2024-07-31 03:56 AM
Dear,
I'm starting with OP-TEE on STM32MP15x line. I bring-up the board as described here and built the optee_example_hello_world as described here. However, I got the error code below:
TEEC_Opensession failed with code 0xffff0008 origin 0x3
Checking the boot messages, I realized that the profile system_services is used. This way, it is not possible to run any TA.
So, is there any already compiled image for STM32MP157C-DK2 board that allows running a TA or do I have to modify the image to enable it?
Thanks!
Solved! Go to Solution.
2024-08-08 06:55 AM
2024-07-31 12:57 PM - edited 2024-07-31 12:58 PM
Hello @Charles Dias ,
Since OSTL v5.0, OP-TEE default configuration is non secure and loaded into DDR. It is mentioned here in OP-TEE overview : https://wiki.st.com/stm32mpu/wiki/OP-TEE_OTP_overview#OP-TEE_OS_configuration
So no, unfortunately we do not have an already compiled image that does what you want. You will have to recompile some components to load OP-TEE in SYSRAM, and activate secure_and_system_services profile.
Kind regards,
Erwan.
2024-08-06 05:00 AM
Hi, @Erwan SZYMANSKI,
When I activate the secure_and_system_services profile, should I load the OP-TEE in SYSRAM or can I keep it on DDR even if it's not secure?
Thanks for your help!
2024-08-06 05:10 AM
Hello @Charles Dias ,
Yes you need to put OP-TEE in SYSRAM on MP15 because this is the only memory secured for this series.
On MP13, you can put OP-TEE in DDR for this same use case.
Kind regards,
Erwan.
2024-08-08 06:55 AM
Solution described in this post:
2024-08-11 08:33 AM
Yes you need to put OP-TEE in SYSRAM on MP15 because this is the only memory secured for this series.
For MP1 there are two modes and I managed to run them both:
1. With secure OP-TEE in SYSRAM and paging in DDR:
2. With unsecure OP-TEE in DDR