Part Number: PROCESSOR-SDK-DRA8X-TDA4X
Hi Ti,
How can we enable secure boot with the Linux sdk release V07.00.00.04.
We wanted to enable DM-Verity on the same. If you have steps to enable it with current SDK please share.
Best regards
Amit
This thread has been locked.
If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.
Part Number: PROCESSOR-SDK-DRA8X-TDA4X
Hi Ti,
How can we enable secure boot with the Linux sdk release V07.00.00.04.
We wanted to enable DM-Verity on the same. If you have steps to enable it with current SDK please share.
Best regards
Amit
Hi Keerthy,
We want to enable the integrity check on linux as we are using the PSDLA release. DM-verity is enabled in Android for same.
We can create the hash with dm-verity. But in current TI bootflow we want to know how this verification can be done.
If you have some different solution for the same do let us know.
Best regards
Amit
Hi Amit,
In case of Android, the Android framework by default has the support for generating file system images (system.img, etc..) suitable for using with dm-verity. The support for dm-verity in kernel is also standard component.
Only support needed from TI SDK was crypto support in Linux kernel for SHA operations.
Regards,
Vishal
I am not sure which components are needed on the Linux filesystem to generate images that can be used with dm-verity enabled Kernel.
We have not looked in to this.
But secure device boot flow till you reach to Kernel is a separate topic.
Hi Karan,
Can you point me to documentation for secure boot till kernel load. I will close the issue after that.
Best regards
Amit
Hi Amit,
Are you having HS samples? We do not have any documentation of SDK 7.0 for that right now.
Best Regards,
Keerthy
Hi Amit,
Recently published e2e FAQ: https://e2e.ti.com/support/processors/f/791/t/958666
I believe this is what you are looking for. From u-boot you should be able to load the kernel
with bootargs that you used for the non-HS devices.
Can you resolve the thread?
Best Regards,
Keerthy