• State Resolved
  • Locked Locked
  • Replies 7 replies
  • Answers 3 answers
  • Subscribers 99 subscribers
  • Views 406 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

PROCESSOR-SDK-AM62X: AM62x GP Device Boot Flow and OPTEE Support

Kumar Ashutosh
Intellectual 355 points

Part Number: PROCESSOR-SDK-AM62X

Hi Team,

Could you please let me know whether boot flow mentioned in section 3.1.1.1.4 of  https://software-dl.ti.com/processor-sdk-linux/esd/AM62X/09_00_00_03/exports/docs/linux/Foundational_Components/U-Boot/UG-General-Info.html is normal Bootloader boot flow or boot flow if with security feature enabled.

We are using GP Device. Kindly confirm whether GP Device supports OPTEE or not?

+------------------------------------------------------------------------+
|        TIFS            |      Main R5          |        A53            |
+------------------------------------------------------------------------+
|    +--------+          |                       |                       |
|    |  Reset |          |                       |                       |
|    +--------+          |                       |                       |
|         :              |                       |                       |
|    +--------+          |   +-----------+       |                       |
|    | *ROM*  |----------|-->| Reset rls |       |                       |
|    +--------+          |   +-----------+       |                       |
|    |        |          |         :             |                       |
|    |  ROM   |          |         :             |                       |
|    |services|          |         :             |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |  *R5 ROM*   |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |<---------|---|Load and auth|     |                       |
|    |        |          |   | tiboot3.bin |     |                       |
|    +--------+          |   +-------------+     |                       |
|    |        |<---------|---| Load sysfw  |     |                       |
|    |        |          |   | part to TIFS|     |                       |
|    |        |          |   | core        |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |         :             |                       |
|    |        |          |         :             |                       |
|    |        |          |         :             |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |  *R5 SPL*   |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |    DDR      |     |                       |
|    |        |          |   |   config    |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |    Load     |     |                       |
|    |        |          |   |  tispl.bin  |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |   Load R5   |     |                       |
|    |        |          |   |   firmware  |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |<---------|---| Start A53   |     |                       |
|    |        |          |   | and jump to |     |                       |
|    |        |          |   | DM fw image |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |                       |     +-----------+     |
|    |        |----------|-----------------------|---->| Reset rls |     |
|    |        |          |                       |     +-----------+     |
|    |  TIFS  |          |                       |          :            |
|    |Services|          |                       |     +-----------+     |
|    |        |<---------|-----------------------|---->|*ATF/OPTEE*|     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |          :            |
|    |        |          |                       |     +-----------+     |
|    |        |<---------|-----------------------|---->| *A53 SPL* |     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |     |   Load    |     |
|    |        |          |                       |     | u-boot.img|     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |          :            |
|    |        |          |                       |     +-----------+     |
|    |        |<---------|-----------------------|---->| *U-Boot*  |     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |     |  prompt   |     |
|    |        |----------|-----------------------|-----+-----------+-----|
|    +--------+          |                       |                       |
|                        |                       |                       |
+------------------------------------------------------------------------+

Regards,

Kumar Ashutosh

  • 0
    TI__Guru* 79080 points

    Hello,
    OPTEE is an optional components in Linux boot flow, and can be removed as necessary.
    Best,
    -Hong

  • 0 in reply to Hong Guan64
    Intellectual 355 points

    Hi Hong,

    Thankyou for your response.

    Could you please confirm that GP device supports OPTEE or not. Also what is the process to disable or enable OPTEE in software?

    Regards,

    Kumar Ashutosh

  • 0 in reply to Kumar Ashutosh
    TI__Guru* 79080 points

    Hello Kumar,
    OPTEE is in Linux SDK for all device type variants (GP/HS), but the Root-Of-Trust (RoT) secure boot chain is enabled and enforced only on HS starting from Power-On-Reset (PoR), but not on GP.

    OPTEE is removable by building ATF without "SPD=opteed" option.

    Best,
    -Hong

  • 0 in reply to Hong Guan64
    Intellectual 355 points

    Hi Hong,

    Thankyou for your response.

    Could you please confirm whether below boot flow is for GP device or not. I have removed OPTEE from Boot flow. Intension is to know the exact boot flow of GP device. Kindly confirm. 

    +------------------------------------------------------------------------+
|        TIFS            |      Main R5          |        A53            |
+------------------------------------------------------------------------+
|    +--------+          |                       |                       |
|    |  Reset |          |                       |                       |
|    +--------+          |                       |                       |
|         :              |                       |                       |
|    +--------+          |   +-----------+       |                       |
|    | *ROM*  |----------|-->| Reset rls |       |                       |
|    +--------+          |   +-----------+       |                       |
|    |        |          |         :             |                       |
|    |  ROM   |          |         :             |                       |
|    |services|          |         :             |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |  *R5 ROM*   |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |<---------|---|Load and auth|     |                       |
|    |        |          |   | tiboot3.bin |     |                       |
|    +--------+          |   +-------------+     |                       |
|    |        |<---------|---| Load sysfw  |     |                       |
|    |        |          |   | part to TIFS|     |                       |
|    |        |          |   | core        |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |         :             |                       |
|    |        |          |         :             |                       |
|    |        |          |         :             |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |  *R5 SPL*   |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |    DDR      |     |                       |
|    |        |          |   |   config    |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |    Load     |     |                       |
|    |        |          |   |  tispl.bin  |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |   |   Load R5   |     |                       |
|    |        |          |   |   firmware  |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |<---------|---| Start A53   |     |                       |
|    |        |          |   | and jump to |     |                       |
|    |        |          |   | DM fw image |     |                       |
|    |        |          |   +-------------+     |                       |
|    |        |          |                       |     +-----------+     |
|    |        |----------|-----------------------|---->| Reset rls |     |
|    |        |          |                       |     +-----------+     |
|    |  TIFS  |          |                       |          :            |
|    |Services|          |                       |                       |
|    |        |          |                       |                       |
|    |        |          |                       |                       |
|    |        |          |                       |                       |
|    |        |          |                       |     +-----------+     |
|    |        |<---------|-----------------------|---->| *A53 SPL* |     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |     |   Load    |     |
|    |        |          |                       |     | u-boot.img|     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |          :            |
|    |        |          |                       |     +-----------+     |
|    |        |<---------|-----------------------|---->| *U-Boot*  |     |
|    |        |          |                       |     +-----------+     |
|    |        |          |                       |     |  prompt   |     |
|    |        |----------|-----------------------|-----+-----------+-----|
|    +--------+          |                       |                       |
|                        |                       |                       |
+------------------------------------------------------------------------+

    Regards,
    Kumar Ashutosh
  • 0 in reply to Kumar Ashutosh
    TI__Guru* 79080 points

    Hello Kumar,
    ATF is the first SW component booting on A53 core, and is required on GP also.
    When ATF is built without "SPD=opteed" option, OPTEE is skipped in ATF boot flow.
    Best,
    -Hong

  • 0 in reply to Hong Guan64
    Intellectual 355 points

    Hi Hong,

    Could you please confirm whether GP devices supports secure boot or not? Kindly Confirm.

    Regards,

    Kumar Ashutosh

  • +1 in reply to Kumar Ashutosh
    TI__Guru* 79080 points
    Hong Guan64 said:
    the Root-Of-Trust (RoT) secure boot chain is enabled and enforced only on HS starting from Power-On-Reset (PoR), but not on GP.