diff mbox series

configs: k3: Enable capsule authentication

Message ID 20240607235312.1992500-1-j-humphreys@ti.com
State New
Delegated to: Tom Rini
Headers show
Series configs: k3: Enable capsule authentication | expand

Commit Message

Jonathan Humphreys June 7, 2024, 11:53 p.m. UTC 
Enable EFI capsule authentication and set the capsule public key
certificate file in the base TI K3 EFI Capsule config.

This will enable EFI capsule authentication on all boards that
include the base TI K3 EFI Capsule config file.

This patch is built upon the series enabling EFI capsule TI boards [0] as
well as using capsule certificates directly [1].

[0] https://lore.kernel.org/r/20240607223858.1971290-1-j-humphreys@ti.com
[1] https://lore.kernel.org/r/20240607225915.1985514-1-j-humphreys@ti.com

Signed-off-by: Jonathan Humphreys <j-humphreys@ti.com>
---
 configs/k3_efi_capsule.config | 2 ++
 1 file changed, 2 insertions(+)
diff mbox series

Patch

diff --git a/configs/k3_efi_capsule.config b/configs/k3_efi_capsule.config
index e31cea37269..8f8f63f672e 100644
--- a/configs/k3_efi_capsule.config
+++ b/configs/k3_efi_capsule.config
@@ -1,2 +1,4 @@ 
 CONFIG_EFI_CAPSULE_ON_DISK=y
 CONFIG_EFI_CAPSULE_FIRMWARE_RAW=y
+CONFIG_EFI_CAPSULE_AUTHENTICATE=y
+CONFIG_EFI_CAPSULE_CRT_FILE="arch/arm/mach-k3/keys/custMpk.crt"