Skip to content

Secure boot updates #3650

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
May 16, 2024
Merged

Secure boot updates #3650

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2fde54c
device-tree: Fix formatting of firmware properties
timg236 May 16, 2024
eda639f
device-tree: Fix typo should be 'signed' instead of 'signed-boot'
timg236 May 16, 2024
1bf657c
OTP: Document bootrom RSA key revocation bits for BCM2711
timg236 May 16, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions documentation/asciidoc/computers/configuration/device-tree.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -841,13 +841,13 @@ Set to `1` if the `tryboot` flag was set at boot.

Raspberry Pi 5 only.

*`max_current` - 32-bit integer
`max_current` - 32-bit integer

The maximum current in mA that the power supply can supply. The firmware reports the value indicated by the USB-C, USB-PD or PoE interfaces.

For bench power supplies (e.g. connected to the GPIO header) define `PSU_MAX_CURRENT` in the bootloader configuration to indicate the power supply current capability.

*`power_reset` - 32-bit integer
`power_reset` - 32-bit integer

Raspberry Pi 5 only.

Expand Down Expand Up @@ -936,7 +936,7 @@ This bit-field describes the features supported by the current bootloader. This

The UTC update timestamp set by `rpi-eeprom-update`.

`signed_boot` - 32-bit integer
`signed` - 32-bit integer

If Secure Boot is enabled then this bit-field will be non-zero. The individual bits indicate the current Secure Boot configuration.

Expand Down
5 changes: 5 additions & 0 deletions documentation/asciidoc/computers/raspberry-pi/otp-bits.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,15 @@ vcgencmd otp_dump

This list contains the publicly available information on the registers. If a register or bit is not defined here, then it is not public.

16 -- OTP control register - BCM2711
* Bit 26: disables VC JTAG
* Bit 27: disables VC JTAG

17 -- bootmode register

* Bit 1: sets the oscillator frequency to 19.2MHz
* Bit 3: enables pull ups on the SDIO pins
* Bit 15: disables ROM RSA key 0 - (secure boot enabled if set) (BCM2711)
* Bit 19: enables GPIO bootmode
* Bit 20: sets the bank to check for GPIO bootmode
* Bit 21: enables booting from SD card
Expand Down