Intel Extensible Firmware Interface - Manual (Page 706)

Extensible Firmware Interface Specification
15-100 12/01/02 Version 1.10
 If these checks succeed, the function returns with a “success” indication and
IsVerified is TRUE . Otherwise, IsVerified is FALSE and the function returns
with a “security violation” indication.
Note that if a Boot Authorization Check is currently required on this platform this function always
performs an authorization check, either through platform-specific user interaction or through a
signature generated with the private key corresponding to the public key in the platform’s Boot
Object Authorization Certificate.
Status Codes Returned
EFI_SUCCESS The function completed successfully.
EFI_NO_MAPPING The AppHandle parameter is not or is no longer a valid
application instance handle associated with the EFI_BIS protocol.
EFI_INVALID_PARAMETER The Credentials parameter supplied by the caller is NULL or
an invalid memory reference,
or
The Boot Authorization Check is currently required on this platform
and the
Credentials.Data parameter supplied by the caller
is NULL or an invalid memory reference,
or
The
DataObject parameter supplied by the caller is NULL or
an invalid memory reference,
or
The
DataObject.Data parameter supplied by the caller is
NULL or an invalid memory reference,
or
The
IsVerified parameter supplied by the caller is NULL or
an invalid memory reference.
EFI_OUT_OF_RESOURCES The function failed due to lack of memory or other resources.
EFI_SECURITY_VIOLATION The signed manifest supplied as the Credentials parameter
was invalid (could not be parsed),
or
The signed manifest supplied as the
Credentials parameter
failed to verify using the installed Boot Object Authorization
Certificate or the signer’s Certificate in
Credentials ,
or
Platform-specific authorization failed,
or
Any other required attribute value was missing,
or
The signed manifest supplied as the
Credentials parameter
did not include a signer certificate,
or
continued