TDA4VM: secure memory protection for optee

Jiankang Huang

Part Number: TDA4VM

Hello，

I build and flash image with optee enable in my board.

but I find that the memory used by optee(24 MB of DDR memory at 0x9e800000) which should be secure memory can be access by none secure side.

I'm not sure the secure memrory access control should be enable by additional steps ? or it is not supported in GP devices ?

thanks.

over 4 years ago

0 Suman Anna over 4 years ago

TI__Guru*** 125055 points

Hi JianKang,

Yes, the memory used by OPTEE needs to be secured by using firewalls. Firewalls are available on GP device as well, but the current SDKs lack the firewall programming for the memory used by OPTEE (and ATF). We already have a requirement to enable this in future SDKs, but is not available on current SDKs.

You can refer to the J721E DDR Firewall Example AppNote to see how firewalls can be programmed using SBL.

regards

Suman

0 Jiankang Huang over 4 years ago in reply to Suman Anna

Prodigy 100 points

thank you！

and is there a schedule about the future SDK release? contains firewall configurations about OPTEE/ ATF.

+1 Suman Anna over 4 years ago in reply to Jiankang Huang

TI__Guru*** 125055 points

Hi Jiankang,

It is currently planned for SDK 8.6 (no formal dates yet, but sometime early next year).

regards

Suman

Processors

Processors forum

TDA4VM: secure memory protection for optee