[RFC PATCH v1 1/4] spl: Kconfig: add SPL_SECURE_OS_BOOT config symbol

Anshul Dalal anshuld at ti.com
Thu Jun 26 14:04:39 CEST 2025


This patch adds the new SPL_SECURE_OS_BOOT symbol that enables secure boot flow
in falcon mode.

Signed-off-by: Anshul Dalal <anshuld at ti.com>
---
 common/spl/Kconfig | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/common/spl/Kconfig b/common/spl/Kconfig
index 880192043c4..8d153c2e9c9 100644
--- a/common/spl/Kconfig
+++ b/common/spl/Kconfig
@@ -1196,6 +1196,13 @@ config SPL_OS_BOOT
 	  Enable booting directly to an OS from SPL.
 	  for more info read doc/README.falcon
 
+config SPL_SECURE_OS_BOOT
+	bool "Activate Secure Falcon Mode"
+	depends on SPL_OS_BOOT
+	help
+	  Enables support for secure boot in falcon mode by restricting the SPL to
+	  only loading a fitImage instead of raw kernel images or DTBs.
+
 config SPL_PAYLOAD_ARGS_ADDR
 	hex "Address in memory to load 'args' file for Falcon Mode to"
 	depends on SPL_OS_BOOT || SPL_LOAD_FIT_OPENSBI_OS_BOOT
-- 
2.49.0



More information about the U-Boot mailing list