1#-------------------------------------------------------------------------------
2# Copyright (c) 2023, Arm Limited. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6#-------------------------------------------------------------------------------
7
8# This CMake script template contains the set of options settled on secure side
9# build but necessary for building the non-secure side too.
10
11# TF-M Profile
12set(TFM_PROFILE                            @TFM_PROFILE@    CACHE STRING "The TF-M profile")
13
14set(TFM_PARTITION_INTERNAL_TRUSTED_STORAGE @TFM_PARTITION_INTERNAL_TRUSTED_STORAGE@ CACHE BOOL "Enable Internal Trusted Storage partition")
15set(TFM_PARTITION_CRYPTO                   @TFM_PARTITION_CRYPTO@                   CACHE BOOL "Enable Crypto partition")
16set(TFM_PARTITION_INITIAL_ATTESTATION      @TFM_PARTITION_INITIAL_ATTESTATION@      CACHE BOOL "Enable Initial Attestation partition")
17set(TFM_PARTITION_PROTECTED_STORAGE        @TFM_PARTITION_PROTECTED_STORAGE@        CACHE BOOL "Enable Protected Storage partition")
18set(TFM_PARTITION_PLATFORM                 @TFM_PARTITION_PLATFORM@                 CACHE BOOL "Enable Platform partition")
19set(TFM_PARTITION_FIRMWARE_UPDATE          @TFM_PARTITION_FIRMWARE_UPDATE@          CACHE BOOL "Enable firmware update partition")
20set(TFM_PARTITION_NS_AGENT_MAILBOX         @TFM_PARTITION_NS_AGENT_MAILBOX@         CACHE BOOL "Enable the Mailbox agents")
21
22# The options necessary for signing the final image
23set(BL2                                    @BL2@)
24set(BL2_HEADER_SIZE                        @BL2_HEADER_SIZE@)
25set(BL2_TRAILER_SIZE                       @BL2_TRAILER_SIZE@)
26set(MCUBOOT_IMAGE_NUMBER                   @MCUBOOT_IMAGE_NUMBER@)
27set(MCUBOOT_CONFIRM_IMAGE                  @MCUBOOT_CONFIRM_IMAGE@)
28set(MCUBOOT_ENC_IMAGES                     @MCUBOOT_ENC_IMAGES@)
29set(MCUBOOT_ENC_KEY_LEN                    @MCUBOOT_ENC_KEY_LEN@)
30set(MCUBOOT_KEY_ENC                        @MCUBOOT_KEY_ENC@)
31set(MCUBOOT_MEASURED_BOOT                  @MCUBOOT_MEASURED_BOOT@)
32set(MCUBOOT_ALIGN_VAL                      @MCUBOOT_ALIGN_VAL@)
33set(MCUBOOT_UPGRADE_STRATEGY               @MCUBOOT_UPGRADE_STRATEGY@)
34set(MCUBOOT_S_IMAGE_MIN_VER                @MCUBOOT_S_IMAGE_MIN_VER@)
35
36set(MCUBOOT_MEASURED_BOOT                  @MCUBOOT_MEASURED_BOOT@)
37set(MCUBOOT_HW_KEY                         @MCUBOOT_HW_KEY@)
38
39set(MCUBOOT_SECURITY_COUNTER_S             @MCUBOOT_SECURITY_COUNTER_S@)
40set(MCUBOOT_IMAGE_VERSION_S                @MCUBOOT_IMAGE_VERSION_S@)
41set(MCUBOOT_KEY_S                          @MCUBOOT_INSTALL_KEY_S@)
42
43set(MCUBOOT_SECURITY_COUNTER_NS            @MCUBOOT_SECURITY_COUNTER_NS@)
44set(MCUBOOT_IMAGE_VERSION_NS               @MCUBOOT_IMAGE_VERSION_NS@)
45set(MCUBOOT_KEY_NS                         @MCUBOOT_INSTALL_KEY_NS@)
46set(PLATFORM_DEFAULT_IMAGE_SIGNING         @PLATFORM_DEFAULT_IMAGE_SIGNING@)
47
48# The common options describing a platform configuration
49
50set(TFM_PLATFORM                           @TFM_PLATFORM@                   CACHE STRING "Platform to build TF-M for. Must be either a relative path from [TF-M]/platform/ext/target, or an absolute path.")
51set(CONFIG_TFM_USE_TRUSTZONE               @CONFIG_TFM_USE_TRUSTZONE@       CACHE BOOL   "Use TrustZone")
52set(CONFIG_TFM_SPM_BACKEND                 @CONFIG_TFM_SPM_BACKEND@         CACHE STRING "The SPM backend")
53set(TFM_MULTI_CORE_TOPOLOGY                @TFM_MULTI_CORE_TOPOLOGY@        CACHE BOOL   "Platform has multi core")
54set(PSA_FRAMEWORK_HAS_MM_IOVEC             @PSA_FRAMEWORK_HAS_MM_IOVEC@     CACHE BOOL   "Enable the MM-IOVEC feature")
55set(TFM_ISOLATION_LEVEL                    @TFM_ISOLATION_LEVEL@            CACHE STRING "The TFM isolation level")
56
57set(PLATFORM_DEFAULT_CRYPTO_KEYS           @PLATFORM_DEFAULT_CRYPTO_KEYS@   CACHE BOOL   "Use the default crypto keys")
58set(PLATFORM_DEFAULT_UART_STDOUT           @PLATFORM_DEFAULT_UART_STDOUT@   CACHE BOOL   "Use default uart stdout implementation.")
59
60# Other common options
61
62# Coprocessor settings
63# It is difficult to sort out coprocessor settings and their dependencies.
64# Export all the essential settings and therefore NS users don't have to figure them out again or
65# include other config files.
66# Also export other coprocessor settings to enable NS integration to validate the whole settings
67# and toolchain compatibility via installed cp_config_check.cmake.
68set(CONFIG_TFM_ENABLE_FP                   @CONFIG_TFM_ENABLE_FP@       CACHE BOOL   "Enable/disable FP usage")
69set(CONFIG_TFM_ENABLE_MVE                  @CONFIG_TFM_ENABLE_MVE@      CACHE BOOL   "Enable/disable integer MVE usage")
70set(CONFIG_TFM_ENABLE_MVE_FP               @CONFIG_TFM_ENABLE_MVE_FP@   CACHE BOOL   "Enable/disable floating-point MVE usage")
71set(CONFIG_TFM_FLOAT_ABI                   @CONFIG_TFM_FLOAT_ABI@)
72set(CONFIG_TFM_ENABLE_CP10CP11             @CONFIG_TFM_ENABLE_CP10CP11@ CACHE BOOL   "Make FPU and MVE operational when SPE and/or NSPE require FPU or MVE usage. This alone only enables the coprocessors CP10-CP11, whereas CONFIG_TFM_FLOAT_ABI=hard along with  CONFIG_TFM_ENABLE_FP, CONFIG_TFM_ENABLE_MVE or CONFIG_TFM_ENABLE_MVE_FP compiles the code with hardware FP or MVE instructions and ABI.")
73set(CONFIG_TFM_LAZY_STACKING               @CONFIG_TFM_LAZY_STACKING@   CACHE BOOL   "Enable/disable lazy stacking")
74
75set(TFM_VERSION                            @TFM_VERSION@)
76set(TFM_NS_MANAGE_NSID                     @TFM_NS_MANAGE_NSID@)
77
78set(RECOMMENDED_TFM_TESTS_VERSION          @TFM_TESTS_VERSION@)
79set(CHECK_TFM_TESTS_VERSION                @TFM_TESTS_REVISION_CHECKS@)
80