blob: 2103c30646ca39fc093d7c0262930996736be9bc (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
#-------------------------------------------------------------------------------
# Copyright (c) 2023, Arm Limited. All rights reserved.
#
# SPDX-License-Identifier: BSD-3-Clause
#
#-------------------------------------------------------------------------------
# This CMake script template contains the set of options settled on secure side
# build but necessary for building the non-secure side too.
# TF-M Profile
set(TFM_PROFILE CACHE STRING "The TF-M profile")
set(TFM_PARTITION_INTERNAL_TRUSTED_STORAGE OFF CACHE BOOL "Enable Internal Trusted Storage partition")
set(TFM_PARTITION_CRYPTO ON CACHE BOOL "Enable Crypto partition")
set(TFM_PARTITION_INITIAL_ATTESTATION OFF CACHE BOOL "Enable Initial Attestation partition")
set(TFM_PARTITION_PROTECTED_STORAGE OFF CACHE BOOL "Enable Protected Storage partition")
set(TFM_PARTITION_PLATFORM ON CACHE BOOL "Enable Platform partition")
set(TFM_PARTITION_FIRMWARE_UPDATE OFF CACHE BOOL "Enable firmware update partition")
set(TFM_PARTITION_NS_AGENT_MAILBOX OFF CACHE BOOL "Enable the Mailbox agents")
# The options necessary for signing the final image
set(BL2 FALSE)
set(BL2_HEADER_SIZE 0x000)
set(BL2_TRAILER_SIZE 0x000)
set(MCUBOOT_IMAGE_NUMBER 1)
set(MCUBOOT_CONFIRM_IMAGE )
set(MCUBOOT_ENC_IMAGES )
set(MCUBOOT_ENC_KEY_LEN )
set(MCUBOOT_KEY_ENC )
set(MCUBOOT_MEASURED_BOOT ON)
set(MCUBOOT_ALIGN_VAL )
set(MCUBOOT_UPGRADE_STRATEGY )
set(MCUBOOT_S_IMAGE_MIN_VER )
set(MCUBOOT_MEASURED_BOOT ON)
set(MCUBOOT_HW_KEY )
set(MCUBOOT_SECURITY_COUNTER_S )
set(MCUBOOT_IMAGE_VERSION_S )
set(MCUBOOT_KEY_S )
set(MCUBOOT_SECURITY_COUNTER_NS )
set(MCUBOOT_IMAGE_VERSION_NS )
set(MCUBOOT_KEY_NS )
set(PLATFORM_DEFAULT_IMAGE_SIGNING ON)
# The common options describing a platform configuration
set(TFM_PLATFORM ../../../../../../../nrf/modules/trusted-firmware-m/tfm_boards/nrf9120 CACHE STRING "Platform to build TF-M for. Must be either a relative path from [TF-M]/platform/ext/target, or an absolute path.")
set(CONFIG_TFM_USE_TRUSTZONE ON CACHE BOOL "Use TrustZone")
set(CONFIG_TFM_SPM_BACKEND SFN CACHE STRING "The SPM backend")
set(TFM_MULTI_CORE_TOPOLOGY OFF CACHE BOOL "Platform has multi core")
set(PSA_FRAMEWORK_HAS_MM_IOVEC OFF CACHE BOOL "Enable the MM-IOVEC feature")
set(TFM_ISOLATION_LEVEL 1 CACHE STRING "The TFM isolation level")
set(PLATFORM_DEFAULT_CRYPTO_KEYS FALSE CACHE BOOL "Use the default crypto keys")
set(PLATFORM_DEFAULT_UART_STDOUT ON CACHE BOOL "Use default uart stdout implementation.")
# Testing related options.
set(TEST_PSA_API CACHE STRING "Which (if any) of the PSA API tests should be compiled")
set(PSA_ARCH_TESTS_PATH /home/mike/Documents/ncs/v2.7.0/modules/tee/tf-m/trusted-firmware-m/../psa-arch-tests CACHE PATH "Path to PSA arch test repository if it was give to SPE build")
set(INCLUDE_PANIC_TESTS CACHE BOOL "Include panic tests")
set(ATTEST_KEY_BITS 256 CACHE STRING "The size of the initial attestation key in bits")
set(SYMMETRIC_INITIAL_ATTESTATION OFF CACHE BOOL "Use symmetric crypto for inital attestation")
set(ATTEST_INCLUDE_TEST_CODE OFF CACHE BOOL "Include minimal development tests in the initial attestation regression test suite")
set(TFM_MBEDCRYPTO_PSA_CRYPTO_CONFIG_PATH /home/mike/Documents/ncs/v2.7.0/conexio-firmware-sdk/samples/conexio_stratus/mqtt_control/builddk/modules/nrf/subsys/nrf_security/src/include/generated/nrf-psa-crypto-want-config.h CACHE STRING "Config to use psa crypto setting for Mbed Crypto")
set(CC312_LEGACY_DRIVER_API_ENABLED CACHE BOOL "This variable controls whether the legacy driver interface is used for CC-312")
set(TFM_FWU_BOOTLOADER_LIB mcuboot CACHE STRING "Bootloader configure file for Firmware Update partition")
# Other common options
# Coprocessor settings
# It is difficult to sort out coprocessor settings and their dependencies.
# Export all the essential settings and therefore NS users don't have to figure them out again or
# include other config files.
# Also export other coprocessor settings to enable NS integration to validate the whole settings
# and toolchain compatibility via installed cp_config_check.cmake.
set(CONFIG_TFM_ENABLE_FP OFF CACHE BOOL "Enable/disable FP usage")
set(CONFIG_TFM_ENABLE_MVE OFF CACHE BOOL "Enable/disable integer MVE usage")
set(CONFIG_TFM_ENABLE_MVE_FP OFF CACHE BOOL "Enable/disable floating-point MVE usage")
set(CONFIG_TFM_FLOAT_ABI soft)
set(CONFIG_TFM_ENABLE_CP10CP11 OFF CACHE BOOL "Make FPU and MVE operational when SPE and/or NSPE require FPU or MVE usage. This alone only enables the coprocessors CP10-CP11, whereas CONFIG_TFM_FLOAT_ABI=hard along with CONFIG_TFM_ENABLE_FP, CONFIG_TFM_ENABLE_MVE or CONFIG_TFM_ENABLE_MVE_FP compiles the code with hardware FP or MVE instructions and ABI.")
set(CONFIG_TFM_LAZY_STACKING OFF CACHE BOOL "Enable/disable lazy stacking")
set(TFM_VERSION 2.0.0)
set(TFM_NS_MANAGE_NSID OFF)
|
