[PATCH v2 0/2] imx93: Add support for OPTEE

[PATCH v2 0/2] imx93: Add support for OPTEE

[Mathieu Dubois-Briand]

Changes in v2:
- Fixing build when the optee image is not present
- Link to v1: https://lore.kernel.org/all/20260414155928.1391211-1-krzysztof@kd-solutions.pl/

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
---
Krzysztof Drobiński (1):
      imx93: Add support for OPTEE

Mathieu Dubois-Briand (1):
      binman: Add optee binary to i.MX9 platform types

 arch/arm/dts/imx93-u-boot.dtsi      | 3 +++
 tools/binman/etype/nxp_imx9image.py | 3 ++-
 2 files changed, 5 insertions(+), 1 deletion(-)
---
base-commit: 1a8b7ad50aed5f5f0a4ccbfd455233919c097293
change-id: 20260610-mathieu-optee-fix-e60c5e725296

Best regards,
-- 
Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>

[PATCH v2 1/2] binman: Add optee binary to i.MX9 platform types

[Mathieu Dubois-Briand]

OP-TEE tee.bin is generated externally and might be missing during the
build.

Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
---
 tools/binman/etype/nxp_imx9image.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/tools/binman/etype/nxp_imx9image.py b/tools/binman/etype/nxp_imx9image.py
index e0e806f2b7f3..138563ba33ae 100644
--- a/tools/binman/etype/nxp_imx9image.py
+++ b/tools/binman/etype/nxp_imx9image.py
@@ -36,7 +36,8 @@ class Entry_nxp_imx9image(Entry_mkimage):
             'append', 'boot-from', 'cntr-version', 'container', 'dummy-ddr',
             'dummy-v2x', 'hold', 'image', 'soc-type'
         ]
-        external_files = ['oei-m33-tcm.bin', 'm33_image.bin', 'bl31.bin']
+        external_files = ['oei-m33-tcm.bin', 'm33_image.bin', 'bl31.bin',
+                          'tee.bin']
 
         with open(self.config_filename, 'w', encoding='utf-8') as f:
             for prop in self._node.props.values():

-- 
2.47.3

[PATCH v2 2/2] imx93: Add support for OPTEE

[Mathieu Dubois-Briand]

From: Krzysztof Drobiński <krzysztof@kd-solutions.pl>

OPTEE-OS starts correctly when "opteed" is enabled for Secure Payload
Dispatcher in TF-A (tested on OP-TEE version: 4.9.0), however imx93
devices require a patch for OPTEE targets because binman does not see
the tee.bin file when it is available.

Enable conditional OPTEE support for imx93 devices.

Signed-off-by: Krzysztof Drobiński <krzysztof@kd-solutions.pl>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
---
 arch/arm/dts/imx93-u-boot.dtsi | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/arch/arm/dts/imx93-u-boot.dtsi b/arch/arm/dts/imx93-u-boot.dtsi
index dc86746ac909..60648bd10a5c 100644
--- a/arch/arm/dts/imx93-u-boot.dtsi
+++ b/arch/arm/dts/imx93-u-boot.dtsi
@@ -69,6 +69,9 @@
 				container;
 				image0 = "a55", "bl31.bin", "0x204E0000";
 				image1 = "a55", "u-boot.bin", "0x80200000";
+#if defined(CONFIG_OPTEE)
+				image2 = "a55", "tee.bin", "0x96000000";
+#endif
 			};
 		};
 	};

-- 
2.47.3

Re: [PATCH v2 0/2] imx93: Add support for OPTEE

[Peng Fan]

On Wed, Jun 10, 2026 at 04:17:08PM +0200, Mathieu Dubois-Briand wrote:
>Changes in v2:
>- Fixing build when the optee image is not present
>- Link to v1: https://lore.kernel.org/all/20260414155928.1391211-1-krzysztof@kd-solutions.pl/
>
>Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>

Reviewed-by: Peng Fan <peng.fan@nxp.com>