Enable EFI capsule authentication and set the capsule public key certificate file in the base TI K3 EFI Capsule config.
This will enable EFI capsule authentication on all boards that include the base TI K3 EFI Capsule config file.
This patch is built upon the series enabling EFI capsule TI boards [0] as well as using capsule certificates directly [1].
[0] https://lore.kernel.org/r/20240607223858.1971290-1-j-humphreys@ti.com [1] https://lore.kernel.org/r/20240607225915.1985514-1-j-humphreys@ti.com
Signed-off-by: Jonathan Humphreys j-humphreys@ti.com --- configs/k3_efi_capsule.config | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/configs/k3_efi_capsule.config b/configs/k3_efi_capsule.config index e31cea37269..8f8f63f672e 100644 --- a/configs/k3_efi_capsule.config +++ b/configs/k3_efi_capsule.config @@ -1,2 +1,4 @@ CONFIG_EFI_CAPSULE_ON_DISK=y CONFIG_EFI_CAPSULE_FIRMWARE_RAW=y +CONFIG_EFI_CAPSULE_AUTHENTICATE=y +CONFIG_EFI_CAPSULE_CRT_FILE="arch/arm/mach-k3/keys/custMpk.crt"