1# Configuration for the partitions in the  TF-M Module
2
3# Copyright (c) 2021 Nordic Semiconductor ASA
4# SPDX-License-Identifier: Apache-2.0
5
6if BUILD_WITH_TFM
7
8config TFM_PARTITION_PROTECTED_STORAGE
9	bool "Secure partition 'Protected Storage'"
10	depends on TFM_PARTITION_PLATFORM # Specfically TFM_SP_PLATFORM_NV_COUNTER service
11	depends on TFM_PARTITION_INTERNAL_TRUSTED_STORAGE
12	depends on TFM_PARTITION_CRYPTO
13	default y
14	help
15	  Setting this option will cause '-DTFM_PARTITION_PROTECTED_STORAGE'
16	  to be passed to the TF-M build system. Look at 'config_default.cmake'
17	  in the trusted-firmware-m repository for details regarding this
18	  parameter. Any dependencies between the various TFM_PARTITION_*
19	  options are handled by the build system in the trusted-firmware-m
20	  repository.
21
22config TFM_PARTITION_INTERNAL_TRUSTED_STORAGE
23	bool "Secure partition 'Internal Trusted Storage'"
24	default y
25	help
26	  Setting this option will cause '-DTFM_PARTITION_INTERNAL_TRUSTED_STORAGE'
27	  to be passed to the TF-M build system. Look at 'config_default.cmake'
28	  in the trusted-firmware-m repository for details regarding this
29	  parameter. Any dependencies between the various TFM_PARTITION_*
30	  options are handled by the build system in the trusted-firmware-m
31	  repository.
32
33config TFM_PARTITION_CRYPTO
34	bool "Secure partition 'Crypto'"
35	default y
36	help
37	  Setting this option will cause '-DTFM_PARTITION_CRYPTO'
38	  to be passed to the TF-M build system. Look at 'config_default.cmake'
39	  in the trusted-firmware-m repository for details regarding this
40	  parameter. Any dependencies between the various TFM_PARTITION_*
41	  options are handled by the build system in the trusted-firmware-m
42	  repository.
43
44config TFM_PARTITION_INITIAL_ATTESTATION
45	bool "Secure partition 'Initial Attestation'"
46	depends on TFM_PARTITION_CRYPTO
47	depends on TFM_INITIAL_ATTESTATION_KEY
48	default n
49	help
50	  Setting this option will cause '-DTFM_PARTITION_INITIAL_ATTESTATION'
51	  to be passed to the TF-M build system. Look at 'config_default.cmake'
52	  in the trusted-firmware-m repository for details regarding this
53	  parameter. Any dependencies between the various TFM_PARTITION_*
54	  options are handled by the build system in the trusted-firmware-m
55	  repository.
56
57config TFM_PARTITION_PLATFORM
58	bool "Secure partition 'Platform'"
59	default y
60	help
61	  Setting this option will cause '-DTFM_PARTITION_PLATFORM'
62	  to be passed to the TF-M build system. Look at 'config_default.cmake'
63	  in the trusted-firmware-m repository for details regarding this
64	  parameter. Any dependencies between the various TFM_PARTITION_*
65	  options are handled by the build system in the trusted-firmware-m
66	  repository.
67
68config TFM_PARTITION_FIRMWARE_UPDATE
69	bool "Include the secure parition 'Firmware Update'"
70	select TFM_MCUBOOT_DATA_SHARING
71	default n
72	help
73	  Setting this option will cause '-DTFM_PARTITION_FIRMWARE_UPDATE'
74	  to be passed to the TF-M build system. Look at 'config_default.cmake'
75	  in the trusted-firmware-m repository for details regarding this
76	  parameter. Any dependencies between the various TFM_PARTITION_*
77	  options are handled by the build system in the trusted-firmware-m
78	  repository.
79
80
81choice TFM_PARTITION_LOG_LEVEL
82	prompt "TF-M Partition Log Level" if !TFM_LOG_LEVEL_SILENCE
83	default TFM_PARTITION_LOG_LEVEL_INFO
84config TFM_PARTITION_LOG_LEVEL_DEBUG
85	bool "Debug"
86config TFM_PARTITION_LOG_LEVEL_INFO
87	bool "Info"
88config TFM_PARTITION_LOG_LEVEL_ERROR
89	bool "Error"
90config TFM_PARTITION_LOG_LEVEL_SILENCE
91	bool "Off"
92endchoice
93
94endif # BUILD_WITH_TFM
95