From 347b4ac4e4205379f6570f5e73e2c706870bc37f Mon Sep 17 00:00:00 2001 From: Igor Opaniuk Date: Mon, 17 Aug 2020 15:51:09 +0300 Subject: colibri-imx7: enable SECURE_BOOT and CAAM Let U-Boot do initial initialization of CAAM and enable secure boot support. Output: U-Boot 2019.07-00006-gb90d461f82-dirty (Aug 17 2020 - 15:41:42 +0300) ... SEC0: RNG instantiated ... This fixes these errors in Linux kernel: [ 0.835787] caam 30900000.caam: Entropy delay = 3200 [ 0.865826] caam 30900000.caam: failed to acquire DECO 0 [ 0.871154] caam 30900000.caam: failed to instantiate RNG With 22191ac35344 ("drivers/crypto/fsl: assign job-rings to non-TrustZone") it lets CAAM driver in Linux kernel do proper initialization: [ 0.826552] caam 30900000.caam: device ID = 0x0a16030000000000 (Era 8) [ 0.826566] caam 30900000.caam: job rings = 3, qi = 0 [ 0.845186] caam algorithms registered in /proc/crypto [ 0.848088] caam 30900000.caam: caam pkc algorithms registered in /proc/crypto [ 0.850225] caam_jr 30901000.jr0: registering rng-caam Signed-off-by: Igor Opaniuk --- configs/colibri_imx7_defconfig | 2 ++ 1 file changed, 2 insertions(+) diff --git a/configs/colibri_imx7_defconfig b/configs/colibri_imx7_defconfig index 5551e60343..29d7b1ad0f 100644 --- a/configs/colibri_imx7_defconfig +++ b/configs/colibri_imx7_defconfig @@ -2,6 +2,7 @@ CONFIG_ARM=y CONFIG_SYS_THUMB_BUILD=y CONFIG_ARCH_MX7=y CONFIG_SYS_TEXT_BASE=0x87800000 +CONFIG_SECURE_BOOT=y CONFIG_TARGET_COLIBRI_IMX7=y CONFIG_NR_DRAM_BANKS=1 CONFIG_IMX_RDC=y @@ -48,6 +49,7 @@ CONFIG_IP_DEFRAG=y CONFIG_TFTP_BLOCKSIZE=16352 CONFIG_BOOTCOUNT_LIMIT=y CONFIG_BOOTCOUNT_ENV=y +CONFIG_FSL_CAAM=y CONFIG_DFU_NAND=y CONFIG_DM_GPIO=y CONFIG_DM_I2C=y -- cgit v1.2.3