LS1043: Secureboot image build using yocto

BhargavJayswal813 — Tue, 29 Apr 2025 10:18:46 GMT

Dear NXP team,

I am working on secure boot for LS1043A. I am facing problem at yocto build to generate secure images BL2.pbl (RCW + PBI + ISBC Headers + BL2.bin + public key + signature) and fib_uboot.bin (ESBC Headers + BL31.bin + public key + signature + ESBC Headers + BL33_uboot.bin + public key + sinature ).

As part of normal build compilation below command generate non-secure images.

bitbake rcw

bitbake linux-qoriq

bitbake qoriq-atf

As as result it generates bl2_sd.pbl (RCW+PBI+BL2) and fib_uboot.bin (BL31 + BL33) in deploy dir .

In order to generate secure boot images we have to do some modification in recipe according to UG10081_LLDP_6.1.55_2.2.0.pdf user guide document(5.1.1.5.3.1 : Build secure boot TF-A images for NXP CoT) . We are not using SPD=opteed BL32=tee.bin for OS. We wanted to just validate image bl2_sd.pbl and fip_uboot.bin.

Could you please let us know what modification required in related recipe and what are the yocto command i have to run in order to generate secure boot images.

Regards,

Bhargav Jayswal

Re: LS1043: Secureboot image build using yocto

June_Lu — Wed, 30 Apr 2025 07:41:42 GMT

Hope commands below could help you

How to compile atf with OPTEE?
Set DISTRO_FEATURES:append = " optee" in your local.conf.

Secure boot
   For build secure boot image ,you need to set the following variables in local.conf
   DISTRO_FEATURES:append = " secure"
```
   $: bitbake secure-boot-qoriq

LayerscapeのトピックLS1043: Secureboot image build using yocto

LS1043: Secureboot image build using yocto

Re: LS1043: Secureboot image build using yocto