stm32mp135 secure boot

[guansonghuang]

Hi,

   I usb buildroot(branch: st/2023.02.2) to buid my system.

I want to know how to configure  to enable secure boot.

if i just enable 

TRUSTED_BOARD_BOOT=1

MBEDTLS_DIR=$(MBEDTLS_DIR)

then compile error as follow

 make[2]: *** No rule to make target '/home/gary/test/stm32mp15/buildroot/output/build/mbedtls-2.28.2/library/aes.c', needed by '/home/gary/test/stm32mp15/buildroot/output/build/arm-trusted-firmware-hgs_test/build/stm32mp1/release/libmbedtls/aes.o'. Stop.
make[2]: *** Waiting for unfinished jobs....
package/pkg-generic.mk:290: recipe for target '/home/gary/test/stm32mp15/buildroot/output/build/arm-trusted-firmware-hgs_test/.stamp_built' failed
make[1]: *** [/home/gary/test/stm32mp15/buildroot/output/build/arm-trusted-firmware-hgs_test/.stamp_built] Error 2
Makefile:82: recipe for target '_all' failed
make: *** [_all] Error 2

[Gregory PLANCHON · Accepted solution]

Hi @guansonghuang ,

Have you tried following this wiki page to configure secure boot? 

https://wiki.st.com/stm32mpu/wiki/How_to_enable_secure_boot_on_STM32_MPU

Regards,

Grégory

[guansonghuang]

Yes I have read this article.but it talk  about some concepts of secure boot.  not operational steps

[Gregory PLANCHON]

Hi @guansonghuang ,

I think this page will help you more: https://wiki.st.com/stm32mpu/wiki/How_to_perform_Secure_Boot_from_Distribution_package

Regards,

Grégory

[guansonghuang]

Hi @Gregory PLANCHON 

 This help, need to read all the sublinks in that article.