diff options
| author | Jamin Lin <jamin_lin@aspeedtech.com> | 2022-02-18 08:58:15 +0300 |
|---|---|---|
| committer | Jamin Lin <jamin_lin@aspeedtech.com> | 2022-02-24 04:38:29 +0300 |
| commit | 26d53c5faa5cb22d02371ca8225ae8cdcfbf159a (patch) | |
| tree | 54252df6b950b56918d8800c1b92bd3f4b216564 /meta-aspeed/conf | |
| parent | 26da90befcb4633d7ab5ba2e54b8515e7402bdb9 (diff) | |
| download | openbmc-26d53c5faa5cb22d02371ca8225ae8cdcfbf159a.tar.xz | |
meta-aspeed: evb-ast2600 Disable socsec signing
Disable the hardware root-of-trust on AST2600 EVB.
Signed-off-by: Jamin Lin <jamin_lin@aspeedtech.com>
Change-Id: Iabf3bafb5db633de34731e041064318f8f56da5a
Diffstat (limited to 'meta-aspeed/conf')
| -rw-r--r-- | meta-aspeed/conf/machine/evb-ast2600.conf | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/meta-aspeed/conf/machine/evb-ast2600.conf b/meta-aspeed/conf/machine/evb-ast2600.conf index 5fbc71e8be..9b546586fc 100644 --- a/meta-aspeed/conf/machine/evb-ast2600.conf +++ b/meta-aspeed/conf/machine/evb-ast2600.conf @@ -3,6 +3,15 @@ KERNEL_DEVICETREE = "aspeed-ast2600-evb.dtb" UBOOT_MACHINE = "ast2600_openbmc_spl_defconfig" UBOOT_DEVICETREE = "ast2600-evb" SPL_BINARY = "spl/u-boot-spl.bin" +# Disable hardware root of trust by default. +# If users want to enable secure boot, +# please do the following steps. +# 1. Set SOCSEC_SIGN_ENABLE to “1”. +# 2. Provide platform OTP config. +# There was an example in p10bmc. +# If users enable socsec signing but do not provide OTP config, +# u-boot will be built failed. +SOCSEC_SIGN_ENABLE = "0" require conf/machine/include/ast2600.inc require conf/machine/include/obmc-evb-common.inc |