summaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorDavid Thompson <davthompson@nvidia.com>2023-11-30 13:35:15 -0500
committerIlpo Järvinen <ilpo.jarvinen@linux.intel.com>2023-12-04 14:43:49 +0200
commitd4eef75279f5e9d594f5785502038c763ce42268 (patch)
treeb98f28ddd5249258655c9382ff2ced6659b0c433 /security
parentcbf54f37600e874d82886aa3b2f471778cae01ce (diff)
downloadlinux-stable-d4eef75279f5e9d594f5785502038c763ce42268.tar.gz
linux-stable-d4eef75279f5e9d594f5785502038c763ce42268.tar.bz2
linux-stable-d4eef75279f5e9d594f5785502038c763ce42268.zip
mlxbf-bootctl: correctly identify secure boot with development keys
The secure boot state of the BlueField SoC is represented by two bits: 0 = production state 1 = secure boot enabled 2 = non-secure (secure boot disabled) 3 = RMA state There is also a single bit to indicate whether production keys or development keys are being used when secure boot is enabled. This single bit (specified by MLXBF_BOOTCTL_SB_DEV_MASK) only has meaning if secure boot state equals 1 (secure boot enabled). The secure boot states are as follows: - “GA secured” is when secure boot is enabled with official production keys. - “Secured (development)” is when secure boot is enabled with development keys. Without this fix “GA Secured” is displayed on development cards which is misleading. This patch updates the logic in "lifecycle_state_show()" to handle the case where the SoC is configured for secure boot and is using development keys. Fixes: 79e29cb8fbc5c ("platform/mellanox: Add bootctl driver for Mellanox BlueField Soc") Reviewed-by: Khalil Blaiech <kblaiech@nvidia.com> Signed-off-by: David Thompson <davthompson@nvidia.com> Link: https://lore.kernel.org/r/20231130183515.17214-1-davthompson@nvidia.com Reviewed-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
Diffstat (limited to 'security')
0 files changed, 0 insertions, 0 deletions