I’m doing some prototyping using QorIQ DPAA and ARM TrustZone mechanisms on the LS1046ARDB board. I was wondering if it was possible to isolate at least one Ethernet interface in the TEE, therefor being only usable by the secure-world, while the rest of the network interfaces would belong to the REE.
I’ve read on the QorIQ LS1046A Reference Manual Rev. 2, Chapter 14.5.1, p559 "The QMan is always a non-secure master”. So, if I understand correctly, this also implies BMan and FMan need to be non-secure. Basically, the entire DPAA can only run in non-secure mode. Meaning I cannot have a network interface only accessible by the secure-world. Is my conclusion correct ?
Many thanks for your answers