efi_loader: add some description about UEFI secure boot
[oweals/u-boot.git] / arch / arm / mach-stm32mp / Kconfig
1 if ARCH_STM32MP
2
3 config SPL
4         select SPL_BOARD_INIT
5         select SPL_CLK
6         select SPL_DM
7         select SPL_DM_SEQ_ALIAS
8         select SPL_DRIVERS_MISC_SUPPORT
9         select SPL_FRAMEWORK
10         select SPL_GPIO_SUPPORT
11         select SPL_LIBCOMMON_SUPPORT
12         select SPL_LIBGENERIC_SUPPORT
13         select SPL_OF_CONTROL
14         select SPL_OF_TRANSLATE
15         select SPL_PINCTRL
16         select SPL_REGMAP
17         select SPL_DM_RESET
18         select SPL_SERIAL_SUPPORT
19         select SPL_SPI_LOAD
20         select SPL_SYSCON
21         select SPL_WATCHDOG_SUPPORT if WATCHDOG
22         imply BOOTSTAGE_STASH if SPL_BOOTSTAGE
23         imply SPL_BOOTSTAGE if BOOTSTAGE
24         imply SPL_DISPLAY_PRINT
25         imply SPL_LIBDISK_SUPPORT
26
27 config SYS_SOC
28         default "stm32mp"
29
30 config SYS_MALLOC_LEN
31         default 0x2000000
32
33 config ENV_SIZE
34         default 0x2000
35
36 config STM32MP15x
37         bool "Support STMicroelectronics STM32MP15x Soc"
38         select ARCH_SUPPORT_PSCI if !STM32MP1_TRUSTED
39         select CPU_V7A
40         select CPU_V7_HAS_NONSEC if !STM32MP1_TRUSTED
41         select CPU_V7_HAS_VIRT
42         select OF_BOARD_SETUP
43         select PINCTRL_STM32
44         select STM32_RCC
45         select STM32_RESET
46         select STM32_SERIAL
47         select SYS_ARCH_TIMER
48         imply SYSRESET_PSCI if STM32MP1_TRUSTED
49         imply SYSRESET_SYSCON if !STM32MP1_TRUSTED
50         help
51                 support of STMicroelectronics SOC STM32MP15x family
52                 STM32MP157, STM32MP153 or STM32MP151
53                 STMicroelectronics MPU with core ARMv7
54                 dual core A7 for STM32MP157/3, monocore for STM32MP151
55                 target all the STMicroelectronics board with SOC STM32MP1 family
56
57 choice
58         prompt "STM32MP15x board select"
59         optional
60
61 config TARGET_ST_STM32MP15x
62         bool "STMicroelectronics STM32MP15x boards"
63         select STM32MP15x
64         imply BOOTCOUNT_LIMIT
65         imply CMD_BOOTCOUNT
66         imply CMD_CLS if CMD_BMP
67         imply DISABLE_CONSOLE
68         imply PRE_CONSOLE_BUFFER
69         imply SILENT_CONSOLE
70         help
71                 target the STMicroelectronics board with SOC STM32MP15x
72                 managed by board/st/stm32mp1:
73                 Evalulation board (EV1) or Discovery board (DK1 and DK2).
74                 The difference between board are managed with devicetree
75
76 config TARGET_DH_STM32MP1_PDK2
77         bool "DH STM32MP1 PDK2"
78         select STM32MP15x
79         imply BOOTCOUNT_LIMIT
80         imply CMD_BOOTCOUNT
81         help
82                 Target the DH PDK2 development kit with STM32MP15x SoM.
83
84 endchoice
85
86 config STM32MP1_TRUSTED
87         bool "Support trusted boot with TF-A"
88         default y if !SPL
89         select ARM_SMCCC
90         help
91                 Say Y here to enable boot with TF-A
92                 Trusted boot chain is :
93                 BootRom => TF-A.stm32 (clock & DDR) => U-Boot.stm32
94                 TF-A monitor provides proprietary SMC to manage secure devices
95
96 config STM32MP1_OPTEE
97         bool "Support trusted boot with TF-A and OP-TEE"
98         depends on STM32MP1_TRUSTED
99         default n
100         help
101                 Say Y here to enable boot with TF-A and OP-TEE
102                 Trusted boot chain is :
103                 BootRom => TF-A.stm32 (clock & DDR) => OP-TEE => U-Boot.stm32
104                 OP-TEE monitor provides ST SMC to access to secure resources
105
106 config SYS_TEXT_BASE
107         default 0xC0100000
108
109 config NR_DRAM_BANKS
110         default 1
111
112 config SYS_MMCSD_RAW_MODE_U_BOOT_PARTITION_MMC2
113         hex "Partition on MMC2 to use to load U-Boot from"
114         depends on SYS_MMCSD_RAW_MODE_U_BOOT_USE_PARTITION
115         default 1
116         help
117           Partition on the second MMC to load U-Boot from when the MMC is being
118           used in raw mode
119
120 config STM32_ETZPC
121         bool "STM32 Extended TrustZone Protection"
122         depends on STM32MP15x
123         default y
124         help
125           Say y to enable STM32 Extended TrustZone Protection
126
127 config CMD_STM32KEY
128         bool "command stm32key to fuse public key hash"
129         default y
130         depends on CMD_FUSE
131         help
132                 fuse public key hash in corresponding fuse used to authenticate
133                 binary.
134
135
136 config PRE_CON_BUF_ADDR
137         default 0xC02FF000
138
139 config PRE_CON_BUF_SZ
140         default 4096
141
142 config BOOTSTAGE_STASH_ADDR
143         default 0xC3000000
144
145 if BOOTCOUNT_LIMIT
146 config SYS_BOOTCOUNT_SINGLEWORD
147         default y
148
149 # TAMP_BOOTCOUNT = TAMP_BACKUP_REGISTER(21)
150 config SYS_BOOTCOUNT_ADDR
151         default 0x5C00A154
152 endif
153
154 if DEBUG_UART
155
156 config DEBUG_UART_BOARD_INIT
157         default y
158
159 # debug on UART4 by default
160 config DEBUG_UART_BASE
161         default 0x40010000
162
163 # clock source is HSI on reset
164 config DEBUG_UART_CLOCK
165         default 64000000
166 endif
167
168 source "board/st/stm32mp1/Kconfig"
169 source "board/dhelectronics/dh_stm32mp1/Kconfig"
170
171 endif