]> git.dujemihanovic.xyz Git - u-boot.git/commitdiff
configs: am62x: enable secure device configs by default
authorPraneeth Bajjuri <praneeth@ti.com>
Wed, 5 Apr 2023 22:40:47 +0000 (17:40 -0500)
committerTom Rini <trini@konsulko.com>
Thu, 4 May 2023 17:03:54 +0000 (13:03 -0400)
Enable the CONFIG_TI_SECURE_DEVICE by default

Non-HS devices will continue to boot due to runtime device type detection.

TI's security enforcing SoCs will authenticate each binary it loads by
comparing it's signature with keys etched into the SoC during the boot
up process. The am62x family of SoCs by default will have some level of
security enforcement checking. To keep things as simple as possible,
enable the CONFIG_TI_SECURE_DEVICE options by default so all levels of
secure SoCs will work out of the box

Signed-off-by: Praneeth Bajjuri <praneeth@ti.com>
Signed-off-by: Kamlesh Gurudasani <kamlesh@ti.com>
Signed-off-by: Bryan Brattlof <bb@ti.com>
configs/am62x_evm_a53_defconfig
configs/am62x_evm_r5_defconfig

index 832243a731268710f13067adaaef20cb6a415edb..a2cd4f703dc2d3c61592f2c49666ec482b250cfc 100644 (file)
@@ -1,5 +1,6 @@
 CONFIG_ARM=y
 CONFIG_ARCH_K3=y
+CONFIG_TI_SECURE_DEVICE=y
 CONFIG_SYS_MALLOC_F_LEN=0x8000
 CONFIG_SPL_LIBCOMMON_SUPPORT=y
 CONFIG_SPL_LIBGENERIC_SUPPORT=y
index 3205491cebfaac7074b17b4acb67c3b393ecebbf..642600f92dcfbe52bfca290e07923ee9df3893fc 100644 (file)
@@ -1,5 +1,6 @@
 CONFIG_ARM=y
 CONFIG_ARCH_K3=y
+CONFIG_TI_SECURE_DEVICE=y
 CONFIG_SYS_MALLOC_LEN=0x08000000
 CONFIG_SYS_MALLOC_F_LEN=0x9000
 CONFIG_SPL_LIBCOMMON_SUPPORT=y