Falcon mode was disabled for TI_SECURE_DEVICE at commit e95b9b4437bc ("ti_armv7_common: Disable Falcon Mode on HS devices") for older 32-bit HS devices and can be enabled on K3 devices.
For secure boot, the kernel with x509 headers can be packaged in a fit container (fitImage) signed with TIFS keys for authentication. Signed-off-by: Anshul Dalal <ansh...@ti.com> --- common/spl/Kconfig | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/common/spl/Kconfig b/common/spl/Kconfig index 7e87e50f693..4f817fd31c5 100644 --- a/common/spl/Kconfig +++ b/common/spl/Kconfig @@ -1201,7 +1201,8 @@ config SPL_ONENAND_SUPPORT config SPL_OS_BOOT bool "Activate Falcon Mode" - depends on !TI_SECURE_DEVICE + depends on !TI_SECURE_DEVICE_K2_OMAP2PLUS + select SPL_OS_BOOT_SECURE if TI_SECURE_DEVICE_K3 help Enable booting directly to an OS from SPL. for more info read doc/README.falcon -- 2.51.0