From 31f662a51bfc8bfb5a9fdeb1f84951b6dbf6df72 Mon Sep 17 00:00:00 2001 From: Nayna Jain Date: Wed, 16 Sep 2020 11:21:20 -0500 Subject: hdata/spira: add physical presence flags This patch reads the hdata bits to check for physical presence assertion, and creates device tree entries to be consumed later in the boot. Signed-off-by: Nayna Jain Signed-off-by: Eric Richter Signed-off-by: Oliver O'Halloran --- doc/device-tree/ibm,secureboot.rst | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) (limited to 'doc') diff --git a/doc/device-tree/ibm,secureboot.rst b/doc/device-tree/ibm,secureboot.rst index 3113b3f..42f69b2 100644 --- a/doc/device-tree/ibm,secureboot.rst +++ b/doc/device-tree/ibm,secureboot.rst @@ -39,6 +39,23 @@ Required properties images (e.g. kernels) to be signed by an appropriate key stored in secure variables. + physical-presence-asserted: + this property exists to indicate the physical presence + of user to request key clearance. + + clear-os-keys: this property exists when the firmware indicates that + physical presence is asserted to clear only Host OS + secure boot keys. + + clear-all-keys: this property exists when the firmware indicates that + physical presence is asserted to clear all sensistive + data controlled by platform firmware. + + clear-mfg-keys: this property exists only during manufacturing process + when the firmware indicates to clear all senstive data + during manufacturing. It is only valid on development + drivers. + Obsolete properties ------------------- -- cgit v1.1