1 files changed, 7 insertions, 0 deletions
diff --git a/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmm.c b/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmm.c
index caca5c3241..014aa79850 100644
--- a/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmm.c
+++ b/MdeModulePkg/Universal/Variable/RuntimeDxe/VariableSmm.c
@@ -27,6 +27,7 @@ SPDX-License-Identifier: BSD-2-Clause-Patent
 #include <Protocol/SmmVarCheck.h>
 
 #include <Library/MmServicesTableLib.h>
+#include <Library/VariablePolicyLib.h>
 
 #include <Guid/SmmVariableCommon.h>
 #include "Variable.h"
@@ -689,6 +690,8 @@ SmmVariableHandler (
       }
       if (!mEndOfDxe) {
         MorLockInitAtEndOfDxe ();
+        Status = LockVariablePolicy ();
+        ASSERT_EFI_ERROR (Status);
         mEndOfDxe = TRUE;
         VarCheckLibInitializeAtEndOfDxe (NULL);
         //
@@ -974,8 +977,12 @@ SmmEndOfDxeCallback (
   IN EFI_HANDLE                           Handle
   )
 {
+  EFI_STATUS    Status;
+
   DEBUG ((EFI_D_INFO, "[Variable]SMM_END_OF_DXE is signaled\n"));
   MorLockInitAtEndOfDxe ();
+  Status = LockVariablePolicy ();
+  ASSERT_EFI_ERROR (Status);
   mEndOfDxe = TRUE;
   VarCheckLibInitializeAtEndOfDxe (NULL);
   //