[PATCH] configs: am62*_evm_a53_defconfig: Enable OP-TEE fTPM support

[Andrew Davis]

On 2/23/26 3:13 AM, Shiva Tripathi wrote:
> Enable firmware TPM (fTPM) support for AM62x, AM62Ax, and AM62Px SoCs
> by adding OP-TEE and TPM configuration options to the A53 defconfigs.
> 
> The AM62 family SoCs do not include an integrated hardware TPM. This

No K3 SoC integrates a full TPM, so why do this only for AM62? And
why only the TI EVMs? *All* K3 SoCs and *all* boards based on them
can make use of OP-TEE's fTPM, so why not move this to a common location
in the Kconfig files. That way you don't need to add all this in every
single defconfig.

For instance the CONFIG_CMD_* ones can be added to TI_COMMON_CMD_OPTIONS,

config TI_COMMON_CMD_OPTIONS
	imply CMD_MMC_RPMB if SUPPORT_EMMC_RPMB
etc..

Andrew

> patch enables the Microsoft fTPM Trusted Application running in OP-TEE's
> secure world to provide TPM 2.0 functionality, with persistent storage
> backed by the eMMC RPMB partition.
> 
> This enables TPM 2.0 functionality in U-Boot and provides the foundation
> for measured boot and disk encryption use cases.
> 
> Signed-off-by: Shiva Tripathi <s-tripathi1 at ti.com>
> ---
>   configs/am62ax_evm_a53_defconfig | 9 +++++++++
>   configs/am62px_evm_a53_defconfig | 9 +++++++++
>   configs/am62x_evm_a53_defconfig  | 9 +++++++++
>   3 files changed, 27 insertions(+)
> 
> diff --git a/configs/am62ax_evm_a53_defconfig b/configs/am62ax_evm_a53_defconfig
> index 167ba7ff8df..b14f19968a3 100644
> --- a/configs/am62ax_evm_a53_defconfig
> +++ b/configs/am62ax_evm_a53_defconfig
> @@ -99,5 +99,14 @@ CONFIG_SYSRESET=y
>   CONFIG_SPL_SYSRESET=y
>   CONFIG_SYSRESET_TI_SCI=y
>   CONFIG_FS_FAT_MAX_CLUSTSIZE=16384
> +CONFIG_TEE=y
> +CONFIG_OPTEE=y
> +CONFIG_TPM=y
> +CONFIG_TPM_V2=y
> +CONFIG_CMD_TPM=y
> +CONFIG_TPM2_FTPM_TEE=y
> +CONFIG_CMD_OPTEE_RPMB=y
> +CONFIG_SUPPORT_EMMC_RPMB=y
> +CONFIG_CMD_MMC_RPMB=y
>   
>   #include <configs/am62x_a53_usbdfu.config>
> diff --git a/configs/am62px_evm_a53_defconfig b/configs/am62px_evm_a53_defconfig
> index aa241a73c3f..2cd572cd5c7 100644
> --- a/configs/am62px_evm_a53_defconfig
> +++ b/configs/am62px_evm_a53_defconfig
> @@ -148,6 +148,15 @@ CONFIG_SPL_USB_HOST=y
>   CONFIG_SPL_USB_STORAGE=y
>   CONFIG_FS_FAT_MAX_CLUSTSIZE=16384
>   CONFIG_EFI_SET_TIME=y
> +CONFIG_TEE=y
> +CONFIG_OPTEE=y
> +CONFIG_TPM=y
> +CONFIG_TPM_V2=y
> +CONFIG_CMD_TPM=y
> +CONFIG_TPM2_FTPM_TEE=y
> +CONFIG_CMD_OPTEE_RPMB=y
> +CONFIG_SUPPORT_EMMC_RPMB=y
> +CONFIG_CMD_MMC_RPMB=y
>   
>   #include <configs/k3_efi_capsule.config>
>   #include <configs/am62x_a53_usbdfu.config>
> diff --git a/configs/am62x_evm_a53_defconfig b/configs/am62x_evm_a53_defconfig
> index 281fa3fea15..3221a9b8f2b 100644
> --- a/configs/am62x_evm_a53_defconfig
> +++ b/configs/am62x_evm_a53_defconfig
> @@ -138,6 +138,15 @@ CONFIG_SPL_SYSRESET=y
>   CONFIG_SYSRESET_TI_SCI=y
>   CONFIG_FS_FAT_MAX_CLUSTSIZE=16384
>   CONFIG_EFI_SET_TIME=y
> +CONFIG_TEE=y
> +CONFIG_OPTEE=y
> +CONFIG_TPM=y
> +CONFIG_TPM_V2=y
> +CONFIG_CMD_TPM=y
> +CONFIG_TPM2_FTPM_TEE=y
> +CONFIG_CMD_OPTEE_RPMB=y
> +CONFIG_SUPPORT_EMMC_RPMB=y
> +CONFIG_CMD_MMC_RPMB=y
>   
>   #include <configs/k3_efi_capsule.config>
>   #include <configs/am62x_a53_usbdfu.config>