U-Boot Archive on lore.kernel.org
 help / color / mirror / Atom feed
From: Anshul Dalal <anshuld@ti.com>
To: Bryan Brattlof <bb@ti.com>, Simon Glass <sjg@chromium.org>,
	"Alper Nebi Yasak" <alpernebiyasak@gmail.com>,
	Tom Rini <trini@konsulko.com>
Cc: <u-boot@lists.denx.de>
Subject: Re: [PATCH -next 3/5] binman: add sysfw-inner-cert to missing-blob-help
Date: Thu, 12 Jun 2025 10:28:53 +0530	[thread overview]
Message-ID: <DAKAF5YRCY2T.39SSJYUIINTK7@ti.com> (raw)
In-Reply-To: <20250611-missing-blob-help-entries-v1-3-c6de1844117f@ti.com>

On Wed Jun 11, 2025 at 11:47 PM IST, Bryan Brattlof wrote:
> Now that the inner certificate for TI' Foundation Security TIFS firmware
> is mandatory to a successful build, provide some guidance on what it is
> and links to the documentation on how to obtain the firmware blobs.
>
> Signed-off-by: Bryan Brattlof <bb@ti.com>
> ---
>  tools/binman/missing-blob-help | 10 ++++++++++
>  1 file changed, 10 insertions(+)
>
> diff --git a/tools/binman/missing-blob-help b/tools/binman/missing-blob-help
> index e28eaa2015443f256a469df4ead87793e23ba219..fcc989ed757e0d0a8d5bc8238c3d013da98aa390 100644
> --- a/tools/binman/missing-blob-help
> +++ b/tools/binman/missing-blob-help
> @@ -60,3 +60,13 @@ Have a look at your board's documentation to find the latest version of
>  the DM firmware binary and how to include it in the build.
>  
>      https://docs.u-boot.org/en/latest/board/ti/k3.html
> +
> +sysfw-inner-cert:
> +You are missing the inner certificate for TI's Foundational Security (TIFS)
> +firmware which is critical to authenticating the TIFS firmware during boot.
> +HS-FS and HS-SE parts will not boot without this certificate.
> +
> +Have a look at your board's documentation to find and include the latest
> +TIFS certificate blobs and how to include them in the build.
> +
> +    https://docs.u-boot.org/en/latest/board/ti/k3.html

Nit: With the entries ordered alphabetically in the 1st patch, the entry
`sysfw-inner-cert` should go after `scp-sunxi` instead.

Reviewed-by: Anshul Dalal <anshuld@ti.com>

  reply	other threads:[~2025-06-12  4:59 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-06-11 18:17 [PATCH -next 0/5] add a few entries into missing-blob-help Bryan Brattlof
2025-06-11 18:17 ` [PATCH -next 1/5] binman: alphabetize missing-blob entries Bryan Brattlof
2025-06-12  4:55   ` Anshul Dalal
2025-06-11 18:17 ` [PATCH -next 2/5] binman: add ti-dm entry to missing-blob-help Bryan Brattlof
2025-06-12  4:55   ` Anshul Dalal
2025-06-11 18:17 ` [PATCH -next 3/5] binman: add sysfw-inner-cert " Bryan Brattlof
2025-06-12  4:58   ` Anshul Dalal [this message]
2025-06-12 11:15     ` Bryan Brattlof
2025-06-11 18:17 ` [PATCH -next 4/5] binman: allow '.' to be included in the missing blob tags Bryan Brattlof
2025-06-11 18:17 ` [PATCH -next 5/5] binmain: include ti-fs-enc.bin into missing-blob-help Bryan Brattlof

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=DAKAF5YRCY2T.39SSJYUIINTK7@ti.com \
    --to=anshuld@ti.com \
    --cc=alpernebiyasak@gmail.com \
    --cc=bb@ti.com \
    --cc=sjg@chromium.org \
    --cc=trini@konsulko.com \
    --cc=u-boot@lists.denx.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox