Hi Harsimran
On Thu, 17 Sept 2026 at 20:18, Harsimran Singh Tungal
<[email protected]> wrote:
>
> This patch series adds Firmware Update (FWU) support for Arm PSA
> Certified platforms [1], enabling U-Boot to serve as
> the FWU Client, with the Secure World acting as the Update Agent that
> manages the firmware store and its metadata.
Since this is only applicable to Arm devices any chance you can get an
Ack from Sughosh who has worked on the initial implementation ?
Thanks
/Ilias
>
> This implementation adheres to the Platform Security Firmware Update
> specification [3] for the A-profile Arm Architecture and leverages the
> Trusted Services framework [4] to interact with the Secure World update
> agent. By delegating update management to the Secure World, U-Boot
> handles only the client-side coordination, invoking a well-defined set
> of ABIs over the FF-A interface [5] to deliver update capsules.
>
> Key features include:
>
> - Generic, platform-agnostic design.
> - FF-A-based ABI: All interactions between U-Boot and the update agent
> occur over the FF-A interface, ensuring compatibility across
> PSA-compliant systems.
> - Multi-payload capsules: Support for capsules containing multiple
> payloads, start/end markers, signed firmware images.
> - ESRT support: Capsule payloads may be signed for authenticity, and
> U-Boot can populate the EFI System Resource Table (ESRT) for
> OS-level firmware management.
> - On-disk and standard capsule handling.
>
> For implementation details, please refer to the documentation [6].
> Testing logs for standard and on-disk capsule update flows on
> Corstone-1000 FVP are included below.
>
> Changes in v6:
>
> * As suggested by Sughosh:
> - Addressed review feedback by separating Arm PSA FWU from the existing
> normal-world FWU multi-bank implementation.
> - Moved PSA FWU code and Kconfig/Makefile integration from lib/fwu_updates
> to
> lib/efi_loader.
> - Dropped v5 changes to lib/fwu_updates/{Kconfig,Makefile,fwu.c}. PSA FWU no
> longer extends the generic FWU update path.
> - Made CONFIG_FWU_ARM_PSA mutually exclusive with
> CONFIG_FWU_MULTI_BANK_UPDATE.
> - Reworked PSA FWU trial-state and image-acceptance handling to use the
> cached
> PSA FWU directory from Secure world instead of generic FWU metadata.
> - Reworked Corstone-1000 active-index handling to read and validate FWU
> metadata directly for kernel setup.
> * Rebased on master.
>
> Regards,
> Harsimran Singh Tungal
>
> [1]: PSA: https://www.psacertified.org
> [2]: Corstone-1000: https://developer.arm.com/Processors/Corstone-1000
> [3]: DEN0118 v1.0 A specification:
> https://developer.arm.com/documentation/den0118/latest
> [4]: Trusted Services documentation:
> https://trusted-services.readthedocs.io/en/stable
> [5]: FF-A interface: doc/arch/arm64.ffa.rst
> [6]: Documentation of the FWU for Arm PSA support:
> doc/develop/uefi/fwu_arm_psa.rst
> [7]: Arm PSA FWU logs when used for on-disk capsule update in Corstone-1000
>
> Testing:
> The implementation has been tested on Corstone-1000 FVP with both
> standard capsule update and on-disk capsule update flows.
>
> Tested on Corstone-1000 FVP:
> - Standard capsule update: passed
> - On-disk capsule update: passed
> - ESRT entries verified from Linux after update
>
> Testing logs for standard capsule update:
>
> A trimmed standard capsule update log is included below.
>
> ```
> CapsuleApp: capsule block/size 0xDCF56040/0x867B5A
> FWU: Updating 4 payload(s)
> resetting ...
> NOTICE: BL2: v2.14.2(debug):lts-v2.14.2-dirty
> ...
> U-Boot 2026.07 (Sep 08 2026 - 15:59:00 +0000) corstone1000 aarch64
> ...
> FWU: System booting in Trial State
> ...
> Poky (Yocto Project Reference Distro) 5.2 corstone1000-fvp /dev/ttyAMA0
> ...
> root@corstone1000-fvp:~# reboot
> ...
> U-Boot 2026.07 (Sep 08 2026 - 15:59:00 +0000) corstone1000 aarch64
> ...
> FWU: System booting in Regular State
> ...
> Poky (Yocto Project Reference Distro) 5.2 corstone1000-fvp /dev/ttyAMA0
>
> corstone1000-fvp login:
>
> root@corstone1000-fvp:~# cat /sys/firmware/efi/esrt/entries/entry*/*
> 0x0
> f1d883f9-dfeb-5363-98d8-686ee3b69f4f
> 1
> 6
> 0
> 6
> 0
> 0x0
> 7fad470e-5ec5-5c03-a2c1-4756b495de61
> 1
> 6
> 0
> 6
> 0
> 0x0
> f1933675-5a8c-5b6d-9ef4-846739e89bc8
> 1
> 6
> 0
> 6
> 0
> 0x0
> f771aff9-c7e9-5f99-9eda-2369dd694f61
> 1
> 6
> 0
> 6
> 0
>
> root@corstone1000-fvp:~#
> ```
>
> Testing logs for On-Disk capsule update:
>
> A trimmed on-disk capsule update log is included below for one payload
>
> ```
> CapsuleApp: capsule block/size 0xDCF61040/0x867B5A
> Found EFI system partition on Boot0001: OnDiskFWU
> FS2:;HD0b:;BLK4:
> Succeed to write corstone1000-fvp-v6.uefi.capsule
> resetting ...
> NOTICE: BL2: v2.14.2(debug):lts-v2.14.2-dirty
> ...
> U-Boot 2026.07 (Sep 08 2026 - 15:59:00 +0000) corstone1000 aarch64
> ...
> FWU: System booting in Regular State
> FWU: ABI version 1.0 detected
> FWU: Updating 1 payload(s)
> Applying capsule corstone1000-fvp-v6.uefi.capsule succeeded.
> Reboot after firmware update.
> NOTICE: BL2: v2.14.2(debug):lts-v2.14.2-dirty
> ...
> U-Boot 2026.07 (Sep 08 2026 - 15:59:00 +0000) corstone1000 aarch64
> ...
> FWU: System booting in Trial State
> ...
> Poky (Yocto Project Reference Distro) 5.2 corstone1000-fvp /dev/ttyAMA0
> ...
> root@corstone1000-fvp:~# reboot
> ...
> U-Boot 2026.07 (Sep 08 2026 - 15:59:00 +0000) corstone1000 aarch64
> ...
> FWU: System booting in Regular State
> ...
> Poky (Yocto Project Reference Distro) 5.2 corstone1000-fvp /dev/ttyAMA0
>
> corstone1000-fvp login:
>
> root@corstone1000-fvp:~# cat /sys/firmware/efi/esrt/entries/entry*/*
> 0x0
> f1d883f9-dfeb-5363-98d8-686ee3b69f4f
> 0
> 6
> 0
> 6
> 0
> 0x0
> 7fad470e-5ec5-5c03-a2c1-4756b495de61
> 0
> 0
> 0
> 0
> 0
> 0x0
> f1933675-5a8c-5b6d-9ef4-846739e89bc8
> 0
> 0
> 0
> 0
> 0
> 0x0
> f771aff9-c7e9-5f99-9eda-2369dd694f61
> 0
> 0
> 0
> 0
> 0
> root@corstone1000-fvp:~#
> ```
> Link to v5:
> https://lore.kernel.org/all/[email protected]/
>
> Cc: Tom Rini <[email protected]>
> Cc: Simon Glass <[email protected]>
> Cc: Sughosh Ganu <[email protected]>
> Cc: Abdellatif El Khlifi <[email protected]>
> Cc: Heinrich Schuchardt <[email protected]>
> Cc: Ilias Apalodimas <[email protected]>
> Cc: Jens Wiklander <[email protected]>
> Cc: Michal Simek <[email protected]>
> Cc: Marek Vasut <[email protected]>
> Cc: Casey Connolly <[email protected]>
> Cc: Adriano Cordova <[email protected]>
> Cc: Mattijs Korpershoek <[email protected]>
> Cc: Davidson kumaresan <[email protected]>
> Cc: Adam Johnston <[email protected]>
> Cc: Srinivas Kalaga <[email protected]>
> Cc: Alex Chapman <[email protected]>
> Cc: David Hu <[email protected]>
>
> Abdellatif El Khlifi (23):
> arm_ffa: Add FFA_MEM_SHARE support
> arm_ffa: Add FFA_MEM_RECLAIM support
> arm_ffa: sandbox: Replace the emulator error log with debug log
> arm_ffa: sandbox: Improve the readability of clearing the X registers
> arm_ffa: sandbox: Add FFA_MEM_SHARE emulation
> arm_ffa: sandbox: Add FFA_MEM_SHARE tests
> arm_ffa: sandbox: Add FFA_MEM_RECLAIM emulation
> arm_ffa: sandbox: Add FFA_MEM_RECLAIM tests
> fwu_arm_psa: Initialize the update agent
> fwu_arm_psa: Read the FWU directory through get_image_info()
> fwu_arm_psa: Add staging ABIs
> efi_loader: fwu_arm_psa: Add set_image() support
> efi_loader: fwu_arm_psa: Allow keeping the FMP payload header
> efi_loader: fwu_arm_psa: Skip accepting payload after set_image()
> efi_loader: fwu_arm_psa: Disable trial state handling
> fwu_arm_psa: Add FWU acceptance mechanism
> fwu_arm_psa: Add ESRT support
> fwu_arm_psa: Add ExitBootServices() notification handler
> fwu_arm_psa: corstone1000: Enable FWU support
> fwu_arm_psa: corstone1000: Read active index for kernel setup
> fwu_arm_psa: corstone1000: Notify SE Proxy SP on ExitBootServices()
> fwu_arm_psa: corstone1000: Set Boot0001 for on-disk FWU
> fwu_arm_psa: Document FWU support for Arm PSA
>
> Emekcan Aras (1):
> efi_loader: capsule: Add runtime capsule flags checks
>
> MAINTAINERS | 9 +
> .../include/asm/sandbox_arm_ffa_priv.h | 21 +-
> board/armltd/corstone1000/corstone1000.c | 406 ++++-
> board/armltd/corstone1000/corstone1000.env | 8 +
> configs/corstone1000_defconfig | 15 +-
> doc/arch/arm64.ffa.rst | 4 +
> doc/develop/uefi/fwu_arm_psa.rst | 154 ++
> doc/develop/uefi/index.rst | 1 +
> drivers/firmware/arm-ffa/arm-ffa-uclass.c | 285 ++-
> drivers/firmware/arm-ffa/arm-ffa.c | 4 +-
> drivers/firmware/arm-ffa/ffa-emul-uclass.c | 108 +-
> drivers/firmware/arm-ffa/sandbox_ffa.c | 4 +-
> include/arm_ffa.h | 128 +-
> include/arm_ffa_priv.h | 153 +-
> include/efi_api.h | 3 +
> include/efi_loader.h | 3 +
> include/fwu_arm_psa.h | 422 +++++
> lib/efi_loader/Kconfig | 53 +
> lib/efi_loader/Makefile | 1 +
> lib/efi_loader/efi_capsule.c | 45 +-
> lib/efi_loader/efi_firmware.c | 32 +-
> lib/efi_loader/fwu_arm_psa.c | 1616 +++++++++++++++++
> test/dm/ffa.c | 73 +-
> 23 files changed, 3458 insertions(+), 90 deletions(-)
> create mode 100644 doc/develop/uefi/fwu_arm_psa.rst
> create mode 100644 include/fwu_arm_psa.h
> create mode 100644 lib/efi_loader/fwu_arm_psa.c
>
> --
> 2.43.0
>
