Dear NXP team,
I am working on secure boot for LS1043A. I am facing problem at yocto build to generate secure images BL2.pbl (RCW + PBI + ISBC Headers + BL2.bin + public key + signature) and fib_uboot.bin (ESBC Headers + BL31.bin + public key + signature + ESBC Headers + BL33_uboot.bin + public key + sinature ).
As part of normal build compilation below command generate non-secure images.
bitbake rcw
bitbake linux-qoriq
bitbake qoriq-atf
As as result it generates bl2_sd.pbl (RCW+PBI+BL2) and fib_uboot.bin (BL31 + BL33) in deploy dir .
In order to generate secure boot images we have to do some modification in recipe according to UG10081_LLDP_6.1.55_2.2.0.pdf user guide document(5.1.1.5.3.1 : Build secure boot TF-A images for NXP CoT) . We are not using SPD=opteed BL32=tee.bin for OS. We wanted to just validate image bl2_sd.pbl and fip_uboot.bin.
Could you please let us know what modification required in related recipe and what are the yocto command i have to run in order to generate secure boot images.
Regards,
Bhargav Jayswal
Hope commands below could help you
How to compile atf with OPTEE?
Set DISTRO_FEATURES:append = " optee" in your local.conf.
Secure boot
For build secure boot image ,you need to set the following variables in local.conf
DISTRO_FEATURES:append = " secure"
```
$: bitbake secure-boot-qoriq