV_UEFI_HANDOFF_TABLES

S-CRTM’s version identifier using the event type

EV_S_CRTM_VERSION

All Host Platform firmware using the event type

EV_POST_CODE

PCR 1 Not used

PCR 2

Non-manufacturer

controlled options/UEFI

drivers

Not used Currently measuring FV(??)

PCR 3 Not used

PCR 4 If the BIOS is configured or designed to

not record each device the BIOS

attempts to boot, an

EV_OMIT_BOOT_DEVICE_EVENTS

event MUST be measured once. See

Section 11.3.1 (Event Types).

The BIOS MUST record the EV_ACTION

event “Calling INT 19h” or the

EV_UEFI_ACTION event “Calling UEFI

Application from Boot Option.” See

Section 11.3.3 (EV_ACTION Event

Types).

The BIOS MUST record the EV_ACTION event “Calling

INT 19h” or the EV_UEFI_ACTION event “Calling UEFI

Application from Boot Option.” See Section 11.3.3

(EV_ACTION Event Types).

PCR 5 Not used Calling UEFI application event, GPT

PCR 6 Not used (UEFI Secure Boot data in

spec but MS indicates that they want

that in PCR 7)

Secure Boot variables

PCR 7 Not used