Implementation of SecureBIO SDEV table

MarkHung 61

We are currently developing windows hello related products. From the following website,

we found that UEFI seems to need the implement SecureBIO SDEV table.
https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/oem-highly-secure

I don't know if there is any other related information about the implement SecureBIO SDEV table,

or there is a contact window for Microsoft related inquiries. thanks!

1 answer

Limitless Technology 39,921 Reputation points

2022-08-10T13:43:16.543+00:00

Hi there,

For Microsoft business related queries you can request a call back. Global Customer Service phone numbers https://support.microsoft.com/en-gb/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2

Their is no much information regarding the Secured-core PC configurations . Broadly, the settings for a Secured-core PC can be broken into two categories: those that can be configured via Windows, and those that are configured via the device UEFI firmware. https://learn.microsoft.com/en-us/windows-hardware/design/device-experiences/restore-scpc-config-for-admins-11

I hope this information helps. If you have any questions please let me know and I will be glad to help you out.

---------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--
Please sign in to rate this answer.
MarkHung 61 Reputation points

2022-08-11T01:05:16.723+00:00

Thank you very much for your help. We are Camera IHV manufacturers, and we have a general understanding of the concepts of VBS/TPM/IOMMU and Hypervisor-v.
For IHV, we are not sure which part to implement in UEFI. We have not found secureBIO implementation in UEFI EDK2. ,
In addition, we have not implemented the KMDF or UMDF camera driver, we all use the standard UVC standard & Microsoft face authentication related extension,
We not sure about the 3 parts mentioned in the article

The following registry seems to be the settings that the OEM needs to do?

HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\SecureBiometrics is set to 1

The article mention about==>The OEM Secure Camera driver is installed, whether IHV does not need to provide camera driver

Does the IHV need to implement the SecureBIO SDEV table in UEFI?or whether there is any information about the implementation

Great thanks for your help!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Your answer