I am trying to insert a GOP driver for the SM750 embedded graphics chip into the platform firmware so that it can be used with secure boot. This is in the form of an .efi file that was given to me by the manufacturer so it their "official" GOP driver. Currently, I am using a .rom version of this driver by loading it into an EEPROM attached to the SM750 using an executable program in DOS that they also provided. I have been told this .rom file cannot be used with Secure Boot so I have been looking at ways to insert the .efi version of this driver into the firmware.
Reading section 32 of the [EDK2 Firmware guide] (https://edk2-docs.gitbooks.io/edk-ii-uefi-driver-writer-s-guide/32_distributing_uefi_drivers/) states there are 3 ways to insert into the platform.
- PCI option ROM
I believe this is how the .rom version of the driver is being loaded currently, since this is connected to the PCI bus and this would probably be the ideal way of doing this with the .efi driver, but I do not know a way that I can put the .efi file onto this EEPROM
- Through the platform flash
I would rather avoid this method if I can, I do not want to use a custom image from the manufacturer
- On an EFI partition in the hard drive
I thought this would be the way to do it, but after reading into it more it seems that this would only be viable for updates and not for loading the driver on boot. Correct me if I'm wrong with this, but this would also only execute when the OS is loaded from the EFI partition (in this case RHEL7).
The CPU is a Xeon D-1559 and the target OS is RHEL7.6
TL;DR what is the best way to insert an efi GOP driver into a system for use with secure boot.