Dasharo setup password

[miczyg1]

The problem you're addressing (if any)
Currently Dasharo setup menu is not password protected.

Describe the solution you'd like
Add Setup password implementation. There is a SMM-based implementation in edk2-platforms.

Where is the value to a user, and who might that user be?
For users wanting to protect the unauthorized access to options menu.

Describe alternatives you've considered
None

Additional context
None

[mkopec]

+1. We could extend this to add a power-on password, too

[miczyg1]

@mkopec if you use a SATA disk today, you may already benefit from SATA password during power-on (but not resume)

[mkopec]

PR: Dasharo/DasharoModulePkg#5

[mkopec]

Implemented in Dasharo/DasharoModulePkg#5. The user management option appears on the front page of the setup menu:

There, you can set an admin password:

And now, when entering the setup menu, you'll get a password prompt:

Additionally, since the password hash is stored in an EFI variable, it needs to be protected from overwriting from within the OS. So, a new option Enable SMM BIOS write protection was added to the Dasharo Security Options menu, which disables all writes to flash, except for writes from SMM which are necessary for EFI variables to work. It's recommended to enable it for security when a password is set, but it needs to be disabled when updating the BIOS.