From: Bryan Brattlof Date: Thu, 12 Jun 2025 11:38:52 +0000 (-0500) Subject: binman: add sysfw-inner-cert to missing-blob-help X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cf744bda69772cae34a48ee2d19eefd68231f09d;p=thirdparty%2Fu-boot.git binman: add sysfw-inner-cert to missing-blob-help Now that the inner certificate for TI's Foundation Security TIFS firmware is mandatory to a successful build, provide some guidance on what it is and links to the documentation on how to obtain the firmware blobs. Reviewed-by: Anshul Dalal Signed-off-by: Bryan Brattlof --- diff --git a/tools/binman/missing-blob-help b/tools/binman/missing-blob-help index e28eaa20154..3b16a9b1679 100644 --- a/tools/binman/missing-blob-help +++ b/tools/binman/missing-blob-help @@ -47,6 +47,16 @@ scp-sunxi: SCP firmware is required for system suspend, but is otherwise optional. Please read the section on SCP firmware in board/sunxi/README.sunxi64 +sysfw-inner-cert: +You are missing the inner certificate for TI's Foundational Security (TIFS) +firmware which is critical to authenticating the TIFS firmware during boot. +HS-FS and HS-SE parts will not boot without this certificate. + +Have a look at your board's documentation to find and include the latest +TIFS certificate blobs and how to include them in the build. + + https://docs.u-boot.org/en/latest/board/ti/k3.html + tee-os: See the documentation for your board. You may need to build Open Portable Trusted Execution Environment (OP-TEE) and build with TEE=/path/to/tee.bin