On 2026-09-22T05:18:35, Heiko Schocher <[email protected]> wrote:
> binman: nxp_imx8mcst: allow selecting the SRK table index
>
> The SRK table installed by HAB holds up to four keys, and the CSF
> "Install SRK" section picks one of them via "Source index".
>
> The configuration template hard codes index 0, so an image that has to be
> verified against any other key of the table cannot be generated. That is
> the normal situation once a key has been revoked and the next one of the
> table is put to use.
>
> So make the index configurable the same way as the other properties of
> this etype. Add an "nxp,srk-index" device tree property, overridable by
> the SRK_INDEX environment variable, defaulting to the previous value 0.
>
> Signed-off-by: Stefan Bigler <[email protected]>
> Signed-off-by: Heiko Schocher <[email protected]>
>
> doc/imx/habv4/guides/mx8m_spl_secure_boot.txt      |  2 ++
>  tools/binman/etype/nxp_imx8mcst.py                 |  4 ++++
>  tools/binman/ftest.py                              | 20 ++++++++++++++++
>  .../binman/test/vendor/nxp_imx8_csf_srk_index.dts  | 27 
> ++++++++++++++++++++++
>  4 files changed, 53 insertions(+)

Reviewed-by: Simon Glass <[email protected]>

Reply via email to