[PATCH 2/2] ARM: dts: imx8mm-venice: prepare for dek blob encapsulation
Fabio Estevam
festevam at gmail.com
Thu Dec 14 17:30:18 CET 2023
Hi Tim,
On Thu, Dec 14, 2023 at 1:25 PM Tim Harvey <tharvey at gateworks.com> wrote:
>
> Prepare for DEK blob encapsulation support through "dek_blob" command.
> On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob
> for encrypted boot.
>
> The DEK blob is encapsulated by OP-TEE through a trusted application
> call. U-boot sends and receives the DEK and the DEK blob binaries
> through OP-TEE dynamic shared memory.
>
> To enable the DEK blob encapsulation, add to the defconfig:
> CONFIG_SECURE_BOOT=y
This option does not exist.
Do you mean CONFIG_IMX_HAB=y?
More information about the U-Boot
mailing list