diff options
Diffstat (limited to 'nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake')
| -rw-r--r-- | nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake | 90 |
1 files changed, 90 insertions, 0 deletions
diff --git a/nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake b/nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake new file mode 100644 index 0000000..6dc94dd --- /dev/null +++ b/nrfdemo/build/tfm/api_ns/cmake/spe_config.cmake @@ -0,0 +1,90 @@ +#------------------------------------------------------------------------------- +# Copyright (c) 2023, Arm Limited. All rights reserved. +# +# SPDX-License-Identifier: BSD-3-Clause +# +#------------------------------------------------------------------------------- + +# This CMake script template contains the set of options settled on secure side +# build but necessary for building the non-secure side too. + +# TF-M Profile +set(TFM_PROFILE CACHE STRING "The TF-M profile") + +set(TFM_PARTITION_INTERNAL_TRUSTED_STORAGE OFF CACHE BOOL "Enable Internal Trusted Storage partition") +set(TFM_PARTITION_CRYPTO ON CACHE BOOL "Enable Crypto partition") +set(TFM_PARTITION_INITIAL_ATTESTATION OFF CACHE BOOL "Enable Initial Attestation partition") +set(TFM_PARTITION_PROTECTED_STORAGE OFF CACHE BOOL "Enable Protected Storage partition") +set(TFM_PARTITION_PLATFORM ON CACHE BOOL "Enable Platform partition") +set(TFM_PARTITION_FIRMWARE_UPDATE OFF CACHE BOOL "Enable firmware update partition") +set(TFM_PARTITION_NS_AGENT_MAILBOX OFF CACHE BOOL "Enable the Mailbox agents") + +# The options necessary for signing the final image +set(BL2 FALSE) +set(BL2_HEADER_SIZE 0x000) +set(BL2_TRAILER_SIZE 0x000) +set(MCUBOOT_IMAGE_NUMBER 1) +set(MCUBOOT_CONFIRM_IMAGE ) +set(MCUBOOT_ENC_IMAGES ) +set(MCUBOOT_ENC_KEY_LEN ) +set(MCUBOOT_KEY_ENC ) +set(MCUBOOT_MEASURED_BOOT ON) +set(MCUBOOT_ALIGN_VAL ) +set(MCUBOOT_UPGRADE_STRATEGY ) +set(MCUBOOT_S_IMAGE_MIN_VER ) + +set(MCUBOOT_MEASURED_BOOT ON) +set(MCUBOOT_HW_KEY ) + +set(MCUBOOT_SECURITY_COUNTER_S ) +set(MCUBOOT_IMAGE_VERSION_S ) +set(MCUBOOT_KEY_S ) + +set(MCUBOOT_SECURITY_COUNTER_NS ) +set(MCUBOOT_IMAGE_VERSION_NS ) +set(MCUBOOT_KEY_NS ) +set(PLATFORM_DEFAULT_IMAGE_SIGNING ON) + +# The common options describing a platform configuration + +set(TFM_PLATFORM ../../../../../../../nrf/modules/trusted-firmware-m/tfm_boards/nrf9120 CACHE STRING "Platform to build TF-M for. Must be either a relative path from [TF-M]/platform/ext/target, or an absolute path.") +set(CONFIG_TFM_USE_TRUSTZONE ON CACHE BOOL "Use TrustZone") +set(CONFIG_TFM_SPM_BACKEND SFN CACHE STRING "The SPM backend") +set(TFM_MULTI_CORE_TOPOLOGY OFF CACHE BOOL "Platform has multi core") +set(PSA_FRAMEWORK_HAS_MM_IOVEC OFF CACHE BOOL "Enable the MM-IOVEC feature") +set(TFM_ISOLATION_LEVEL 1 CACHE STRING "The TFM isolation level") + +set(PLATFORM_DEFAULT_CRYPTO_KEYS FALSE CACHE BOOL "Use the default crypto keys") +set(PLATFORM_DEFAULT_UART_STDOUT ON CACHE BOOL "Use default uart stdout implementation.") + +# Testing related options. + +set(TEST_PSA_API CACHE STRING "Which (if any) of the PSA API tests should be compiled") +set(PSA_ARCH_TESTS_PATH /home/mike/Documents/ncs/v2.7.0/modules/tee/tf-m/trusted-firmware-m/../psa-arch-tests CACHE PATH "Path to PSA arch test repository if it was give to SPE build") +set(INCLUDE_PANIC_TESTS CACHE BOOL "Include panic tests") + +set(ATTEST_KEY_BITS 256 CACHE STRING "The size of the initial attestation key in bits") +set(SYMMETRIC_INITIAL_ATTESTATION OFF CACHE BOOL "Use symmetric crypto for inital attestation") +set(ATTEST_INCLUDE_TEST_CODE OFF CACHE BOOL "Include minimal development tests in the initial attestation regression test suite") +set(TFM_MBEDCRYPTO_PSA_CRYPTO_CONFIG_PATH /home/mike/Documents/ncs/v2.7.0/conexio-firmware-sdk/samples/conexio_stratus/mqtt_control/build/modules/nrf/subsys/nrf_security/src/include/generated/nrf-psa-crypto-want-config.h CACHE STRING "Config to use psa crypto setting for Mbed Crypto") +set(CC312_LEGACY_DRIVER_API_ENABLED CACHE BOOL "This variable controls whether the legacy driver interface is used for CC-312") + +set(TFM_FWU_BOOTLOADER_LIB mcuboot CACHE STRING "Bootloader configure file for Firmware Update partition") + +# Other common options + +# Coprocessor settings +# It is difficult to sort out coprocessor settings and their dependencies. +# Export all the essential settings and therefore NS users don't have to figure them out again or +# include other config files. +# Also export other coprocessor settings to enable NS integration to validate the whole settings +# and toolchain compatibility via installed cp_config_check.cmake. +set(CONFIG_TFM_ENABLE_FP OFF CACHE BOOL "Enable/disable FP usage") +set(CONFIG_TFM_ENABLE_MVE OFF CACHE BOOL "Enable/disable integer MVE usage") +set(CONFIG_TFM_ENABLE_MVE_FP OFF CACHE BOOL "Enable/disable floating-point MVE usage") +set(CONFIG_TFM_FLOAT_ABI soft) +set(CONFIG_TFM_ENABLE_CP10CP11 OFF CACHE BOOL "Make FPU and MVE operational when SPE and/or NSPE require FPU or MVE usage. This alone only enables the coprocessors CP10-CP11, whereas CONFIG_TFM_FLOAT_ABI=hard along with CONFIG_TFM_ENABLE_FP, CONFIG_TFM_ENABLE_MVE or CONFIG_TFM_ENABLE_MVE_FP compiles the code with hardware FP or MVE instructions and ABI.") +set(CONFIG_TFM_LAZY_STACKING OFF CACHE BOOL "Enable/disable lazy stacking") + +set(TFM_VERSION 2.0.0) +set(TFM_NS_MANAGE_NSID OFF) |