diff options
| author | Karthikeyan Ramasubramanian <kramasub@google.com> | 2022-08-25 15:53:27 -0600 |
|---|---|---|
| committer | Martin Roth <martin.roth@amd.corp-partner.google.com> | 2022-10-02 22:11:57 +0000 |
| commit | bb31562e9e452b3a927579a5330f55cf36906bef (patch) | |
| tree | e7d33dd33b9a2520b49d0ba66da5da3b8fec8600 | |
| parent | 3c164e13e7b3c1ba36686fb7a946f88971c1398d (diff) | |
soc/amd/common: Add a config to keep signed AMD/PSP FW separately
Enabling this config will put signed amd firmwares into
SIGNED_AMDFW_[AB] region which is outside FW_MAIN_[AB]. Vboot only
verifies FW_MAIN_[AB] so these regions will not be verified by vboot,
instead the PSP will verify them.
As a result we have less to load and verify from SPI rom which means
faster boot time.
BUG=b:206909680
TEST=Build Skyrim with modified fmap and Kconfig.
Change-Id: If4fd3cff11a38d82afb8c5ce379f1d1b5b9adfbf
Signed-off-by: Kangheui Won <khwon@chromium.org>
Signed-off-by: Karthikeyan Ramasubramanian <kramasub@google.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/59867
Reviewed-by: Jon Murphy <jpmurphy@google.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
| -rw-r--r-- | src/soc/amd/common/psp_verstage/Kconfig | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/src/soc/amd/common/psp_verstage/Kconfig b/src/soc/amd/common/psp_verstage/Kconfig index 13dd71659c..526a4ae722 100644 --- a/src/soc/amd/common/psp_verstage/Kconfig +++ b/src/soc/amd/common/psp_verstage/Kconfig @@ -29,3 +29,9 @@ config PSP_SUPPORTS_EFS2_RELATIVE_ADDR On SoCs where PSP uses A/B recovery layout, PSP support relative addressing from the start of the SPI ROM. Enable this config on SoCs where PSP supports relative addressing so that PSP verstage can pass the offset. + +config SEPARATE_SIGNED_PSPFW + def_bool n + help + Put signed AMD/PSP firmwares outside FW_MAIN_[AB] so vboot doesn't verify them, + and rely on PSP's verification. |