VAB Authorization Code Patch Image Manifest (Type 0x1E) Rules

Type 0x1E entry in the FIT is required for BIOS to locate the VAB Authorization Code Patch Image Manifest and request security controller to authorize and update.  It contains a Manifest Header and one or more Authorization Patch Image Manifests.  The VAB Authorization Code Patch Image Manifest (0x1E) is signed by a key in the VAB Key Manifest (Type 0x1B).  The Manifest Header defines the number of Authorization Code Patch Image Manifests.  The Authorization Code Patch Image Manifest contains authorization code to update Quantum Safe Cryptography algorithms used for authorization during the products life cycle:

1. There can only be zero or one Type 0x1E record present in the FIT.  
2. The Version field should be set to 0x0100.  
3. The C_​V bit in this entry should be clear to 0. 
4. The Checksum field is set to 0. 
5. The entry must be 64 byte aligned.  
6. Address + size must be under (4GB – 1) and above (4GB – 16MB).