iMX8QM XEN secure boot

[emyioo]

Hello all,

I want to run XEN on an iMX8 QM target in a secure boot environment. 

In order to authenticate the DomUs that are being started from XEN, the SCU support needs to be present in XEN. 

The boot scenario is that an initial secure image is first booted up to XEN with Dom0. From that point, any new DomU started from XEN should be authenticated using the SCU API.

Do you know if there is already any implementation/guide for image authentication support in XEN?

Best regards,

Emanuel

[Peng_Fan]

authenticate domu images are not supported. You could check dom0-less feature, with this, you could use boot loader to authenticate all images.