[PATCH] configs: k3: Enable capsule authentication

Jonathan Humphreys j-humphreys at ti.com
Sat Jun 8 01:53:12 CEST 2024


Enable EFI capsule authentication and set the capsule public key
certificate file in the base TI K3 EFI Capsule config.

This will enable EFI capsule authentication on all boards that
include the base TI K3 EFI Capsule config file.

This patch is built upon the series enabling EFI capsule TI boards [0] as
well as using capsule certificates directly [1].

[0] https://lore.kernel.org/r/20240607223858.1971290-1-j-humphreys@ti.com
[1] https://lore.kernel.org/r/20240607225915.1985514-1-j-humphreys@ti.com

Signed-off-by: Jonathan Humphreys <j-humphreys at ti.com>
---
 configs/k3_efi_capsule.config | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/configs/k3_efi_capsule.config b/configs/k3_efi_capsule.config
index e31cea37269..8f8f63f672e 100644
--- a/configs/k3_efi_capsule.config
+++ b/configs/k3_efi_capsule.config
@@ -1,2 +1,4 @@
 CONFIG_EFI_CAPSULE_ON_DISK=y
 CONFIG_EFI_CAPSULE_FIRMWARE_RAW=y
+CONFIG_EFI_CAPSULE_AUTHENTICATE=y
+CONFIG_EFI_CAPSULE_CRT_FILE="arch/arm/mach-k3/keys/custMpk.crt"
-- 
2.34.1



More information about the U-Boot mailing list