Lines Matching +full:arm +full:- +full:openssl
6 - Image Authentication, described in :ref:`Trusted Board Boot`, and
7 - Firmware Update, described in :ref:`Firmware Update (FWU)`
14 is important to use a version that is compatible with TF-A and fixes any
25 license. Using mbed TLS source code will affect the licensing of TF-A
29 while invoking ``make`` to build TF-A:
31 - ``MBEDTLS_DIR=<path of the directory containing mbed TLS sources>``
32 - ``TRUSTED_BOARD_BOOT=1``
33 - ``GENERATE_COT=1``
35 By default, this will use the Chain of Trust described in the TBBR-client
38 If using a custom build of OpenSSL, set the ``OPENSSL_DIR`` variable
39 accordingly so it points at the OpenSSL installation path, as explained in
41 when running to point at the custom OpenSSL path, so the OpenSSL libraries
45 In the case of Arm platforms, the location of the ROTPK must also be
49 - ``ARM_ROTPK_LOCATION=regs``: the ROTPK hash is obtained from the Trusted
50 root-key storage registers present in the platform. On Juno, these
51 registers are read-only. On FVP Base and Cortex models, the registers
52 are also read-only, but the value can be specified using the command line
54 On Juno board, the default value corresponds to an ECDSA-SECP256R1 public
57 - ``ARM_ROTPK_LOCATION=devel_rsa``: use the default hash located in
58 ``plat/arm/board/common/rotpk/arm_rotpk_rsa_sha256.bin``. Enforce
61 - ``ARM_ROTPK_LOCATION=devel_ecdsa``: use the default hash located in
62 ``plat/arm/board/common/rotpk/arm_rotpk_ecdsa_sha256.bin``. Enforce
65 - ``ARM_ROTPK_LOCATION=devel_full_dev_rsa_key``: use the key located in
66 ``plat/arm/board/common/rotpk/arm_full_dev_rsa_rotpk.S``.
75 ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem \
76 BL33=<path-to>/<bl33_image> OPENSSL_DIR=<path-to>/<openssl> \
84 Non-Volatile storage during the :ref:`Firmware Update (FWU)` process. To build the
86 command line. On Arm development platforms like Juno, these are:
88 - NS_BL2U. The AP non-secure Firmware Updater image.
89 - SCP_BL2U. The SCP Firmware Update Configuration image.
99 ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem \
100 BL33=<path-to>/<bl33_image> OPENSSL_DIR=<path-to>/<openssl> \
101 SCP_BL2=<path-to>/<scp_bl2_image> \
102 SCP_BL2U=<path-to>/<scp_bl2u_image> \
103 NS_BL2U=<path-to>/<ns_bl2u_image> \
108 The user may override this by adding ``BL2U=<path-to>/<bl2u_image>``
112 Building and installing the non-secure and SCP FWU images (NS_BL1U,
120 --------------
122 *Copyright (c) 2019-2022, Arm Limited. All rights reserved.*