Set up secure boot
Requirements
Digi Embedded Yocto uses NXP's Code Signing Tool (CST) for the High Assurance Boot library when generating secure firmware images. If the tool is not found, the Digi Embedded Yocto TrustFence build fails. Follow these steps to install the CST tool in your workspace:
- Download the CST tool from https://www.nxp.com/webapp/Download?colCode=IMX_CST_TOOL.
- If you have not used your Digi Embedded Yocto workspace yet, create the downloads folder in the workspace.
- Place the tool in the downloads folder of your Digi Embedded Yocto project workspace.
Yocto will try to use the latest CST supported. If you are using an old CST versions, you need to define the CST version you are using in your conf/local.conf. For example:
PREFERRED_VERSION_trustfence-cst-native = "2.3.2"
To add secure boot support to your Digi Embedded Yocto project:
PDF
