SecurityPkg/HddPassword: Add Security feature set support for ATA dev

REF:https://bugzilla.tianocore.org/show_bug.cgi?id=1529

This commit will add the 'Security feature set' support for ATA devices.

According to the AT Attachment 8 - ATA/ATAPI Command Set (ATA8-ACS)
specification, the Security feature set is an optional feature. In
summary, the feature is a password system that restricts access to user
data stored on an ATA device. A more detailed introduction of this feature
can be referred from the ATA8-ACS spec.

The HddPassword driver is composed of 2 parts:
* A DXE driver and
* A PEI driver

The DXE driver consumes EFI_ATA_PASS_THRU_PROTOCOL instances and installs
an HII GUI to manage the devices. If the managing device supports Security
feature set, the HII page will provide the user with the ability to
set/update/disable the password for this device. Also, if a password is
being set via the Security feature set, a popup window will show during
boot requesting the user to input password.

Another feature supported by this driver is that for those managing
devices with password set, they will be automatically unlocked during the
S3 resume. This is done by the co-work of the DXE driver and the PEI
driver:

The DXE driver will save the password and the identification information
for these devices into a LockBox, which is only allowed to restore during
S3 resume.

The PEI driver, during S3 resume, will restore the content in the LockBox
and will consume EDKII_PEI_ATA_PASS_THRU_PPI instances to unlock devices.

Cc: Chao Zhang <chao.b.zhang@intel.com>
Cc: Jiewen Yao <jiewen.yao@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.1
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Ray Ni <ray.ni@intel.com>
Reviewed-by: Eric Dong <eric.dong@intel.com>

1 files changed, 48 insertions, 0 deletions

diff --git a/SecurityPkg/HddPassword/HddPasswordStrings.uni b/SecurityPkg/HddPassword/HddPasswordStrings.uni
new file mode 100644
index 0000000000..455ecfcd02
--- /dev/null
+++ b/SecurityPkg/HddPassword/HddPasswordStrings.uni
@@ -0,0 +1,48 @@
+// /** @file

+// String definitions for HddPassword Setup Form.

+//

+// Copyright (c) 2019, Intel Corporation. All rights reserved.<BR>

+//

+// This program and the accompanying materials

+// are licensed and made available under the terms and conditions

+// of the BSD License which accompanies this distribution.  The

+// full text of the license may be found at

+// http://opensource.org/licenses/bsd-license.php

+//

+// THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+// WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+//

+// **/

+

+#langdef en-US  "English"

+

+#string STR_HDD_SECURITY_CONFIG               #language en-US "HDD Security Configuration"

+

+#string STR_SECURITY_HDD_PWD_DESC             #language en-US "HDD Password Description :"

+

+#string STR_SECURITY_HDD_BANNER_ONE           #language en-US "Allows Access to Set, Modify and Clear HardDisk User and"

+#string STR_SECURITY_HDD_BANNER_TWO           #language en-US "Master Passwords."

+#string STR_SECURITY_HDD_BANNER_THREE         #language en-US "User Password need to be installed for Enabling Security."

+#string STR_SECURITY_HDD_BANNER_FOUR          #language en-US "Master Password can be modified only when succesfully"

+#string STR_SECURITY_HDD_BANNER_FIVE          #language en-US "unlocked with User Password in POST."

+

+#string STR_HDD_SECURITY_HD                   #language en-US "HDD Password"

+#string STR_HDD_SECURITY_HELP                 #language en-US "Set HDD Password"

+#string STR_HDD_PASSWORD_CONFIG               #language en-US "HDD PASSWORD CONFIGURATION:"

+#string STR_SEC_SUPPORTED                     #language en-US "Security Supported        :"

+#string STR_SEC_ENABLED                       #language en-US "Security Enabled          :"

+#string STR_SEC_LOCKED                        #language en-US "Security Locked           :"

+#string STR_SEC_FROZEN                        #language en-US "Security Frozen           :"

+#string STR_YES                               #language en-US "Yes"

+#string STR_NO                                #language en-US "No"

+#string STR_HDD_USER_PASSWORD                 #language en-US "Request to set User Password"

+#string STR_HDD_USER_PASSWORD_HELP            #language en-US "Request to set HDD User Password. \n*** Reset is required for the request to be processed in next boot *** \n*** G3 circle is required to disable freeze state when Security Frozen state is Yes, otherwise the request will be ignored. *** "

+#string STR_HDD_MASTER_PASSWORD               #language en-US "Request to set Master Password"

+#string STR_HDD_MASTER_PASSWORD_HELP          #language en-US "Request to set HDD Master Password. \n*** Reset is required for the request to be processed in next boot *** \n*** G3 circle is required to disable freeze state when Security Frozen state is Yes, otherwise the request will be ignored. *** "

+

+#string STR_INSTALLED                         #language en-US "INSTALLED"

+#string STR_NOT_INSTALLED                     #language en-US "NOT INSTALLED"

+#string STR_HDD_USER_PASSWORD_STS             #language en-US "HDD User Password Status  :"

+#string STR_HDD_MASTER_PASSWORD_STS           #language en-US "HDD Master Password Status:"

+#string STR_NULL                              #language en-US ""

+#string STR_EMPTY                             #language en-US ""