From 26d53c5faa5cb22d02371ca8225ae8cdcfbf159a Mon Sep 17 00:00:00 2001 From: Jamin Lin Date: Fri, 18 Feb 2022 13:58:15 +0800 Subject: meta-aspeed: evb-ast2600 Disable socsec signing Disable the hardware root-of-trust on AST2600 EVB. Signed-off-by: Jamin Lin Change-Id: Iabf3bafb5db633de34731e041064318f8f56da5a --- meta-aspeed/conf/machine/evb-ast2600.conf | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'meta-aspeed/conf') diff --git a/meta-aspeed/conf/machine/evb-ast2600.conf b/meta-aspeed/conf/machine/evb-ast2600.conf index 5fbc71e8be..9b546586fc 100644 --- a/meta-aspeed/conf/machine/evb-ast2600.conf +++ b/meta-aspeed/conf/machine/evb-ast2600.conf @@ -3,6 +3,15 @@ KERNEL_DEVICETREE = "aspeed-ast2600-evb.dtb" UBOOT_MACHINE = "ast2600_openbmc_spl_defconfig" UBOOT_DEVICETREE = "ast2600-evb" SPL_BINARY = "spl/u-boot-spl.bin" +# Disable hardware root of trust by default. +# If users want to enable secure boot, +# please do the following steps. +# 1. Set SOCSEC_SIGN_ENABLE to “1”. +# 2. Provide platform OTP config. +# There was an example in p10bmc. +# If users enable socsec signing but do not provide OTP config, +# u-boot will be built failed. +SOCSEC_SIGN_ENABLE = "0" require conf/machine/include/ast2600.inc require conf/machine/include/obmc-evb-common.inc -- cgit v1.2.3