1928fa662SLionel Debieve/* 2*b6a95c4aSXialin Liu * Copyright (c) 2020-2024, ARM Limited. All rights reserved. 3928fa662SLionel Debieve * 4928fa662SLionel Debieve * SPDX-License-Identifier: BSD-3-Clause 5928fa662SLionel Debieve */ 6928fa662SLionel Debieve 7928fa662SLionel Debieve#include <common/nv_cntr_ids.h> 8928fa662SLionel Debieve#include <common/tbbr/tbbr_img_def.h> 9928fa662SLionel Debieve#include <tools_share/tbbr_oid.h> 10928fa662SLionel Debieve 11928fa662SLionel Debievecot { 12928fa662SLionel Debieve manifests { 13928fa662SLionel Debieve compatible = "arm, cert-descs"; 14928fa662SLionel Debieve 15928fa662SLionel Debieve stm32mp_cfg_cert: stm32mp_cfg_cert { 16928fa662SLionel Debieve root-certificate; 17928fa662SLionel Debieve image-id = <STM32MP_CONFIG_CERT_ID>; 18*b6a95c4aSXialin Liu antirollback-counter = <&trusted_nv_ctr>; 19928fa662SLionel Debieve 20928fa662SLionel Debieve hw_config_hash: hw_config_hash { 21928fa662SLionel Debieve oid = HW_CONFIG_HASH_OID; 22928fa662SLionel Debieve }; 23928fa662SLionel Debieve 24928fa662SLionel Debieve fw_config_hash: fw_config_hash { 25928fa662SLionel Debieve oid = FW_CONFIG_HASH_OID; 26928fa662SLionel Debieve }; 27928fa662SLionel Debieve }; 28928fa662SLionel Debieve 29928fa662SLionel Debieve trusted_key_cert: trusted_key_cert { 30928fa662SLionel Debieve root-certificate; 31928fa662SLionel Debieve image-id = <TRUSTED_KEY_CERT_ID>; 32*b6a95c4aSXialin Liu antirollback-counter = <&trusted_nv_ctr>; 33928fa662SLionel Debieve 34928fa662SLionel Debieve trusted_world_pk: trusted_world_pk { 35928fa662SLionel Debieve oid = TRUSTED_WORLD_PK_OID; 36928fa662SLionel Debieve }; 37928fa662SLionel Debieve non_trusted_world_pk: non_trusted_world_pk { 38928fa662SLionel Debieve oid = NON_TRUSTED_WORLD_PK_OID; 39928fa662SLionel Debieve }; 40928fa662SLionel Debieve }; 41928fa662SLionel Debieve 42928fa662SLionel Debieve trusted_os_fw_key_cert: trusted_os_fw_key_cert { 43928fa662SLionel Debieve image-id = <TRUSTED_OS_FW_KEY_CERT_ID>; 44928fa662SLionel Debieve parent = <&trusted_key_cert>; 45928fa662SLionel Debieve signing-key = <&trusted_world_pk>; 46*b6a95c4aSXialin Liu antirollback-counter = <&trusted_nv_ctr>; 47928fa662SLionel Debieve 48928fa662SLionel Debieve tos_fw_content_pk: tos_fw_content_pk { 49928fa662SLionel Debieve oid = TRUSTED_OS_FW_CONTENT_CERT_PK_OID; 50928fa662SLionel Debieve }; 51928fa662SLionel Debieve }; 52928fa662SLionel Debieve 53928fa662SLionel Debieve trusted_os_fw_content_cert: trusted_os_fw_content_cert { 54928fa662SLionel Debieve image-id = <TRUSTED_OS_FW_CONTENT_CERT_ID>; 55928fa662SLionel Debieve parent = <&trusted_os_fw_key_cert>; 56928fa662SLionel Debieve signing-key = <&tos_fw_content_pk>; 57*b6a95c4aSXialin Liu antirollback-counter = <&trusted_nv_ctr>; 58928fa662SLionel Debieve 59928fa662SLionel Debieve tos_fw_hash: tos_fw_hash { 60928fa662SLionel Debieve oid = TRUSTED_OS_FW_HASH_OID; 61928fa662SLionel Debieve }; 62928fa662SLionel Debieve tos_fw_extra1_hash: tos_fw_extra1_hash { 63928fa662SLionel Debieve oid = TRUSTED_OS_FW_EXTRA1_HASH_OID; 64928fa662SLionel Debieve }; 65928fa662SLionel Debieve tos_fw_extra2_hash: tos_fw_extra2_hash { 66928fa662SLionel Debieve oid = TRUSTED_OS_FW_EXTRA2_HASH_OID; 67928fa662SLionel Debieve }; 68928fa662SLionel Debieve tos_fw_config_hash: tos_fw_config_hash { 69928fa662SLionel Debieve oid = TRUSTED_OS_FW_CONFIG_HASH_OID; 70928fa662SLionel Debieve }; 71928fa662SLionel Debieve }; 72928fa662SLionel Debieve 73928fa662SLionel Debieve non_trusted_fw_key_cert: non_trusted_fw_key_cert { 74928fa662SLionel Debieve image-id = <NON_TRUSTED_FW_KEY_CERT_ID>; 75928fa662SLionel Debieve parent = <&trusted_key_cert>; 76928fa662SLionel Debieve signing-key = <&non_trusted_world_pk>; 77*b6a95c4aSXialin Liu antirollback-counter = <&non_trusted_nv_ctr>; 78928fa662SLionel Debieve 79928fa662SLionel Debieve nt_fw_content_pk: nt_fw_content_pk { 80928fa662SLionel Debieve oid = NON_TRUSTED_FW_CONTENT_CERT_PK_OID; 81928fa662SLionel Debieve }; 82928fa662SLionel Debieve }; 83928fa662SLionel Debieve 84928fa662SLionel Debieve non_trusted_fw_content_cert: non_trusted_fw_content_cert { 85928fa662SLionel Debieve image-id = <NON_TRUSTED_FW_CONTENT_CERT_ID>; 86928fa662SLionel Debieve parent = <&non_trusted_fw_key_cert>; 87928fa662SLionel Debieve signing-key = <&nt_fw_content_pk>; 88*b6a95c4aSXialin Liu antirollback-counter = <&non_trusted_nv_ctr>; 89928fa662SLionel Debieve 90928fa662SLionel Debieve nt_world_bl_hash: nt_world_bl_hash { 91928fa662SLionel Debieve oid = NON_TRUSTED_WORLD_BOOTLOADER_HASH_OID; 92928fa662SLionel Debieve }; 93928fa662SLionel Debieve }; 94928fa662SLionel Debieve }; 95928fa662SLionel Debieve 96928fa662SLionel Debieve images { 97928fa662SLionel Debieve compatible = "arm, img-descs"; 98928fa662SLionel Debieve 99928fa662SLionel Debieve hw_config { 100928fa662SLionel Debieve image-id = <HW_CONFIG_ID>; 101928fa662SLionel Debieve parent = <&stm32mp_cfg_cert>; 102928fa662SLionel Debieve hash = <&hw_config_hash>; 103928fa662SLionel Debieve }; 104928fa662SLionel Debieve 105928fa662SLionel Debieve fw_config { 106928fa662SLionel Debieve image-id = <FW_CONFIG_ID>; 107928fa662SLionel Debieve parent = <&stm32mp_cfg_cert>; 108928fa662SLionel Debieve hash = <&fw_config_hash>; 109928fa662SLionel Debieve }; 110928fa662SLionel Debieve 111928fa662SLionel Debieve bl32_image { 112928fa662SLionel Debieve image-id = <BL32_IMAGE_ID>; 113928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 114928fa662SLionel Debieve hash = <&tos_fw_hash>; 115928fa662SLionel Debieve }; 116928fa662SLionel Debieve 117928fa662SLionel Debieve bl32_extra1_image { 118928fa662SLionel Debieve image-id = <BL32_EXTRA1_IMAGE_ID>; 119928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 120928fa662SLionel Debieve hash = <&tos_fw_extra1_hash>; 121928fa662SLionel Debieve }; 122928fa662SLionel Debieve 123928fa662SLionel Debieve bl32_extra2_image { 124928fa662SLionel Debieve image-id = <BL32_EXTRA2_IMAGE_ID>; 125928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 126928fa662SLionel Debieve hash = <&tos_fw_extra2_hash>; 127928fa662SLionel Debieve }; 128928fa662SLionel Debieve 129928fa662SLionel Debieve tos_fw_config { 130928fa662SLionel Debieve image-id = <TOS_FW_CONFIG_ID>; 131928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 132928fa662SLionel Debieve hash = <&tos_fw_config_hash>; 133928fa662SLionel Debieve }; 134928fa662SLionel Debieve 135928fa662SLionel Debieve bl33_image { 136928fa662SLionel Debieve image-id = <BL33_IMAGE_ID>; 137928fa662SLionel Debieve parent = <&non_trusted_fw_content_cert>; 138928fa662SLionel Debieve hash = <&nt_world_bl_hash>; 139928fa662SLionel Debieve }; 140928fa662SLionel Debieve }; 141928fa662SLionel Debieve}; 142928fa662SLionel Debieve 143928fa662SLionel Debievenon_volatile_counters: non_volatile_counters { 144928fa662SLionel Debieve #address-cells = <1>; 145928fa662SLionel Debieve #size-cells = <0>; 146928fa662SLionel Debieve 147*b6a95c4aSXialin Liu trusted_nv_ctr: trusted_nv_ctr { 148928fa662SLionel Debieve id = <TRUSTED_NV_CTR_ID>; 149928fa662SLionel Debieve oid = TRUSTED_FW_NVCOUNTER_OID; 150928fa662SLionel Debieve }; 151928fa662SLionel Debieve 152*b6a95c4aSXialin Liu non_trusted_nv_ctr: non_trusted_nv_ctr { 153928fa662SLionel Debieve id = <NON_TRUSTED_NV_CTR_ID>; 154928fa662SLionel Debieve oid = NON_TRUSTED_FW_NVCOUNTER_OID; 155928fa662SLionel Debieve }; 156928fa662SLionel Debieve}; 157