TlsAuthConfigDxe

Overview

TlsAuthConfigDxe is a UEFI DXE driver that manages TLS CA (Certificate Authority) certificates via the UEFI HII (Human Interface Infrastructure) framework. It allows users to enroll and delete TLS CA certificates through the BIOS setup menu. The driver consumes EFI_HII_CONFIG_ACCESS_PROTOCOL, EFI_HII_CONFIG_ROUTING_PROTOCOL, EFI_HII_DATABASE_PROTOCOL, and EFI_TLS_CONFIGURATION_PROTOCOL, and produces a private EFI_TLS_AUTH_CONFIG_PROTOCOL.

Key Functions

• TlsAuthConfigDriverBindingStart -- Entry point that installs HII protocols and config access
• TlsAuthConfigExtractConfig -- Returns the current TLS certificate configuration data
• TlsAuthConfigRouteConfig -- Processes configuration changes from the setup form
• TlsAuthConfigCallback -- Handles HII form callbacks for certificate operations
• TlsAuthConfigEnrollCert -- Enrolls a new CA certificate from a file (.cer, .der, .crt, .pem)
• TlsAuthConfigDeleteCert -- Removes an enrolled CA certificate
• TlsAuthConfigGetCertList -- Returns the list of currently enrolled CA certificates

Dependencies

• EFI_HII_CONFIG_ACCESS_PROTOCOL -- HII configuration access (consumed and produced)
• EFI_HII_DATABASE_PROTOCOL -- HII database management
• EFI_TLS_CONFIGURATION_PROTOCOL -- TLS configuration service
• EFI_TLS_AUTH_CONFIG_PROTOCOL -- Private TLS auth config protocol (produced)

Platform

• Source: AmiNetworkPkg/UefiNetworkStack/Common/TlsAuthConfigDxe/TlsAuthConfigDxe.c
• Architecture: X64 (PE32+)
• Formats: PE32+, 6 sections (.text, .rdata, .data, section_3, .xdata, .reloc)
• SHA256: e4931e7db6b48926fd41f313384aa7692f266e04ba2114abd1b975eee78d86f4