docs/getting_started/build-options.rst

67 -  ``BL2_RUNS_AT_EL3``: This is an implicit flag to denote that BL2 runs at EL3.
201    context. This flag can take values 0 to 2, to align with the
207    switch. Automatically enabled when ``BRANCH_PROTECTION`` is enabled. This flag
212    of the value of this flag if the CPU supports it. Alternatively, when
213    ``BRANCH_PROTECTION`` is enabled, this flag is superseded.
225 -  ``DECRYPTION_SUPPORT``: This build flag enables the user to select the
228    this flag is ``none`` to disable firmware decryption which is an optional
237    This flag can take values 0 to 2, to align with the ``ENABLE_FEAT``
242    for development platforms. ``TRUSTED_BOARD_BOOT`` flag must be set if this
243    flag has to be enabled. 0 is the default.
255    use the non-EARLY traces macros if the flag is enabled, or do nothing
288    extensions. This flag can take the values 0 to 2, to align with the
292    This flag can take the values 0 to 2, the default is 0.
296    onwards. This flag can take the values 0 to 2, to align with the
304     This flag can take the values of 0 to 2, to align with the ``ENABLE_FEAT`` mechanism.
310    an optional feature starting from Arm v9.4 and This flag can take values 0 to
316    optional feature available on Arm v8.0 onwards. This flag can take values
324    The flag can take values 0 to 2, to align with the ``ENABLE_FEAT``
330    from v8.8. This flag can take the values of 0 to 2, to align with the
336    and upwards. This flag can take the values 0 to 2, to align  with the
343    This flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
349    feature from v9.2 and upwards. This flag can take value of 0 to 2, to align
356    This flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
363    This flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
372    Armv9.4 onwards. This flag can take values from 0 to 2, aligning with
387    flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
394    cache ID register during their boot stage. This flag can take the
409    EL3 should configure the EL2 registers. This flag
415    This flag can take values 0 to 2, to align with the ``ENABLE_FEAT``
423    flag can take values 0 to 2, to align  with the ``ENABLE_FEAT``
429    ``BRANCH_PROTECTION`` flag. This flag can take the values 0 to 2, to align
434    flag can take the values 0 to 2, to align with the ``ENABLE_FEAT``
438    extension. This feature is only supported in AArch64 state. This flag can
451    This flag can take values 0 to 2, to align with the ``ENABLE_FEAT``
456    available on Arm v8.6. This flag can take values 0 to 2, to align with the
473    flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
477    at EL2 and below, and context switch relevant registers.  This flag
482    at EL2 and below, and context switch relevant registers.  This flag
487    at EL2 and below, and context switch relevant registers.  This flag
492    at EL2 and below, and context switch relevant registers.  This flag
498    registers to the EL2 context save/restore operations. This flag can take
512    This flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
520    This flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
529    This flag can take the values 0 to 2, to align  with the ``ENABLE_FEAT``
537    and mandatory from v9.6. This flag can take value of 0 to 2,
553    This flag can take values 0 to 2, to align  with the ``ENABLE_FEAT``
559    The flag is automatically disabled when the target
564    ``INIT_UNUSED_NS_EL2`` = 1). The flag accepts values from 0 to 2, in
568    restore the ACCDATA_EL1 system register, at EL2 and below. This flag can
573    registers from non-secure world. This flag can take the values 0 to 2, to
578    registers from non-secure world. This flag can take the values 0 to 2, to
610    This flag can take the values 0 to 2, to align with the ``ENABLE_FEAT``
616    for AArch64. This flag can take the values 0 to 2, to align with the
633       This build flag requires ``ENABLE_SVE_FOR_NS`` to be enabled. When enabling
650 -  ``ENCRYPT_BL31``: Binary flag to enable encryption of BL31 firmware. This
651    flag depends on ``DECRYPTION_SUPPORT`` build flag.
653 -  ``ENCRYPT_BL32``: Binary flag to enable encryption of Secure BL32 payload.
654    This flag depends on ``DECRYPTION_SUPPORT`` build flag.
657    either be SSK or BSSK depending on ``FW_ENC_STATUS`` flag. This value depends
658    on ``DECRYPTION_SUPPORT`` build flag.
662    build flag.
666    Firmware as error. It can take the value 1 (flag the use of deprecated
705 -  ``FW_ENC_STATUS``: Top level firmware's encryption numeric flag, values:
714    This flag depends on ``DECRYPTION_SUPPORT`` build flag.
716 -  ``GENERATE_COT``: Boolean flag used to build and execute the ``cert_create``
762    If this flag is disabled while the platform which TF-A is compiled for
779    bottom, higher addresses at the top. This build flag can be set to '1' to
783 -  ``INIT_UNUSED_NS_EL2``: This build flag guards code that disables EL2
784    safely in scenario where NS-EL2 is present but unused. This flag is set to 0
785    by default. Platforms without NS-EL2 in use must enable this flag.
787 -  ``KEY_ALG``: This build flag enables the user to select the algorithm to be
792    compatibility. The default value of this flag is ``rsa`` which is the TBBR
795 -  ``KEY_SIZE``: This build flag enables the user to select the key size for
811 -  ``HASH_ALG``: This build flag enables the user to select the secure hash
813    The default value of this flag is ``sha256``.
836 -  ``MEASURED_BOOT``: Boolean flag to include support for the Measured Boot
837    feature. This flag can be enabled with ``TRUSTED_BOARD_BOOT`` in order to
843 -  ``DISCRETE_TPM``: Boolean flag to include support for a Discrete TPM.
847 -  ``TPM_INTERFACE``: When ``DISCRETE_TPM=1``, this is a required flag to
854 -  ``MBOOT_TPM_HASH_ALG``: Build flag to select the TPM hash algorithm used during
938    formats. This flag if set to 1, configures the generic PSCI layer to use the
939    extended format. The default value of this flag is 0, which means by default
940    the original power-state format is used by the PSCI implementation. This flag
946 -  ``PSCI_OS_INIT_MODE``: Boolean flag to enable support for optional PSCI
949 -  ``ARCH_FEATURE_AVAILABILITY``: Boolean flag to enable support for the
954 -  ``ENABLE_FEAT_RAS``: Boolean flag to enable Armv8.2 RAS features. RAS features
956    or later CPUs. This flag can take the values 0 or 1. The default value is 0.
957    NOTE: This flag enables use of IESB capability to reduce entry latency into
959    flag is recommended to be turned on Armv8.2 and later CPUs.
967    in TF-A. This flag configures SP_MIN entrypoint as the CPU reset vector
1016    pages" section in :ref:`Firmware Design`. This flag is disabled by default
1030    flag is disabled by default and NOLOAD sections are placed in RAM immediately
1095 -  ``SP_MIN_WITH_SECURE_FIQ``: Boolean flag to indicate the SP_MIN handles
1113 -  ``TRUSTED_BOARD_BOOT``: Boolean flag to include support for the Trusted Board
1147 -  ``TS_SP_FW_CONFIG``: DTC build flag to include Trusted Services (Crypto and
1156 -  ``USE_ARM_LINK``: This flag determines whether to enable support for ARM
1158    this flag is enabled automatically. To enable support for armlink, platforms
1162 -  ``USE_COHERENT_MEM``: This flag determines whether to include the coherent
1176 -  ``USE_DSU_DRIVER``: This flag enables DSU (DynamIQ Shared Unit) driver.
1181 -  ``ARM_IO_IN_DTB``: This flag determines whether to use IO based on the
1185 -  ``COT_DESC_IN_DTB``: This flag determines whether to create COT descriptors
1186    at runtime using fconf. If this flag is enabled, COT descriptors are
1192 -  ``SDEI_IN_FCONF``: This flag determines whether to configure SDEI setup in
1196    SDEI_SUPPORT build flag is enabled.
1198 -  ``SEC_INT_DESC_IN_FCONF``: This flag determines whether to configure Group 0
1204 -  ``USE_ROMLIB``: This flag determines whether library at ROM will be used.
1217    regrouped and put in the root Makefile. This flag can take the values 0 to 3,
1263 -  ``ERRATA_SPECULATIVE_AT``: This flag determines whether to enable ``AT``
1265    The default value of this flag is ``0``.
1302 - ``RAS_TRAP_NS_ERR_REC_ACCESS``: This flag enables/disables the SCR_EL3.TERR
1304   This flag is disabled by default.
1317   optional architectural feature for AArch64. This flag can take the values
1324   feature for AArch64. This flag can take the values  0 to 2, to align with the
1334   systems with many cores. This flag can take the values 0 to 2, to align with
1340   ETE(extending ETM feature) is implemented. This flag can take the values
1345   if FEAT_TRF is implemented. This flag can take the values 0 to 2, to align
1346   with the ``ENABLE_FEAT`` mechanism. This flag is disabled by default.
1442 ``-gdwarf-<version>`` flag, with the version being set to 2, 3, 4 or 5. Setting
1466 ``SPIN_ON_BL1_EXIT=1`` build flag. Refer to the :ref:`build_options_common`
1494 -  ``DICE_PROTECTION_ENVIRONMENT``: Boolean flag to specify the measured boot
1501 -  ``DRTM_SUPPORT``: Boolean flag to enable support for Dynamic Root of Trust
1509    Management Extension. This flag can take the values 0 to 2, to align with
1513    Encryption Contexts (MEC). This flag can take the values 0 to 2, to align
1519    realm attestation token signing requests in EL3. This flag can take the
1533    This flag can take the values 0 to 2, to align with the ``ENABLE_FEAT``
1540    accesses will still be trapped. This flag can take the values 0 to 2, to
1551    FF-A v1.2 specification. This flag is disabled by default. This flag
1559    This flag will also enable errata ordering checking for ``DEBUG`` builds.
1572 -  ``LFA_SUPPORT``: Boolean flag to enable support for Live Firmware
1606 -  ``NR_OF_FW_BANKS``: Define the number of firmware banks. This flag is used
1607    in defining the firmware update metadata structure. This flag is by default
1613    This flag is used in defining the firmware update metadata structure. This
1614    flag is by default set to '1'.