1*928fa662SLionel Debieve/* 2*928fa662SLionel Debieve * Copyright (c) 2020-2022, ARM Limited. All rights reserved. 3*928fa662SLionel Debieve * 4*928fa662SLionel Debieve * SPDX-License-Identifier: BSD-3-Clause 5*928fa662SLionel Debieve */ 6*928fa662SLionel Debieve 7*928fa662SLionel Debieve#include <common/nv_cntr_ids.h> 8*928fa662SLionel Debieve#include <common/tbbr/tbbr_img_def.h> 9*928fa662SLionel Debieve#include <tools_share/tbbr_oid.h> 10*928fa662SLionel Debieve 11*928fa662SLionel Debievecot { 12*928fa662SLionel Debieve manifests { 13*928fa662SLionel Debieve compatible = "arm, cert-descs"; 14*928fa662SLionel Debieve 15*928fa662SLionel Debieve stm32mp_cfg_cert: stm32mp_cfg_cert { 16*928fa662SLionel Debieve root-certificate; 17*928fa662SLionel Debieve image-id = <STM32MP_CONFIG_CERT_ID>; 18*928fa662SLionel Debieve antirollback-counter = <&trusted_nv_counter>; 19*928fa662SLionel Debieve 20*928fa662SLionel Debieve hw_config_hash: hw_config_hash { 21*928fa662SLionel Debieve oid = HW_CONFIG_HASH_OID; 22*928fa662SLionel Debieve }; 23*928fa662SLionel Debieve 24*928fa662SLionel Debieve fw_config_hash: fw_config_hash { 25*928fa662SLionel Debieve oid = FW_CONFIG_HASH_OID; 26*928fa662SLionel Debieve }; 27*928fa662SLionel Debieve }; 28*928fa662SLionel Debieve 29*928fa662SLionel Debieve trusted_key_cert: trusted_key_cert { 30*928fa662SLionel Debieve root-certificate; 31*928fa662SLionel Debieve image-id = <TRUSTED_KEY_CERT_ID>; 32*928fa662SLionel Debieve antirollback-counter = <&trusted_nv_counter>; 33*928fa662SLionel Debieve 34*928fa662SLionel Debieve trusted_world_pk: trusted_world_pk { 35*928fa662SLionel Debieve oid = TRUSTED_WORLD_PK_OID; 36*928fa662SLionel Debieve }; 37*928fa662SLionel Debieve non_trusted_world_pk: non_trusted_world_pk { 38*928fa662SLionel Debieve oid = NON_TRUSTED_WORLD_PK_OID; 39*928fa662SLionel Debieve }; 40*928fa662SLionel Debieve }; 41*928fa662SLionel Debieve 42*928fa662SLionel Debieve trusted_os_fw_key_cert: trusted_os_fw_key_cert { 43*928fa662SLionel Debieve image-id = <TRUSTED_OS_FW_KEY_CERT_ID>; 44*928fa662SLionel Debieve parent = <&trusted_key_cert>; 45*928fa662SLionel Debieve signing-key = <&trusted_world_pk>; 46*928fa662SLionel Debieve antirollback-counter = <&trusted_nv_counter>; 47*928fa662SLionel Debieve 48*928fa662SLionel Debieve tos_fw_content_pk: tos_fw_content_pk { 49*928fa662SLionel Debieve oid = TRUSTED_OS_FW_CONTENT_CERT_PK_OID; 50*928fa662SLionel Debieve }; 51*928fa662SLionel Debieve }; 52*928fa662SLionel Debieve 53*928fa662SLionel Debieve trusted_os_fw_content_cert: trusted_os_fw_content_cert { 54*928fa662SLionel Debieve image-id = <TRUSTED_OS_FW_CONTENT_CERT_ID>; 55*928fa662SLionel Debieve parent = <&trusted_os_fw_key_cert>; 56*928fa662SLionel Debieve signing-key = <&tos_fw_content_pk>; 57*928fa662SLionel Debieve antirollback-counter = <&trusted_nv_counter>; 58*928fa662SLionel Debieve 59*928fa662SLionel Debieve tos_fw_hash: tos_fw_hash { 60*928fa662SLionel Debieve oid = TRUSTED_OS_FW_HASH_OID; 61*928fa662SLionel Debieve }; 62*928fa662SLionel Debieve tos_fw_extra1_hash: tos_fw_extra1_hash { 63*928fa662SLionel Debieve oid = TRUSTED_OS_FW_EXTRA1_HASH_OID; 64*928fa662SLionel Debieve }; 65*928fa662SLionel Debieve tos_fw_extra2_hash: tos_fw_extra2_hash { 66*928fa662SLionel Debieve oid = TRUSTED_OS_FW_EXTRA2_HASH_OID; 67*928fa662SLionel Debieve }; 68*928fa662SLionel Debieve tos_fw_config_hash: tos_fw_config_hash { 69*928fa662SLionel Debieve oid = TRUSTED_OS_FW_CONFIG_HASH_OID; 70*928fa662SLionel Debieve }; 71*928fa662SLionel Debieve }; 72*928fa662SLionel Debieve 73*928fa662SLionel Debieve non_trusted_fw_key_cert: non_trusted_fw_key_cert { 74*928fa662SLionel Debieve image-id = <NON_TRUSTED_FW_KEY_CERT_ID>; 75*928fa662SLionel Debieve parent = <&trusted_key_cert>; 76*928fa662SLionel Debieve signing-key = <&non_trusted_world_pk>; 77*928fa662SLionel Debieve antirollback-counter = <&non_trusted_nv_counter>; 78*928fa662SLionel Debieve 79*928fa662SLionel Debieve nt_fw_content_pk: nt_fw_content_pk { 80*928fa662SLionel Debieve oid = NON_TRUSTED_FW_CONTENT_CERT_PK_OID; 81*928fa662SLionel Debieve }; 82*928fa662SLionel Debieve }; 83*928fa662SLionel Debieve 84*928fa662SLionel Debieve non_trusted_fw_content_cert: non_trusted_fw_content_cert { 85*928fa662SLionel Debieve image-id = <NON_TRUSTED_FW_CONTENT_CERT_ID>; 86*928fa662SLionel Debieve parent = <&non_trusted_fw_key_cert>; 87*928fa662SLionel Debieve signing-key = <&nt_fw_content_pk>; 88*928fa662SLionel Debieve antirollback-counter = <&non_trusted_nv_counter>; 89*928fa662SLionel Debieve 90*928fa662SLionel Debieve nt_world_bl_hash: nt_world_bl_hash { 91*928fa662SLionel Debieve oid = NON_TRUSTED_WORLD_BOOTLOADER_HASH_OID; 92*928fa662SLionel Debieve }; 93*928fa662SLionel Debieve }; 94*928fa662SLionel Debieve }; 95*928fa662SLionel Debieve 96*928fa662SLionel Debieve images { 97*928fa662SLionel Debieve compatible = "arm, img-descs"; 98*928fa662SLionel Debieve 99*928fa662SLionel Debieve hw_config { 100*928fa662SLionel Debieve image-id = <HW_CONFIG_ID>; 101*928fa662SLionel Debieve parent = <&stm32mp_cfg_cert>; 102*928fa662SLionel Debieve hash = <&hw_config_hash>; 103*928fa662SLionel Debieve }; 104*928fa662SLionel Debieve 105*928fa662SLionel Debieve fw_config { 106*928fa662SLionel Debieve image-id = <FW_CONFIG_ID>; 107*928fa662SLionel Debieve parent = <&stm32mp_cfg_cert>; 108*928fa662SLionel Debieve hash = <&fw_config_hash>; 109*928fa662SLionel Debieve }; 110*928fa662SLionel Debieve 111*928fa662SLionel Debieve bl32_image { 112*928fa662SLionel Debieve image-id = <BL32_IMAGE_ID>; 113*928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 114*928fa662SLionel Debieve hash = <&tos_fw_hash>; 115*928fa662SLionel Debieve }; 116*928fa662SLionel Debieve 117*928fa662SLionel Debieve bl32_extra1_image { 118*928fa662SLionel Debieve image-id = <BL32_EXTRA1_IMAGE_ID>; 119*928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 120*928fa662SLionel Debieve hash = <&tos_fw_extra1_hash>; 121*928fa662SLionel Debieve }; 122*928fa662SLionel Debieve 123*928fa662SLionel Debieve bl32_extra2_image { 124*928fa662SLionel Debieve image-id = <BL32_EXTRA2_IMAGE_ID>; 125*928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 126*928fa662SLionel Debieve hash = <&tos_fw_extra2_hash>; 127*928fa662SLionel Debieve }; 128*928fa662SLionel Debieve 129*928fa662SLionel Debieve tos_fw_config { 130*928fa662SLionel Debieve image-id = <TOS_FW_CONFIG_ID>; 131*928fa662SLionel Debieve parent = <&trusted_os_fw_content_cert>; 132*928fa662SLionel Debieve hash = <&tos_fw_config_hash>; 133*928fa662SLionel Debieve }; 134*928fa662SLionel Debieve 135*928fa662SLionel Debieve bl33_image { 136*928fa662SLionel Debieve image-id = <BL33_IMAGE_ID>; 137*928fa662SLionel Debieve parent = <&non_trusted_fw_content_cert>; 138*928fa662SLionel Debieve hash = <&nt_world_bl_hash>; 139*928fa662SLionel Debieve }; 140*928fa662SLionel Debieve }; 141*928fa662SLionel Debieve}; 142*928fa662SLionel Debieve 143*928fa662SLionel Debievenon_volatile_counters: non_volatile_counters { 144*928fa662SLionel Debieve #address-cells = <1>; 145*928fa662SLionel Debieve #size-cells = <0>; 146*928fa662SLionel Debieve 147*928fa662SLionel Debieve trusted_nv_counter: trusted_nv_counter { 148*928fa662SLionel Debieve id = <TRUSTED_NV_CTR_ID>; 149*928fa662SLionel Debieve oid = TRUSTED_FW_NVCOUNTER_OID; 150*928fa662SLionel Debieve }; 151*928fa662SLionel Debieve 152*928fa662SLionel Debieve non_trusted_nv_counter: non_trusted_nv_counter { 153*928fa662SLionel Debieve id = <NON_TRUSTED_NV_CTR_ID>; 154*928fa662SLionel Debieve oid = NON_TRUSTED_FW_NVCOUNTER_OID; 155*928fa662SLionel Debieve }; 156*928fa662SLionel Debieve}; 157