mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-05-08 18:41:22 +00:00
feat(tc): add DPE backend to the measured boot framework
The client platform relies on the DICE attestation scheme. RSS provides the DICE Protection Environment (DPE) service. TF-A measured boot framework supports multiple backends. A given platform always enables the corresponding backend which is required by the attestation scheme. Signed-off-by: Tamas Ban <tamas.ban@arm.com> Change-Id: Idc3360d0d7216e4859e99b5db3d377407e0aeee5
This commit is contained in:
parent
2b53106a0e
commit
e7f1181f8a
8 changed files with 327 additions and 19 deletions
|
@ -706,6 +706,13 @@ Common build options
|
|||
|
||||
This option defaults to 0.
|
||||
|
||||
- ``DICE_PROTECTION_ENVIRONMENT``: Boolean flag to specify the measured boot
|
||||
backend when ``MEASURED_BOOT`` is enabled. The default value is ``0``. When
|
||||
set to ``1`` then measurements and additional metadata collected during the
|
||||
measured boot process are sent to the DICE Protection Environment for storage
|
||||
and processing. A certificate chain, which represents the boot state of the
|
||||
device, can be queried from the DPE.
|
||||
|
||||
- ``MARCH_DIRECTIVE``: used to pass a -march option from the platform build
|
||||
options to the compiler. An example usage:
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue