2 bool "NXP ESBC (secure boot) functionality"
4 Enable Freescale Secure Boot feature. Normally selected by defconfig.
5 If unsure, do not change.
7 menu "Chain of trust / secure boot options"
8 depends on !FIT_SIGNATURE && NXP_ESBC
14 select SPL_BOARD_INIT if (ARM && SPL)
15 select SPL_HASH if (ARM && SPL)
17 select SHA_PROG_HW_ACCEL
19 select CMD_EXT4 if ARM
20 select CMD_EXT4_WRITE if ARM
25 config CMD_ESBC_VALIDATE
26 bool "Enable the 'esbc_validate' and 'esbc_halt' commands"
29 This option enables two commands used for secure booting:
31 esbc_validate - validate signature using RSA verification
32 esbc_halt - put the core in spin loop (Secure Boot Only)
37 config ESBC_ADDR_64BIT
39 depends on ESBC_HDR_LS && FSL_LAYERSCAPE
41 For Layerscape based platforms, ESBC image Address in Header is 64bit.
45 depends on PPC || FSL_LSCH2 || ARCH_LS1021A
49 depends on !SYS_FSL_SFP_BE
52 prompt "SFP IP revision"
53 default SYS_FSL_SFP_VER_3_0 if PPC
54 default SYS_FSL_SFP_VER_3_4
56 config SYS_FSL_SFP_VER_3_0
57 bool "SFP version 3.0"
59 config SYS_FSL_SFP_VER_3_2
60 bool "SFP version 3.2"
62 config SYS_FSL_SFP_VER_3_4
63 bool "SFP version 3.4"
67 config SPL_UBOOT_KEY_HASH
68 string "Non-SRK key hash for U-Boot public/private key pair"
72 Set the key hash for U-Boot here if public/private key pair used to
73 sign U-boot are different from the SRK hash put in the fuse. Example
75 41066b564c6ffcef40ccbc1e0a5d0d519604000c785d97bbefd25e4d288d1c8b.
76 Otherwise leave this empty.
80 config BOOTSCRIPT_COPY_RAM
81 bool "Secure boot copies boot script to RAM"
83 On systems that support chain of trust booting, a number of addresses
84 are required to set variables that are used in the copying and then
85 verification of different parts of the system. If enabled, the subsequent
86 options are for what location to use in each step.
89 hex "Address in RAM for bs_device"
90 depends on BOOTSCRIPT_COPY_RAM
93 hex "The size of bs_size which is the amount read from bs_device"
94 depends on BOOTSCRIPT_COPY_RAM
97 hex "Address in RAM for bs_ram"
98 depends on BOOTSCRIPT_COPY_RAM
100 config BS_HDR_ADDR_DEVICE
101 hex "Address in RAM for bs_hdr_device"
102 depends on BOOTSCRIPT_COPY_RAM
105 hex "The size of bs_hdr_size which is the amount read from bs_hdr_device"
106 depends on BOOTSCRIPT_COPY_RAM
108 config BS_HDR_ADDR_RAM
109 hex "Address in RAM for bs_hdr_ram"
110 depends on BOOTSCRIPT_COPY_RAM
112 config BOOTSCRIPT_HDR_ADDR
113 hex "CONFIG_BOOTSCRIPT_HDR_ADDR"
114 default BS_ADDR_RAM if BOOTSCRIPT_COPY_RAM
118 config SYS_FSL_SRK_LE
122 config KEY_REVOCATION
127 comment "Other functionality shared between NXP SoCs"
130 bool "Enable SoC deep sleep feature"
131 depends on ARCH_T1024 || ARCH_T1040 || ARCH_T1042 || ARCH_LS1021A
134 Indicates this SoC supports deep sleep feature. If deep sleep is
135 supported, core will start to execute uboot when wakes up.
137 config LAYERSCAPE_NS_ACCESS
138 bool "Layerscape non-secure access support"
139 depends on ARCH_LS1021A || FSL_LSCH2
142 bool "PCIe controller #1"
143 depends on LAYERSCAPE_NS_ACCESS || PPC
146 bool "PCIe controller #2"
147 depends on LAYERSCAPE_NS_ACCESS || PPC
150 bool "PCIe controller #3"
151 depends on LAYERSCAPE_NS_ACCESS || PPC
154 bool "PCIe controller #4"
155 depends on LAYERSCAPE_NS_ACCESS || PPC
157 config FSL_USE_PCA9547_MUX
158 bool "Enable PCA9547 I2C Mux on Freescale boards"
159 depends on PPC || ARCH_LS1021A || FSL_LSCH2 || FSL_LSCH3
161 This option enables the PCA9547 I2C mux on Freescale boards.
164 bool "Enable Freescale VID"
165 depends on (PPC || ARCH_LS1021A || FSL_LSCH2 || FSL_LSCH3) && (I2C || DM_I2C)
167 This option enables setting core voltage based on individual
168 values saved in SoC fuses.
171 bool "Enable Freescale VID in SPL"
172 depends on (PPC || ARCH_LS1021A || FSL_LSCH2 || FSL_LSCH3) && (SPL_I2C || DM_SPL_I2C)
174 This option enables setting core voltage based on individual
175 values saved in SoC fuses, in SPL.
180 string "Environment variable for overriding VDD"
182 This option allows for specifying the environment variable
183 to check to override VDD information.
185 config VOL_MONITOR_INA220
186 bool "Enable the INA220 voltage monitor read"
188 This option enables INA220 voltage monitor read
189 functionality. It is used by the common VID driver.
191 config VOL_MONITOR_IR36021_READ
192 bool "Enable the IR36021 voltage monitor read"
194 This option enables IR36021 voltage monitor read
195 functionality. It is used by the common VID driver.
197 config VOL_MONITOR_IR36021_SET
198 bool "Enable the IR36021 voltage monitor set"
200 This option enables IR36021 voltage monitor set
201 functionality. It is used by the common VID driver.
203 config VOL_MONITOR_LTC3882_READ
204 bool "Enable the LTC3882 voltage monitor read"
206 This option enables LTC3882 voltage monitor read
207 functionality. It is used by the common VID driver.
209 config VOL_MONITOR_LTC3882_SET
210 bool "Enable the LTC3882 voltage monitor set"
212 This option enables LTC3882 voltage monitor set
213 functionality. It is used by the common VID driver.
215 config VOL_MONITOR_ISL68233_READ
216 bool "Enable the ISL68233 voltage monitor read"
218 This option enables ISL68233 voltage monitor read
219 functionality. It is used by the common VID driver.
221 config VOL_MONITOR_ISL68233_SET
222 bool "Enable the ISL68233 voltage monitor set"
224 This option enables ISL68233 voltage monitor set
225 functionality. It is used by the common VID driver.
230 bool "Enable QIXIS support"
231 depends on PPC || ARCH_LS1021A || FSL_LSCH2 || FSL_LSCH3
233 config QIXIS_I2C_ACCESS
234 bool "Access to QIXIS is over i2c"
238 config HAS_FSL_DR_USB
240 depends on USB_EHCI_HCD && PPC