xref: /openbmc/bmcweb/features/redfish/schema/dmtf/json-schema/SecureBoot.v1_1_2.json (revision f2a8e57ede74a8252100b2281e3f4d170aa69391)
1*f2a8e57eSGunnar Mills{
2*f2a8e57eSGunnar Mills    "$id": "http://redfish.dmtf.org/schemas/v1/SecureBoot.v1_1_2.json",
3*f2a8e57eSGunnar Mills    "$ref": "#/definitions/SecureBoot",
4*f2a8e57eSGunnar Mills    "$schema": "http://redfish.dmtf.org/schemas/v1/redfish-schema-v1.json",
5*f2a8e57eSGunnar Mills    "copyright": "Copyright 2014-2024 DMTF. For the full DMTF copyright policy, see http://www.dmtf.org/about/policies/copyright",
6*f2a8e57eSGunnar Mills    "definitions": {
7*f2a8e57eSGunnar Mills        "Actions": {
8*f2a8e57eSGunnar Mills            "additionalProperties": false,
9*f2a8e57eSGunnar Mills            "description": "The available actions for this resource.",
10*f2a8e57eSGunnar Mills            "longDescription": "This type shall contain the available actions for this resource.",
11*f2a8e57eSGunnar Mills            "patternProperties": {
12*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
13*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
14*f2a8e57eSGunnar Mills                    "type": [
15*f2a8e57eSGunnar Mills                        "array",
16*f2a8e57eSGunnar Mills                        "boolean",
17*f2a8e57eSGunnar Mills                        "integer",
18*f2a8e57eSGunnar Mills                        "number",
19*f2a8e57eSGunnar Mills                        "null",
20*f2a8e57eSGunnar Mills                        "object",
21*f2a8e57eSGunnar Mills                        "string"
22*f2a8e57eSGunnar Mills                    ]
23*f2a8e57eSGunnar Mills                }
24*f2a8e57eSGunnar Mills            },
25*f2a8e57eSGunnar Mills            "properties": {
26*f2a8e57eSGunnar Mills                "#SecureBoot.ResetKeys": {
27*f2a8e57eSGunnar Mills                    "$ref": "#/definitions/ResetKeys"
28*f2a8e57eSGunnar Mills                },
29*f2a8e57eSGunnar Mills                "Oem": {
30*f2a8e57eSGunnar Mills                    "$ref": "#/definitions/OemActions",
31*f2a8e57eSGunnar Mills                    "description": "The available OEM-specific actions for this resource.",
32*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the available OEM-specific actions for this resource."
33*f2a8e57eSGunnar Mills                }
34*f2a8e57eSGunnar Mills            },
35*f2a8e57eSGunnar Mills            "type": "object"
36*f2a8e57eSGunnar Mills        },
37*f2a8e57eSGunnar Mills        "OemActions": {
38*f2a8e57eSGunnar Mills            "additionalProperties": true,
39*f2a8e57eSGunnar Mills            "description": "The available OEM-specific actions for this resource.",
40*f2a8e57eSGunnar Mills            "longDescription": "This type shall contain the available OEM-specific actions for this resource.",
41*f2a8e57eSGunnar Mills            "patternProperties": {
42*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
43*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
44*f2a8e57eSGunnar Mills                    "type": [
45*f2a8e57eSGunnar Mills                        "array",
46*f2a8e57eSGunnar Mills                        "boolean",
47*f2a8e57eSGunnar Mills                        "integer",
48*f2a8e57eSGunnar Mills                        "number",
49*f2a8e57eSGunnar Mills                        "null",
50*f2a8e57eSGunnar Mills                        "object",
51*f2a8e57eSGunnar Mills                        "string"
52*f2a8e57eSGunnar Mills                    ]
53*f2a8e57eSGunnar Mills                }
54*f2a8e57eSGunnar Mills            },
55*f2a8e57eSGunnar Mills            "properties": {},
56*f2a8e57eSGunnar Mills            "type": "object"
57*f2a8e57eSGunnar Mills        },
58*f2a8e57eSGunnar Mills        "ResetKeys": {
59*f2a8e57eSGunnar Mills            "additionalProperties": false,
60*f2a8e57eSGunnar Mills            "description": "This action resets the UEFI Secure Boot keys.",
61*f2a8e57eSGunnar Mills            "longDescription": "This action shall reset the UEFI Secure Boot key databases.  The `ResetAllKeysToDefault` value shall reset all UEFI Secure Boot key databases to their default values.  The `DeleteAllKeys` value shall delete the contents of all UEFI Secure Boot key databases.  The `DeletePK` value shall delete the contents of the PK Secure Boot key database.",
62*f2a8e57eSGunnar Mills            "parameters": {
63*f2a8e57eSGunnar Mills                "ResetKeysType": {
64*f2a8e57eSGunnar Mills                    "$ref": "#/definitions/ResetKeysType",
65*f2a8e57eSGunnar Mills                    "description": "The type of reset or delete to perform on the UEFI Secure Boot databases.",
66*f2a8e57eSGunnar Mills                    "longDescription": "This parameter shall specify the type of reset or delete to perform on the UEFI Secure Boot databases.",
67*f2a8e57eSGunnar Mills                    "requiredParameter": true
68*f2a8e57eSGunnar Mills                }
69*f2a8e57eSGunnar Mills            },
70*f2a8e57eSGunnar Mills            "patternProperties": {
71*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
72*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
73*f2a8e57eSGunnar Mills                    "type": [
74*f2a8e57eSGunnar Mills                        "array",
75*f2a8e57eSGunnar Mills                        "boolean",
76*f2a8e57eSGunnar Mills                        "integer",
77*f2a8e57eSGunnar Mills                        "number",
78*f2a8e57eSGunnar Mills                        "null",
79*f2a8e57eSGunnar Mills                        "object",
80*f2a8e57eSGunnar Mills                        "string"
81*f2a8e57eSGunnar Mills                    ]
82*f2a8e57eSGunnar Mills                }
83*f2a8e57eSGunnar Mills            },
84*f2a8e57eSGunnar Mills            "properties": {
85*f2a8e57eSGunnar Mills                "target": {
86*f2a8e57eSGunnar Mills                    "description": "Link to invoke action",
87*f2a8e57eSGunnar Mills                    "format": "uri-reference",
88*f2a8e57eSGunnar Mills                    "type": "string"
89*f2a8e57eSGunnar Mills                },
90*f2a8e57eSGunnar Mills                "title": {
91*f2a8e57eSGunnar Mills                    "description": "Friendly action name",
92*f2a8e57eSGunnar Mills                    "type": "string"
93*f2a8e57eSGunnar Mills                }
94*f2a8e57eSGunnar Mills            },
95*f2a8e57eSGunnar Mills            "type": "object"
96*f2a8e57eSGunnar Mills        },
97*f2a8e57eSGunnar Mills        "ResetKeysType": {
98*f2a8e57eSGunnar Mills            "enum": [
99*f2a8e57eSGunnar Mills                "ResetAllKeysToDefault",
100*f2a8e57eSGunnar Mills                "DeleteAllKeys",
101*f2a8e57eSGunnar Mills                "DeletePK"
102*f2a8e57eSGunnar Mills            ],
103*f2a8e57eSGunnar Mills            "enumDescriptions": {
104*f2a8e57eSGunnar Mills                "DeleteAllKeys": "Delete the contents of all UEFI Secure Boot key databases, including the PK key database.  This puts the system in Setup Mode.",
105*f2a8e57eSGunnar Mills                "DeletePK": "Delete the contents of the PK UEFI Secure Boot database.  This puts the system in Setup Mode.",
106*f2a8e57eSGunnar Mills                "ResetAllKeysToDefault": "Reset the contents of all UEFI Secure Boot key databases, including the PK key database, to the default values."
107*f2a8e57eSGunnar Mills            },
108*f2a8e57eSGunnar Mills            "type": "string"
109*f2a8e57eSGunnar Mills        },
110*f2a8e57eSGunnar Mills        "SecureBoot": {
111*f2a8e57eSGunnar Mills            "additionalProperties": false,
112*f2a8e57eSGunnar Mills            "description": "The `SecureBoot` schema contains UEFI Secure Boot information and represents properties for managing the UEFI Secure Boot functionality of a system.",
113*f2a8e57eSGunnar Mills            "longDescription": "This resource contains UEFI Secure Boot information for a Redfish implementation.",
114*f2a8e57eSGunnar Mills            "patternProperties": {
115*f2a8e57eSGunnar Mills                "^([a-zA-Z_][a-zA-Z0-9_]*)?@(odata|Redfish|Message)\\.[a-zA-Z_][a-zA-Z0-9_]*$": {
116*f2a8e57eSGunnar Mills                    "description": "This property shall specify a valid odata or Redfish property.",
117*f2a8e57eSGunnar Mills                    "type": [
118*f2a8e57eSGunnar Mills                        "array",
119*f2a8e57eSGunnar Mills                        "boolean",
120*f2a8e57eSGunnar Mills                        "integer",
121*f2a8e57eSGunnar Mills                        "number",
122*f2a8e57eSGunnar Mills                        "null",
123*f2a8e57eSGunnar Mills                        "object",
124*f2a8e57eSGunnar Mills                        "string"
125*f2a8e57eSGunnar Mills                    ]
126*f2a8e57eSGunnar Mills                }
127*f2a8e57eSGunnar Mills            },
128*f2a8e57eSGunnar Mills            "properties": {
129*f2a8e57eSGunnar Mills                "@odata.context": {
130*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/context"
131*f2a8e57eSGunnar Mills                },
132*f2a8e57eSGunnar Mills                "@odata.etag": {
133*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/etag"
134*f2a8e57eSGunnar Mills                },
135*f2a8e57eSGunnar Mills                "@odata.id": {
136*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/id"
137*f2a8e57eSGunnar Mills                },
138*f2a8e57eSGunnar Mills                "@odata.type": {
139*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/odata-v4.json#/definitions/type"
140*f2a8e57eSGunnar Mills                },
141*f2a8e57eSGunnar Mills                "Actions": {
142*f2a8e57eSGunnar Mills                    "$ref": "#/definitions/Actions",
143*f2a8e57eSGunnar Mills                    "description": "The available actions for this resource.",
144*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the available actions for this resource."
145*f2a8e57eSGunnar Mills                },
146*f2a8e57eSGunnar Mills                "Description": {
147*f2a8e57eSGunnar Mills                    "anyOf": [
148*f2a8e57eSGunnar Mills                        {
149*f2a8e57eSGunnar Mills                            "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Description"
150*f2a8e57eSGunnar Mills                        },
151*f2a8e57eSGunnar Mills                        {
152*f2a8e57eSGunnar Mills                            "type": "null"
153*f2a8e57eSGunnar Mills                        }
154*f2a8e57eSGunnar Mills                    ],
155*f2a8e57eSGunnar Mills                    "readonly": true
156*f2a8e57eSGunnar Mills                },
157*f2a8e57eSGunnar Mills                "Id": {
158*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Id",
159*f2a8e57eSGunnar Mills                    "readonly": true
160*f2a8e57eSGunnar Mills                },
161*f2a8e57eSGunnar Mills                "Name": {
162*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Name",
163*f2a8e57eSGunnar Mills                    "readonly": true
164*f2a8e57eSGunnar Mills                },
165*f2a8e57eSGunnar Mills                "Oem": {
166*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/Resource.json#/definitions/Oem",
167*f2a8e57eSGunnar Mills                    "description": "The OEM extension property.",
168*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the OEM extensions.  All values for properties that this object contains shall conform to the Redfish Specification-described requirements."
169*f2a8e57eSGunnar Mills                },
170*f2a8e57eSGunnar Mills                "SecureBootCurrentBoot": {
171*f2a8e57eSGunnar Mills                    "anyOf": [
172*f2a8e57eSGunnar Mills                        {
173*f2a8e57eSGunnar Mills                            "$ref": "#/definitions/SecureBootCurrentBootType"
174*f2a8e57eSGunnar Mills                        },
175*f2a8e57eSGunnar Mills                        {
176*f2a8e57eSGunnar Mills                            "type": "null"
177*f2a8e57eSGunnar Mills                        }
178*f2a8e57eSGunnar Mills                    ],
179*f2a8e57eSGunnar Mills                    "description": "The UEFI Secure Boot state during the current boot cycle.",
180*f2a8e57eSGunnar Mills                    "longDescription": "This property shall indicate the UEFI Secure Boot state during the current boot cycle.",
181*f2a8e57eSGunnar Mills                    "readonly": true
182*f2a8e57eSGunnar Mills                },
183*f2a8e57eSGunnar Mills                "SecureBootDatabases": {
184*f2a8e57eSGunnar Mills                    "$ref": "http://redfish.dmtf.org/schemas/v1/SecureBootDatabaseCollection.json#/definitions/SecureBootDatabaseCollection",
185*f2a8e57eSGunnar Mills                    "description": "A link to the collection of UEFI Secure Boot databases.",
186*f2a8e57eSGunnar Mills                    "longDescription": "The value of this property shall be a link to a resource collection of type `SecureBootDatabaseCollection`.",
187*f2a8e57eSGunnar Mills                    "readonly": true,
188*f2a8e57eSGunnar Mills                    "versionAdded": "v1_1_0"
189*f2a8e57eSGunnar Mills                },
190*f2a8e57eSGunnar Mills                "SecureBootEnable": {
191*f2a8e57eSGunnar Mills                    "description": "An indication of whether UEFI Secure Boot is enabled.",
192*f2a8e57eSGunnar Mills                    "longDescription": "This property shall indicate whether the UEFI Secure Boot takes effect on next boot.  This property can be enabled in UEFI boot mode only.",
193*f2a8e57eSGunnar Mills                    "readonly": false,
194*f2a8e57eSGunnar Mills                    "type": [
195*f2a8e57eSGunnar Mills                        "boolean",
196*f2a8e57eSGunnar Mills                        "null"
197*f2a8e57eSGunnar Mills                    ]
198*f2a8e57eSGunnar Mills                },
199*f2a8e57eSGunnar Mills                "SecureBootMode": {
200*f2a8e57eSGunnar Mills                    "anyOf": [
201*f2a8e57eSGunnar Mills                        {
202*f2a8e57eSGunnar Mills                            "$ref": "#/definitions/SecureBootModeType"
203*f2a8e57eSGunnar Mills                        },
204*f2a8e57eSGunnar Mills                        {
205*f2a8e57eSGunnar Mills                            "type": "null"
206*f2a8e57eSGunnar Mills                        }
207*f2a8e57eSGunnar Mills                    ],
208*f2a8e57eSGunnar Mills                    "description": "The current UEFI Secure Boot Mode.",
209*f2a8e57eSGunnar Mills                    "longDescription": "This property shall contain the current UEFI Secure Boot mode, as defined in the UEFI Specification.",
210*f2a8e57eSGunnar Mills                    "readonly": true
211*f2a8e57eSGunnar Mills                }
212*f2a8e57eSGunnar Mills            },
213*f2a8e57eSGunnar Mills            "required": [
214*f2a8e57eSGunnar Mills                "@odata.id",
215*f2a8e57eSGunnar Mills                "@odata.type",
216*f2a8e57eSGunnar Mills                "Id",
217*f2a8e57eSGunnar Mills                "Name"
218*f2a8e57eSGunnar Mills            ],
219*f2a8e57eSGunnar Mills            "type": "object"
220*f2a8e57eSGunnar Mills        },
221*f2a8e57eSGunnar Mills        "SecureBootCurrentBootType": {
222*f2a8e57eSGunnar Mills            "enum": [
223*f2a8e57eSGunnar Mills                "Enabled",
224*f2a8e57eSGunnar Mills                "Disabled"
225*f2a8e57eSGunnar Mills            ],
226*f2a8e57eSGunnar Mills            "enumDescriptions": {
227*f2a8e57eSGunnar Mills                "Disabled": "UEFI Secure Boot is currently disabled.",
228*f2a8e57eSGunnar Mills                "Enabled": "UEFI Secure Boot is currently enabled."
229*f2a8e57eSGunnar Mills            },
230*f2a8e57eSGunnar Mills            "type": "string"
231*f2a8e57eSGunnar Mills        },
232*f2a8e57eSGunnar Mills        "SecureBootModeType": {
233*f2a8e57eSGunnar Mills            "enum": [
234*f2a8e57eSGunnar Mills                "SetupMode",
235*f2a8e57eSGunnar Mills                "UserMode",
236*f2a8e57eSGunnar Mills                "AuditMode",
237*f2a8e57eSGunnar Mills                "DeployedMode"
238*f2a8e57eSGunnar Mills            ],
239*f2a8e57eSGunnar Mills            "enumDescriptions": {
240*f2a8e57eSGunnar Mills                "AuditMode": "UEFI Secure Boot is currently in Audit Mode.",
241*f2a8e57eSGunnar Mills                "DeployedMode": "UEFI Secure Boot is currently in Deployed Mode.",
242*f2a8e57eSGunnar Mills                "SetupMode": "UEFI Secure Boot is currently in Setup Mode.",
243*f2a8e57eSGunnar Mills                "UserMode": "UEFI Secure Boot is currently in User Mode."
244*f2a8e57eSGunnar Mills            },
245*f2a8e57eSGunnar Mills            "type": "string"
246*f2a8e57eSGunnar Mills        }
247*f2a8e57eSGunnar Mills    },
248*f2a8e57eSGunnar Mills    "language": "en",
249*f2a8e57eSGunnar Mills    "owningEntity": "DMTF",
250*f2a8e57eSGunnar Mills    "release": "2020.1",
251*f2a8e57eSGunnar Mills    "title": "#SecureBoot.v1_1_2.SecureBoot"
252*f2a8e57eSGunnar Mills}