diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index b214cbdc2a..83ddf2f2b7 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -281,6 +281,8 @@ #### [SurfaceHub DDF file](surfacehub-ddf-file.md) ### [TPMPolicy CSP](tpmpolicy-csp.md) #### [TPMPolicy DDF file](tpmpolicy-ddf-file.md) +### [Uefi CSP](uefi-csp.md) +#### [Uefi DDF file](uefi-ddf.md) ### [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md) #### [UnifiedWriteFilter DDF file](unifiedwritefilter-ddf.md) ### [Update CSP](update-csp.md) diff --git a/windows/client-management/mdm/configuration-service-provider-reference.md b/windows/client-management/mdm/configuration-service-provider-reference.md index a72cf5ff8f..5a601e0ca8 100644 --- a/windows/client-management/mdm/configuration-service-provider-reference.md +++ b/windows/client-management/mdm/configuration-service-provider-reference.md @@ -7,7 +7,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: nickbrower -ms.date: 12/05/2017 +ms.date: 02/02/2018 --- # Configuration service provider reference @@ -2079,6 +2079,34 @@ Footnotes: + +[Uefi CSP](uefi-csp.md) + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
cross markcheck mark4check mark4check mark4check mark4cross markcross mark
+ + + + [UnifiedWriteFilter CSP](unifiedwritefilter-csp.md) diff --git a/windows/client-management/mdm/images/provisioning-csp-uefi.png b/windows/client-management/mdm/images/provisioning-csp-uefi.png new file mode 100644 index 0000000000..6900dd0c83 Binary files /dev/null and b/windows/client-management/mdm/images/provisioning-csp-uefi.png differ diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 820cf5dfd6..a3df920a18 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -1530,6 +1530,10 @@ The DM agent for [push-button reset](https://msdn.microsoft.com/windows/hardware [Defender CSP](defender-csp.md)

Added new node (OfflineScan) in Windows 10, next major update.

+ +[Uefi CSP](uefi-csp.md) +

Added a new CSP in Windows 10, next major update.

+ diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index 715c403580..07dec60956 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -376,30 +376,6 @@ The following diagram shows the Policy configuration service provider in tree fo
Bitlocker/EncryptionMethod
-
- BitLocker/EncryptionMethodByDriveType in BitLocker CSP -
-
- BitLocker/FixedDrivesRecoveryOptions in BitLocker CSP -
-
- BitLocker/FixedDrivesRequireEncryption in BitLocker CSP -
-
- BitLocker/RemovableDrivesRequireEncryption in BitLocker CSP -
-
- BitLocker/SystemDrivesMinimumPINLength in BitLocker CSP -
-
- BitLocker/SystemDrivesRecoveryMessage in BitLocker CSP -
-
- BitLocker/SystemDrivesRecoveryOptions in BitLocker CSP -
-
- BitLocker/SystemDrivesRequireStartupAuthentication in BitLocker CSP -
### Bluetooth policies @@ -2822,6 +2798,7 @@ The following diagram shows the Policy configuration service provider in tree fo
SystemServices/ConfigureXboxLiveNetworkingServiceStartupMode +
### TaskScheduler policies diff --git a/windows/client-management/mdm/uefi-csp.md b/windows/client-management/mdm/uefi-csp.md new file mode 100644 index 0000000000..1b5c7e6231 --- /dev/null +++ b/windows/client-management/mdm/uefi-csp.md @@ -0,0 +1,87 @@ +--- +title: UEFI CSP +description: The Uefi CSP interfaces to UEFI's Device Firmware Configuration Interface (DFCI) to make BIOS configuration changes. +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 02/01/2018 +--- + +# UEFI CSP + + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + +The UEFI configuration service provider (CSP) interfaces to UEFI's Device Firmware Configuration Interface (DFCI) to make BIOS configuration changes. This CSP was added in Windows 10, next major update. + +The following diagram shows the UWF CSP in tree format. + +![Uefi CSP diagram](images/provisioning-csp-uefi.png) + +The following list describes the characteristics and parameters. + +**./Vendor/MSFT/Uefi** +Root node. + +**UefiDeviceIdentifier** +Retrieves XML from UEFI which describes the device identifier. + +Supported operation is Get. + +**IdentityInfo** +Node for provisioned signers operations. + + +**IdentityInfo/Current** +Retrieves XML from UEFI which describes the current UEFI identity information. + +Supported operation is Get. + +**IdentityInfo/Apply** +Apply an identity information package to UEFI. Input is the signed package in base64 encoded format. + +Supported operation is Replace. + +**IdentityInfo/ApplyResult** +Retrieves XML describing the results of previous ApplyIdentityInfo operation. + +Supported operation is Get. + +**AuthInfo** +Node for permission information operations. + +**AuthInfo/Current** +Retrieves XML from UEFI which describes the current UEFI permission/authentication information. + +Supported operation is Get. + +**AuthInfo/Apply** +Apply a permission/authentication information package to UEFI. Input is the signed package in base64 encoded format. + +Supported operation is Replace. + +**AuthInfo/ApplyResult** +Retrieves XML describing the results of previous ApplyAuthInfo operation. + +Supported operation is Get. + +**Config** +Node for device configuration + +**Config/Current** +Retrieves XML from UEFI which describes the current UEFI configuration. + +Supported operation is Get. + +**Config/Apply** +Apply a configuration package to UEFI. Input is the signed package in base64 encoded format. + +Supported operation is Replace. + +**Config/ApplyResult** +Retrieves XML describing the results of previous ApplyConfig operation. + +Supported operation is Get. diff --git a/windows/client-management/mdm/uefi-ddf.md b/windows/client-management/mdm/uefi-ddf.md new file mode 100644 index 0000000000..59d9673ff1 --- /dev/null +++ b/windows/client-management/mdm/uefi-ddf.md @@ -0,0 +1,330 @@ +--- +title: Uefi DDF file +description: Uefi DDF file +ms.author: maricia +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: nickbrower +ms.date: 02/01/2018 +--- + +# TPMPolicy DDF file + + +> [!WARNING] +> Some information relates to prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here. + + +This topic shows the OMA DM device description framework (DDF) for the **Uefi** configuration service provider. + +Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-reference.md#csp-ddf-files-download). + +The XML below is the current version for this CSP. + +``` syntax + +]> + + 1.2 + + Uefi + ./Vendor/MSFT + + + + + + + + + + + + + + + com.microsoft/1.0/MDM/Uefi + + + + UefiDeviceIdentifier + + + + + Retrieves XML from UEFI which describes the device identifier. + + + + + + + + + + + + + + text/plain + + + + + IdentityInfo + + + + + Provisioned signers + + + + + + + + + + + + + + + Current + + + + + Retrieves XML from UEFI which describes the current UEFI identity information + + + + + + + + + + + text/plain + + + + + Apply + + + + + Apply an identity information package to UEFI. Input is the signed package in base64 encoded format. + + + + + + + + + + + + + + + + ApplyResult + + + + + Retrieves XML describing the results of previous ApplyIdentityInfo operation. + + + + + + + + + + + text/plain + + + + + + AuthInfo + + + + + Permission Information + + + + + + + + + + + + + + + Current + + + + + Retrieves XML from UEFI which describes the current UEFI permission/authentication information. + + + + + + + + + + + text/plain + + + + + Apply + + + + + Apply a permission/authentication information package to UEFI. Input is the signed package in base64 encoded format. + + + + + + + + + + + + + + + + ApplyResult + + + + + Retrieves XML describing the results of previous ApplyAuthInfo operation. + + + + + + + + + + + text/plain + + + + + + Config + + + + + Device Configuration + + + + + + + + + + + + + + + Current + + + + + Retrieves XML from UEFI which describes the current UEFI configuration. + + + + + + + + + + + text/plain + + + + + Apply + + + + + Apply a configuration package to UEFI. Input is the signed package in base64 encoded format. + + + + + + + + + + + + + + + + ApplyResult + + + + + Retrieves XML describing the results of previous ApplyConfig operation. + + + + + + + + + + + text/plain + + + + + + +``` \ No newline at end of file