Build failed on BSP40 with enabling secboot feature.

[Jeff-CF-Huang]

Hi Sir

I enable secboot feature like this.

DISTRO_FEATURES:append = " pfe hse secboot"

I encountered a build error.

Could you help me check it?

[chenyin_h · Accepted solution]

Hello, thanks for the reply.

If you do not want to remove corresponding 3 files mentioned from previous post, the following method may also be useful, add the following line to conf/local.conf, then rebuild:

PREFERRED_VERSION_arm-trusted-firmware-tools-native = "2.5"

Hope it helps.

Best Regards

Chenyin

[chenyin_h]

Hello, Thanks for the question

1. To enable SECBoot Support, update the conf/local.conf file in the Yocto build directory with these lines:

DISTRO_FEATURES:append = " secboot"

NXP_FIRMWARE_LOCAL_DIR = "/path/to/firmware/folder"

Enabling HSE Secure Boot in the conf/local.conf file will automatically enable PKCS11 Support & HSE Linux Driver as well. You may not need to add additional “hse” here.

2. For the building error, since only TF-A 2.5 is used in BSP40, you may temporally remove the TF-A 2.10 related files under sources/meta-alb/recipes-bsp/arm-trusted-firmware/ as a workaround.

Hope it helps.

Best Regards

Chenyin

[Jeff-CF-Huang]

Hi Sir,
Can TF-A 2.10 be disregarded without being deleted?