From 04943d33cf379868a1dfa3971c2c2250526f0670 Mon Sep 17 00:00:00 2001 From: Soby Mathew Date: Tue, 24 May 2016 15:05:15 +0100 Subject: Allow dynamic overriding of ROTPK verification A production ROM with TBB enabled must have the ability to boot test software before a real ROTPK is deployed (e.g. manufacturing mode). Previously the function plat_get_rotpk_info() must return a valid ROTPK for TBB to succeed. This patch adds an additional bit `ROTPK_NOT_DEPLOYED` in the output `flags` parameter from plat_get_rotpk_info(). If this bit is set, then the ROTPK in certificate is used without verifying against the platform value. Fixes ARM-software/tf-issues#381 Change-Id: Icbbffab6bff8ed76b72431ee21337f550d8fdbbb --- include/plat/common/platform.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'include/plat/common/platform.h') diff --git a/include/plat/common/platform.h b/include/plat/common/platform.h index a08a12e4..390721f2 100644 --- a/include/plat/common/platform.h +++ b/include/plat/common/platform.h @@ -49,6 +49,9 @@ struct image_desc; * plat_get_rotpk_info() flags ******************************************************************************/ #define ROTPK_IS_HASH (1 << 0) +/* Flag used to skip verification of the certificate ROTPK while the platform + ROTPK is not deployed */ +#define ROTPK_NOT_DEPLOYED (1 << 1) /******************************************************************************* * Function declarations -- cgit