Enhance manufacturing view with security field indicators

tdewey-rpi · tdewey-rpi · commit 1cb033f874da · 2025-08-07T12:47:14.000-07:00
- Added new security fields (JTAG Locked, EEPROM Write Protected, Pubkey Programmed, Signed Boot) to the manufacturing view.
- Implemented formatting functions to visually represent security statuses (enabled, disabled, unknown) in the UI.
- Updated the table structure to accommodate new fields and ensure proper data display in the manufacturing data table.
diff --git a/docs/api_endpoints.adoc b/docs/api_endpoints.adoc
@@ -47,6 +47,10 @@ The endpoint returns a JSON array where each element represents a provisioned de
     "memory": "2GB",
     "manufacturer": "Sony UK",
     "secure": "yes",
+    "jtag_locked": "1",
+    "eeprom_write_protected": "1",
+    "pubkey_programmed": "1",
+    "signed_boot_enabled": "1",
     "provision_ts": "2025-04-28 13:53:28"
   },
   ...
@@ -72,6 +76,10 @@ The endpoint returns a JSON array where each element represents a provisioned de
 |memory|Device memory size (e.g., "2GB")
 |manufacturer|Device manufacturer
 |secure|Whether a device has been provisioned with a device unique identity
+|jtag_locked|JTAG debugging lock status (1=locked, 0=unlocked, null=unknown)
+|eeprom_write_protected|EEPROM write protection status (1=enabled, 0=disabled, null=unknown)
+|pubkey_programmed|Customer public key programming status (1=programmed, 0=not programmed, null=unknown)
+|signed_boot_enabled|Signed boot enablement status (1=enabled, 0=disabled, null=unknown)
 |provision_ts|Timestamp of when the device was provisioned
 |===
 
diff --git a/provisioner-service/src/views/manufacturing.csp b/provisioner-service/src/views/manufacturing.csp
@@ -134,6 +134,26 @@
             margin: 15px 0;
             border-left: 5px solid #d32f2f;
         }
+        
+        .security-field {
+            text-align: center;
+            font-weight: bold;
+        }
+        
+        .security-enabled {
+            color: #28a745;
+            font-size: 14px;
+        }
+        
+        .security-disabled {
+            color: #dc3545;
+            font-size: 14px;
+        }
+        
+        .security-unknown {
+            color: #6c757d;
+            font-size: 14px;
+        }
     </style>
 </head>
 <body>
@@ -178,6 +198,19 @@
     </div>
 
     <script>
+        // Function to format security field values
+        function formatSecurityField(value) {
+            if (value === null || value === undefined || value === '') {
+                return '<span class="security-unknown">?</span>';
+            } else if (value === '1') {
+                return '<span class="security-enabled">✓</span>';
+            } else if (value === '0') {
+                return '<span class="security-disabled">✗</span>';
+            } else {
+                return '<span class="security-unknown">?</span>';
+            }
+        }
+
         // Handle scroll indicator visibility
         function updateScrollIndicator() {
             const container = document.querySelector('.table-container');
@@ -252,6 +285,10 @@
                                 <th>Memory</th>
                                 <th>Manufacturer</th>
                                 <th>Secure</th>
+                                <th>JTAG Locked</th>
+                                <th>EEPROM WP</th>
+                                <th>Pubkey Prog.</th>
+                                <th>Signed Boot</th>
                             </tr>
                         </thead>
                         <tbody>
@@ -276,13 +313,17 @@
                                 <td>${device.memory || ''}</td>
                                 <td>${device.manufacturer || ''}</td>
                                 <td>${device.secure || ''}</td>
+                                <td class="security-field">${formatSecurityField(device.jtag_locked)}</td>
+                                <td class="security-field">${formatSecurityField(device.eeprom_write_protected)}</td>
+                                <td class="security-field">${formatSecurityField(device.pubkey_programmed)}</td>
+                                <td class="security-field">${formatSecurityField(device.signed_boot_enabled)}</td>
                             </tr>
                         `;
                     });
                 } else {
                     tableHtml += `
                         <tr>
-                            <td colspan="15" class="no-devices">No manufacturing data available</td>
+                            <td colspan="19" class="no-devices">No manufacturing data available</td>
                         </tr>
                     `;
                 }
@@ -333,7 +374,18 @@
             rows.forEach(row => {
                 const rowData = [];
                 row.querySelectorAll('td').forEach(cell => {
-                    rowData.push('"' + (cell.innerText || '') + '"');
+                    // For security fields, extract the symbol and convert to readable text
+                    let cellText = cell.innerText || '';
+                    if (cell.classList.contains('security-field')) {
+                        const span = cell.querySelector('span');
+                        if (span) {
+                            const symbol = span.innerText;
+                            if (symbol === '✓') cellText = 'Yes';
+                            else if (symbol === '✗') cellText = 'No';
+                            else if (symbol === '?') cellText = 'Unknown';
+                        }
+                    }
+                    rowData.push('"' + cellText + '"');
                 });
                 if (rowData.length > 1) { // Skip empty rows
                     csvContent += rowData.join(',') + '\r\n';
