This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

DSP/BIOS Support for Secure Boot on OMAP-L138

Other Parts Discussed in Thread: OMAP-L138, SYSBIOS

What version of DSP/BIOS is required to add support for Secure Boot on OMAP-L138?

I was told you need to add this line to the tcf:

bios.GBL.ENABLE_SK = true;

This specifically is for a secondary bootloader using DSP/BIOS where we need to make calls into the secure kernel in order to load the main (encrypted) application.  Is there anything else special we need to know in terms of using DSP/BIOS for a secondary bootloader on a secure OMAP-L138?

Thanks,
Brad

  • Support for using Secure Kernel has been in DSP/BIOS (i.e., BIOS 5) for a while now, so most any supported version will do.

    In addition to adding that line to your .tcf file (bios.GBL.ENABLE_SK = true;) you need to include the C wrapper APIs to your build.  These APIs exist in source form, and are assembly-based calls into Secure Kernel.  The SK version of the DSP/BIOS libraries call into these C wrapper APIs, but the API definitions are not currently included in the DSP/BIOS product.

    TI has privately supported customers up to this point, providing the needed API source file and header files, but we will come up with a solution for providing them to the general population (probably in the form of a wiki page and/or built-in to the product).

    FYI, there is no support in SysBios (i.e., BIOS 6) for Secure Kernel yet.

    Regards,

    - Rob