Add a generic configs/efi_secureboot.config fragment containing the
Kconfig options required to enable UEFI Secure Boot support

Signed-off-by: Aswin Murugan <[email protected]>
---
 configs/efi_secureboot.config | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 configs/efi_secureboot.config

diff --git a/configs/efi_secureboot.config b/configs/efi_secureboot.config
new file mode 100644
index 00000000000..088dbb9d02e
--- /dev/null
+++ b/configs/efi_secureboot.config
@@ -0,0 +1,8 @@
+# Enables EFI Secure Boot support.
+# This fragment is generic and can be applied on top of any board defconfig
+# that supports the EFI subsystem
+CONFIG_EFI_VARIABLES_PRESEED=y
+CONFIG_EFI_SECURE_BOOT=y
+CONFIG_FIT_SIGNATURE=y
+CONFIG_SHA512=y
+CONFIG_SHA384=y
\ No newline at end of file
-- 
2.34.1

Reply via email to