1#------------------------------------------------------------------------------- 2# Copyright (c) 2023, Arm Limited. All rights reserved. 3# 4# SPDX-License-Identifier: BSD-3-Clause 5# 6#------------------------------------------------------------------------------- 7 8# This CMake script template contains the set of options settled on secure side 9# build but necessary for building the non-secure side too. 10 11# TF-M Profile 12set(TFM_PROFILE @TFM_PROFILE@ CACHE STRING "The TF-M profile") 13 14set(TFM_PARTITION_INTERNAL_TRUSTED_STORAGE @TFM_PARTITION_INTERNAL_TRUSTED_STORAGE@ CACHE BOOL "Enable Internal Trusted Storage partition") 15set(TFM_PARTITION_CRYPTO @TFM_PARTITION_CRYPTO@ CACHE BOOL "Enable Crypto partition") 16set(TFM_PARTITION_INITIAL_ATTESTATION @TFM_PARTITION_INITIAL_ATTESTATION@ CACHE BOOL "Enable Initial Attestation partition") 17set(TFM_PARTITION_PROTECTED_STORAGE @TFM_PARTITION_PROTECTED_STORAGE@ CACHE BOOL "Enable Protected Storage partition") 18set(TFM_PARTITION_PLATFORM @TFM_PARTITION_PLATFORM@ CACHE BOOL "Enable Platform partition") 19set(TFM_PARTITION_FIRMWARE_UPDATE @TFM_PARTITION_FIRMWARE_UPDATE@ CACHE BOOL "Enable firmware update partition") 20set(TFM_PARTITION_NS_AGENT_MAILBOX @TFM_PARTITION_NS_AGENT_MAILBOX@ CACHE BOOL "Enable the Mailbox agents") 21 22# The options necessary for signing the final image 23set(BL2 @BL2@) 24set(BL2_HEADER_SIZE @BL2_HEADER_SIZE@) 25set(BL2_TRAILER_SIZE @BL2_TRAILER_SIZE@) 26set(MCUBOOT_IMAGE_NUMBER @MCUBOOT_IMAGE_NUMBER@) 27set(MCUBOOT_CONFIRM_IMAGE @MCUBOOT_CONFIRM_IMAGE@) 28set(MCUBOOT_ENC_IMAGES @MCUBOOT_ENC_IMAGES@) 29set(MCUBOOT_ENC_KEY_LEN @MCUBOOT_ENC_KEY_LEN@) 30set(MCUBOOT_KEY_ENC @MCUBOOT_KEY_ENC@) 31set(MCUBOOT_MEASURED_BOOT @MCUBOOT_MEASURED_BOOT@) 32set(MCUBOOT_ALIGN_VAL @MCUBOOT_ALIGN_VAL@) 33set(MCUBOOT_UPGRADE_STRATEGY @MCUBOOT_UPGRADE_STRATEGY@) 34set(MCUBOOT_S_IMAGE_MIN_VER @MCUBOOT_S_IMAGE_MIN_VER@) 35 36set(MCUBOOT_MEASURED_BOOT @MCUBOOT_MEASURED_BOOT@) 37set(MCUBOOT_HW_KEY @MCUBOOT_HW_KEY@) 38 39set(MCUBOOT_SECURITY_COUNTER_S @MCUBOOT_SECURITY_COUNTER_S@) 40set(MCUBOOT_IMAGE_VERSION_S @MCUBOOT_IMAGE_VERSION_S@) 41set(MCUBOOT_KEY_S @MCUBOOT_INSTALL_KEY_S@) 42 43set(MCUBOOT_SECURITY_COUNTER_NS @MCUBOOT_SECURITY_COUNTER_NS@) 44set(MCUBOOT_IMAGE_VERSION_NS @MCUBOOT_IMAGE_VERSION_NS@) 45set(MCUBOOT_KEY_NS @MCUBOOT_INSTALL_KEY_NS@) 46set(PLATFORM_DEFAULT_IMAGE_SIGNING @PLATFORM_DEFAULT_IMAGE_SIGNING@) 47 48# The common options describing a platform configuration 49 50set(TFM_PLATFORM @TFM_PLATFORM@ CACHE STRING "Platform to build TF-M for. Must be either a relative path from [TF-M]/platform/ext/target, or an absolute path.") 51set(CONFIG_TFM_USE_TRUSTZONE @CONFIG_TFM_USE_TRUSTZONE@ CACHE BOOL "Use TrustZone") 52set(CONFIG_TFM_SPM_BACKEND @CONFIG_TFM_SPM_BACKEND@ CACHE STRING "The SPM backend") 53set(TFM_MULTI_CORE_TOPOLOGY @TFM_MULTI_CORE_TOPOLOGY@ CACHE BOOL "Platform has multi core") 54set(PSA_FRAMEWORK_HAS_MM_IOVEC @PSA_FRAMEWORK_HAS_MM_IOVEC@ CACHE BOOL "Enable the MM-IOVEC feature") 55set(TFM_ISOLATION_LEVEL @TFM_ISOLATION_LEVEL@ CACHE STRING "The TFM isolation level") 56 57set(PLATFORM_DEFAULT_CRYPTO_KEYS @PLATFORM_DEFAULT_CRYPTO_KEYS@ CACHE BOOL "Use the default crypto keys") 58set(PLATFORM_DEFAULT_UART_STDOUT @PLATFORM_DEFAULT_UART_STDOUT@ CACHE BOOL "Use default uart stdout implementation.") 59 60# Other common options 61 62# Coprocessor settings 63# It is difficult to sort out coprocessor settings and their dependencies. 64# Export all the essential settings and therefore NS users don't have to figure them out again or 65# include other config files. 66# Also export other coprocessor settings to enable NS integration to validate the whole settings 67# and toolchain compatibility via installed cp_config_check.cmake. 68set(CONFIG_TFM_ENABLE_FP @CONFIG_TFM_ENABLE_FP@ CACHE BOOL "Enable/disable FP usage") 69set(CONFIG_TFM_ENABLE_MVE @CONFIG_TFM_ENABLE_MVE@ CACHE BOOL "Enable/disable integer MVE usage") 70set(CONFIG_TFM_ENABLE_MVE_FP @CONFIG_TFM_ENABLE_MVE_FP@ CACHE BOOL "Enable/disable floating-point MVE usage") 71set(CONFIG_TFM_FLOAT_ABI @CONFIG_TFM_FLOAT_ABI@) 72set(CONFIG_TFM_ENABLE_CP10CP11 @CONFIG_TFM_ENABLE_CP10CP11@ CACHE BOOL "Make FPU and MVE operational when SPE and/or NSPE require FPU or MVE usage. This alone only enables the coprocessors CP10-CP11, whereas CONFIG_TFM_FLOAT_ABI=hard along with CONFIG_TFM_ENABLE_FP, CONFIG_TFM_ENABLE_MVE or CONFIG_TFM_ENABLE_MVE_FP compiles the code with hardware FP or MVE instructions and ABI.") 73set(CONFIG_TFM_LAZY_STACKING @CONFIG_TFM_LAZY_STACKING@ CACHE BOOL "Enable/disable lazy stacking") 74 75set(TFM_VERSION @TFM_VERSION@) 76set(TFM_NS_MANAGE_NSID @TFM_NS_MANAGE_NSID@) 77 78set(RECOMMENDED_TFM_TESTS_VERSION @TFM_TESTS_VERSION@) 79set(CHECK_TFM_TESTS_VERSION @TFM_TESTS_REVISION_CHECKS@) 80