efi_loader: Implement EFI variable handling via OP-TEE

[oweals/u-boot.git] / lib / efi_loader / Kconfig

diff --git a/lib/efi_loader/Kconfig b/lib/efi_loader/Kconfig
index 1cfa24ffcf727eed1e7aa9bb9794f916423541cf..aad37b715505e3713378d8e8d77cd4f8c009c9e0 100644 (file)
--- a/lib/efi_loader/Kconfig
+++ b/lib/efi_loader/Kconfig
@@ -164,4 +164,13 @@ config EFI_SECURE_BOOT
          it is signed with a trusted key. To do that, you need to install,
          at least, PK, KEK and db.
 
+config EFI_MM_COMM_TEE
+       bool "UEFI variables storage service via OP-TEE"
+       depends on OPTEE
+       default n
+       help
+         If OP-TEE is present and running StandAloneMM, dispatch all UEFI variable
+         related operations to that. The application will verify, authenticate and
+         store the variables on an RPMB.
+
 endif