Setup of secure world environment using Trustzone

Unfortunately all the Beagleboard devices are GP and not secure devices so you cannot utilize security features.

BR,

Steve

Thanks for your reply, Steve. Could you just clarify what 'GP' means here?

Do you know if it's possible to override that setup for the beagle board say, by reflashing the firmware?

If not, are you aware of any other hardware platform based on OMAP35x processors where the usage of trustzones is unblocked? For example, the Gumstix Overo Earth board? Or these features are disabled by default on the OMAP35x processors?

Essentially, we are trying to pull off a research project. I know that Nvidia's Tegra based boards support trustzones, but the OMAP35x processors seem to better fit our purposes.

Many thanks,

Nuno

Nuno,

GP means General Purpose.

It is not changable through software at all and is a fixed device configuration.

I will get someone else to comment on secure enabled availability since I don't really know.

BR,

Steve

I am also trying to learn about TrustZone.  Upon contacting my TI support representative, I received an email directing me to the forums.  This is definitely the right thread, as I have precisely the same set of questions as the original poster. 

From what I can tell, having a TrustZone-enabled CPU is insufficient. It is also necessary to have supporting logic / software to enable TrustZone at platform startup.

Perhaps a new question: Can anybody suggest a platform that does not disable TrustZone?  Perhaps a particular make and model of mobile phone?

Thanks,

-Jon

They talk about a secure ROM feature for the OMAP series with high security but don't name a specific version which implements it.  They are all marked in the OMAP manuals as GP.  This is very misleading if they don't actually make an OMAP with these features let alone hard to develop with.  If anyone has any information please respond.

Hi.

Does the same limitations apply to the Pandaboard's OMAP4430 or is it possible to experiment with TrustZone (for example by implementing one's own Security Monitor) on this platform ?

Thanks in advance.

Dear Steve,

     Does OMAP4460 supports ARM Trustzone?  Are there two kinds of OMAP4460 processor,one is GP and another is security?

Alex,

OMAP4460 HS device supports ARM Trustzone.
There are 2 kinds of OMAP4460 device types: GP devices and HS devices.

GP is a general purpose device, which does not support security.
HS is High security device which leverages ARM Trustzone and has security features.

Regards,
Nisha

Nisha,

So if we assume that the OMAP 4460 HS is the only device that we can use if we want to implement a TrustZone supported secure state, there's still the question of being able to do that.  Obviously we can't change the secureROM inside the chip.  Therefore, the place to load our secure kernel would be through u-boot/x-loader.  However, does the secureROM on these chips allow us to modify these bootloaders, and does it keep the system in secure mode even after transferring execution to the bootloaders?  If the secureROM prohibits bootloader alteration, or switches the processor into non-secure mode prior to transferring execution, we're basically screwed.

-Matt