diff options
| author | Igor Opaniuk <igor.opaniuk@toradex.com> | 2020-08-17 15:51:09 +0300 |
|---|---|---|
| committer | Igor Opaniuk <igor.opaniuk@toradex.com> | 2020-08-17 15:51:09 +0300 |
| commit | 347b4ac4e4205379f6570f5e73e2c706870bc37f (patch) | |
| tree | 6948ba088f7913419307a8c14a0698d16566533f | |
| parent | e95531cfa849172c4c59d774be00b6cd8934da51 (diff) | |
colibri-imx7: enable SECURE_BOOT and CAAM
Let U-Boot do initial initialization of CAAM and enable secure boot
support.
Output:
U-Boot 2019.07-00006-gb90d461f82-dirty (Aug 17 2020 - 15:41:42 +0300)
...
SEC0: RNG instantiated
...
This fixes these errors in Linux kernel:
[ 0.835787] caam 30900000.caam: Entropy delay = 3200
[ 0.865826] caam 30900000.caam: failed to acquire DECO 0
[ 0.871154] caam 30900000.caam: failed to instantiate RNG
With 22191ac35344 ("drivers/crypto/fsl: assign job-rings to non-TrustZone")
it lets CAAM driver in Linux kernel do proper initialization:
[ 0.826552] caam 30900000.caam: device ID = 0x0a16030000000000 (Era 8)
[ 0.826566] caam 30900000.caam: job rings = 3, qi = 0
[ 0.845186] caam algorithms registered in /proc/crypto
[ 0.848088] caam 30900000.caam: caam pkc algorithms registered in /proc/crypto
[ 0.850225] caam_jr 30901000.jr0: registering rng-caam
Signed-off-by: Igor Opaniuk <igor.opaniuk@toradex.com>
| -rw-r--r-- | configs/colibri_imx7_defconfig | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/configs/colibri_imx7_defconfig b/configs/colibri_imx7_defconfig index 5551e60343..29d7b1ad0f 100644 --- a/configs/colibri_imx7_defconfig +++ b/configs/colibri_imx7_defconfig @@ -2,6 +2,7 @@ CONFIG_ARM=y CONFIG_SYS_THUMB_BUILD=y CONFIG_ARCH_MX7=y CONFIG_SYS_TEXT_BASE=0x87800000 +CONFIG_SECURE_BOOT=y CONFIG_TARGET_COLIBRI_IMX7=y CONFIG_NR_DRAM_BANKS=1 CONFIG_IMX_RDC=y @@ -48,6 +49,7 @@ CONFIG_IP_DEFRAG=y CONFIG_TFTP_BLOCKSIZE=16352 CONFIG_BOOTCOUNT_LIMIT=y CONFIG_BOOTCOUNT_ENV=y +CONFIG_FSL_CAAM=y CONFIG_DFU_NAND=y CONFIG_DM_GPIO=y CONFIG_DM_I2C=y |