On Thu, Dec 14, 2023 at 8:30 AM Fabio Estevam <feste...@gmail.com> wrote: > > Hi Tim, > > On Thu, Dec 14, 2023 at 1:25 PM Tim Harvey <thar...@gateworks.com> wrote: > > > > Prepare for DEK blob encapsulation support through "dek_blob" command. > > On ARMv8, u-boot runs in non-secure, thus cannot encapsulate a DEK blob > > for encrypted boot. > > > > The DEK blob is encapsulated by OP-TEE through a trusted application > > call. U-boot sends and receives the DEK and the DEK blob binaries > > through OP-TEE dynamic shared memory. > > > > To enable the DEK blob encapsulation, add to the defconfig: > > CONFIG_SECURE_BOOT=y > > This option does not exist. > > Do you mean CONFIG_IMX_HAB=y?
Fabio, The commit log details are not valid for upstream. I was basing this off of 8d060e4a66d6884341fbb3d8ab1d837a3f173d47 which made it upstream with the same message. I can submit a v2 if necessary. Best Regards, Tim
