Skip to content

Add Secure Boot documentation for AM62Lx #687

Open
Pratham-T wants to merge 3 commits intoTexasInstruments:masterfrom
Pratham-T:ubootdocs
Open

Add Secure Boot documentation for AM62Lx #687
Pratham-T wants to merge 3 commits intoTexasInstruments:masterfrom
Pratham-T:ubootdocs

Conversation

@Pratham-T
Copy link
Copy Markdown
Contributor

@Pratham-T Pratham-T commented Apr 22, 2026

This PR adds Secure Boot documentation for AM62Lx.

Firstly, add AM62Lx specific content in the Foundational_Components_Secure_Boot.rst.

While we are here, also fix formatting and other issues. Update indentation, make spellings coherent, add relevant :file: and :code: directives, etc.

Next add a new page in the U-Boot user guide documenting secure boot enablement using U-Boot's verified boot framework in AM62LX. For AM62LX, u-boot.img signing and verification has been moved to leverage the mechanisms provided in U-Boot from using HSM core in other K3 devices. This page aims to address this change in AM62LX.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds AM62LX-focused documentation to the U-Boot User’s Guide describing how secure boot is enabled via U-Boot’s FIT verified-boot flow (signed u-boot.img verified by SPL).

Changes:

  • Add a new UG-Secure-Boot page documenting the verified-boot chain for AM62LX.
  • Link the new page from the U-Boot User’s Guide toctree.
  • Include the new page in the AM62LX documentation TOC so it’s built for that device.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File Description
source/linux/Foundational_Components/U-Boot/Users-Guide.rst Adds UG-Secure-Boot to the U-Boot User’s Guide toctree.
source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst New documentation page describing U-Boot FIT signing + SPL verification flow and key replacement steps.
configs/AM62LX/AM62LX_linux_toc.txt Ensures the new secure-boot page is included in the AM62LX doc build.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
@Pratham-T Pratham-T force-pushed the ubootdocs branch 2 times, most recently from ebae163 to 9769def Compare April 23, 2026 16:15
@Pratham-T Pratham-T changed the title feat(linux): Add secure boot using U-Boot verified boot for AM62LX Add Secure Boot documentation for AM62Lx Apr 23, 2026
Comment thread source/linux/Foundational_Components_Secure_Boot.rst Outdated
Comment thread source/linux/Foundational_Components_Secure_Boot.rst Outdated
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst Outdated
Comment thread source/linux/Foundational_Components_Secure_Boot.rst
@Pratham-T Pratham-T force-pushed the ubootdocs branch 2 times, most recently from 33ce80a to d1c50f5 Compare April 24, 2026 10:31
@Pratham-T
Copy link
Copy Markdown
Contributor Author

Addressed other Vale comments.

Comment thread source/linux/Foundational_Components/U-Boot/UG-Secure-Boot.rst
Secure boot page is missing AM62L specific documentation. Due to very
large difference with other SoCs in the boot flow, this contains many
differences in documentation as well. This commit adds any AM62L
specific information in the Secure Boot section, and adds it to its TOC.

Signed-off-by: T Pratham <t-pratham@ti.com>
Changes the indentation to 3 spaces, adds :file: and :code: directive to
appropriate places, and wrap long lines to 80 characters. While here,
also update the name "U-Boot" to have a consistent case everywhere, and
update ATF to TF-A.

Signed-off-by: T Pratham <t-pratham@ti.com>
Add a new page in the U-Boot user guide documenting secure boot
enablement using U-Boot's verified boot framework in AM62LX.

For AM62LX, u-boot.img signing and verification has been moved to
leverage the mechanisms provided in U-Boot from using HSM core in other
K3 devices. This page aims to address this change in AM62LX.

Signed-off-by: T Pratham <t-pratham@ti.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.