[PATCH v6 6/6] doc: Add measured boot documentation
Ilias Apalodimas
ilias.apalodimas at linaro.org
Thu Feb 23 08:12:42 CET 2023
Hi Heinrich,
[...]
> >+
> >+Measured Boot
> >+=====================
>
> This completely misses o describe measured boot with UEFI.
>
> @Ilias, do you want to add that in a follow up patch?
Yes, I'll do that once I pull Eddie's patches
Cheers
/Ilias
>
> >+
> >+U-Boot can perform a measured boot, the process of hashing various components
> >+of the boot process, extending the results in the TPM and logging the
> >+component's measurement in memory for the operating system to consume.
> >+
> >+Requirements
> >+---------------------
> >+
> >+* A hardware TPM 2.0 supported by the U-Boot drivers
> >+* CONFIG_TPM=y
> >+* CONFIG_MEASURED_BOOT=y
> >+* Device-tree configuration of the TPM device to specify the memory area
> >+ for event logging. The TPM device node must either contain a phandle to
> >+ a reserved memory region or "linux,sml-base" and "linux,sml-size"
> >+ indicating the address and size of the memory region. An example can be
> >+ found in arch/sandbox/dts/test.dts
> >+* The operating system must also be configured to use the memory regions
> >+ specified in the U-Boot device-tree in order to make use of the event
> >+ log.
>
> Please, provide enough information such that a reader can set this up. This should include example code.
>
> Best regards
>
> Heinrich
More information about the U-Boot
mailing list