[PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation

Fabio Estevam festevam at gmail.com
Thu Dec 14 17:30:18 CET 2023


Hi Tim,

On Thu, Dec 14, 2023 at 1:25 PM Tim Harvey <tharvey at gateworks.com> wrote:
>
> Prepare for DEK blob encapsulation support through "dek_blob" command.
> On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob
> for encrypted boot.
>
> The DEK blob is encapsulated by OP-TEE through a trusted application
> call. U-boot sends and receives the DEK and the DEK blob binaries
> through OP-TEE dynamic shared memory.
>
> To enable the DEK blob encapsulation, add to the defconfig:
> CONFIG_SECURE_BOOT=y

This option does not exist.

Do you mean CONFIG_IMX_HAB=y?


More information about the U-Boot mailing list