Skip to content

feat(optee): Update RPMB sections to be shown for AM62L#662

Open
jsuhaas22 wants to merge 1 commit intoTexasInstruments:masterfrom
jsuhaas22:rpmb-update-12.0
Open

feat(optee): Update RPMB sections to be shown for AM62L#662
jsuhaas22 wants to merge 1 commit intoTexasInstruments:masterfrom
jsuhaas22:rpmb-update-12.0

Conversation

@jsuhaas22
Copy link
Copy Markdown
Collaborator

So far, RPMB sections were excluded from AM62L docs since AM62L was not supporting RPMB. But now it does support. Therefore show those sections for AM62L as well.

shiva-ti
shiva-ti previously approved these changes Apr 14, 2026
cshilwant
cshilwant previously approved these changes Apr 14, 2026
TVM
Trixie
UniFlash
userland
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't believe we should recognize userland as a word. User space is substantially more common and marginally more recognized.

device has its own HUK signing key (DKEK), which is different from
other HS devices. TI SDK disables RPMB by-default. To enable it,
re-compiling OP-TEE with ``CFG_RPMB_FS=y`` flag.
RPMB works in TI SoCs with HS configuration. These embed a KEK
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

KEK and DKEK acronyms are never actually defined.

Comment on lines 113 to 114
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You could make vale happy by doing the following:

Suggested change
Rich Execution Environment Filesystem (REE FS) and Replay Protected Memory Block (RPMB).

There is a hybrid mode in which both the flags i.e `CFG_REE_FS=y` and `CFG_RPMB_FS=y` are enabled.
This mode stores the state of the Secure Storage directory in RPMB partition to check for the
integrity of the data present in it. It is the recommended way.
There is a hybrid mode, which enables both `CFG_REE_FS=y` and `CFG_RPMB_FS=y`.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
There is a hybrid mode, which enables both `CFG_REE_FS=y` and `CFG_RPMB_FS=y`.
There is a hybrid mode, which enables both ``CFG_REE_FS=y`` and ``CFG_RPMB_FS=y``.

OPTEE-client also needs to be updated to enable the use of real
emmc instead of the virtual emmc that is enabled by default
Also update optee-client to enable the use of real
emmc instead of the virtual emmc, which is the default option.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
emmc instead of the virtual emmc, which is the default option.
eMMC instead of the virtual eMMC, which is the default option.

@jsuhaas22 jsuhaas22 dismissed stale reviews from cshilwant and shiva-ti via c87bafe April 15, 2026 01:54
@jsuhaas22
Copy link
Copy Markdown
Collaborator Author

Addressed your comments @StaticRocket

So far, RPMB sections were excluded from AM62L docs since AM62L was not
supporting RPMB. But now it does support. Therefore show those sections for
AM62L as well.

Also fix a few vale warnings.

Signed-off-by: Suhaas Joshi <s-joshi@ti.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants