diff options
| author | Dimitris Papastamos <dimitris.papastamos@arm.com> | 2018-07-06 13:03:57 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2018-07-06 13:03:57 +0100 |
| commit | b6c07bbb2ed520f0b51775adb5d22b294d6971eb (patch) | |
| tree | 7a9d488608253d98dbe53b9dfcdf02b4b67bd3ad /docs | |
| parent | 0a15eb9cac9c179289b5837d252c37fa515ac2c8 (diff) | |
| parent | ebbdbb1fd61635fb5ee61c89203384113bb09efb (diff) | |
| download | platform_external_arm-trusted-firmware-b6c07bbb2ed520f0b51775adb5d22b294d6971eb.tar.gz platform_external_arm-trusted-firmware-b6c07bbb2ed520f0b51775adb5d22b294d6971eb.tar.bz2 platform_external_arm-trusted-firmware-b6c07bbb2ed520f0b51775adb5d22b294d6971eb.zip | |
Merge pull request #1463 from grandpaul/paulliu-rpi3-tbb0
rpi3: Add support for Trusted Board Boot
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/plat/rpi3.rst | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/docs/plat/rpi3.rst b/docs/plat/rpi3.rst index 554c9a14a..c8e2405cc 100644 --- a/docs/plat/rpi3.rst +++ b/docs/plat/rpi3.rst @@ -101,7 +101,7 @@ secure platform! 0x00000000 +-----------------+ | ROM | BL1 - 0x00010000 +-----------------+ + 0x00020000 +-----------------+ | FIP | 0x00200000 +-----------------+ | | @@ -213,7 +213,7 @@ by ``debug`` if you set the build option ``DEBUG=1``): .. code:: shell cp build/rpi3/release/bl1.bin bl1.pad.bin - truncate --size=65536 bl1.pad.bin + truncate --size=131072 bl1.pad.bin cat bl1.pad.bin build/rpi3/release/fip.bin > armstub8.bin The resulting file, ``armstub8.bin``, contains BL1 and the FIP in the place they @@ -243,6 +243,16 @@ The following build options are supported: BL32_EXTRA1=tee-pager_v2.bin BL32_EXTRA2=tee-pageable_v2.bin`` to put the binaries into the FIP. +- ``TRUSTED_BOARD_BOOT``: This port supports TBB. Set this option + ``TRUSTED_BOARD_BOOT=1`` to enable it. In order to use TBB, you might + want to set ``GENERATE_COT=1`` to let the contents of the FIP automatically + signed by the build process. The ROT key will be generated and output to + ``rot_key.pem`` in the build directory. It is able to set ROT_KEY to + your own key in PEM format. + Also in order to build, you need to clone mbedtls from + `here <https://github.com/ARMmbed/mbedtls>`__. + And set MBEDTLS_DIR to mbedtls source directory. + The following is not currently supported: - AArch32 for TF-A itself. |