SecurityPkg[all]  0.98
 All Data Structures Files Functions Variables Typedefs Enumerations Enumerator Macros Pages
PlatformSecureLib.h File Reference

Functions

BOOLEAN EFIAPI UserPhysicalPresent (VOID)
 

Detailed Description

Provides a secure platform-specific method to detect physically present user.

Copyright (c) 2011 - 2018, Intel Corporation. All rights reserved.
SPDX-License-Identifier: BSD-2-Clause-Patent

Function Documentation

BOOLEAN EFIAPI UserPhysicalPresent ( VOID  )

This function provides a platform-specific method to detect whether the platform is operating by a physically present user.

Programmatic changing of platform security policy (such as disable Secure Boot, or switch between Standard/Custom Secure Boot mode) MUST NOT be possible during Boot Services or after exiting EFI Boot Services. Only a physically present user is allowed to perform these operations.

NOTE THAT: This function cannot depend on any EFI Variable Service since they are not available when this function is called in AuthenticateVariable driver.

Return values
TRUEThe platform is operated by a physically present user.
FALSEThe platform is NOT operated by a physically present user.