SecurityStubDxe

UEFI DXE driver that installs the EFI Security Architecture Protocol (gEfiSecurityArchProtocolGuid) and EFI Security2 Architecture Protocol (gEfiSecurity2ArchProtocolGuid). Provides the platform's image verification and authorization policy, including secure boot enforcement, certificate database (DB/DBX) validation, and deferred 3rd-party image dispatch until after DxeSmmReadyToLock.

Key Functions

• ModuleEntryPoint -- Driver entry point; installs Security and Security2 architecture protocols
• SecurityStub -- Core security policy handler for image authentication
• Defer3rdPartyImageLoad -- Delays 3rd-party image dispatch until after SMM ready-to-lock
• DxeImageVerificationLib -- Image signature verification (SHA hash, X.509 certificate, PKCS7)
• DxeTpmMeasureBootLib -- Measures boot images into TPM PCRs

Dependencies

• gEfiSecurityArchProtocolGuid, gEfiSecurity2ArchProtocolGuid
• UEFI Boot Services, Runtime Services
• UEFI Device Path Library, Hob Library, PCD Library
• AMI Image Verification Library
• TPM 2.0 Measure Boot Library
• Lenovo IPMI Command Library

Platform

x86-64, PE32+, UEFI DXE driver, VS2015 debug build.