v2025020006.0.0

What's Changed

• [FF-A][TPM] Implement Tpm2StartupLib @Raymond-MS (#492)
  
  Change Details

    ## Description

  Implemented the Tpm2StartupLib which is meant to handle TPM initialization as well as any pre-DXE measurements. Updated the TPM libraries to include SEC versions which do not have global variables. This was causing issues with boot on our PEI-less QEMU SBSA platform when attempting to init the TPM in the SEC phase. A NULL version is also added for platforms who do not need any TPM initialization. The default is the NULL instance.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?

  How This Was Tested

  Built and ran with TPM enabled on our QEMU SBSA build. Confirmed TPM communication and boot to UEFI shell.

  Integration Instructions

  If needed, link in the non-NULL instance of the library into your .dsc and call the init function in the proper phase before DXE is loaded.
  

  
  

  ---

  
  

• [FF-A] Update TPM Service for Manage Locality @Raymond-MS (#482)
  
  Change Details

    ## Description

  Added support for the manage locality command in the TPM service header.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?

  How This Was Tested

  Tested with QEMU SBSA with TPM enabled. Ran with FfaPartitionTestApp.

  Integration Instructions

  N/A
  

  
  

  ---

  
  

⚠️ Breaking Changes

• [CHERRY-PICK] EmbeddedPkg: Move RealTimeClockLib header @Flickdm (#490)
  
  Change Details

    ## Description

  RealTimeClockLib is an architectural implementation that is not restricted to the embedded segment or any platform in particular.

  So the header has been moved to MdeModulePkg.

  And the package has been added to the relevant INF files.

  Additional Notes:

  This is backporting from EDK2 a change to move RealTimeClockLib from EmbeddedPkg to MdeModulePkg.

  Upstream commit: tianocore/edk2@57230ff

  Split up commits:
  Dependency: microsoft/mu_basecore#1612
  microsoft/mu_silicon_arm_tiano#458

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?

  How This Was Tested

  Built Locally

  Integration Instructions

  Needs cross submodule updates - depends on microsoft/mu_basecore#1612
  And for ARM may depend on microsoft/mu_silicon_arm_tiano#458

    </blockquote>
    <hr>
  </details>
  

• [CHERRY-PICK] SecurityPkg/Library: use ArmFfaGetPartitionInfo() in Tpm2ServiceFfaLib @kuqin12 (#489)
  
  Change Details

    ## Description

  This patch adds ArmFfaLibPartitionInfoGetRegs() in ArmFfaLib
  As ArmFfaLibPartitionInfoGetRegs() is added, Normal world ArmFfLib Rx/Tx buffer is not a madatory.
  That's why return EFI_UNSUPPORTED while Rx/Tx buffer mapping in ArmFfaLib constructor
  can be consider as valid return If ARM_FFA_PARTITION_INFO_GET_REGS is supported by SPMC.

  • Impacts functionality?
  • Impacts security?
  • Breaking change?
  • Includes tests?
  • Includes documentation?

  How This Was Tested

  This is tested on physical ARM64 platform.

  Integration Instructions

  Need latest MdeModulePkg that contains the interface change.
  

  
  

  ---

  
  

Full Changelog: v2025020005.0.0...v2025020006.0.0