TrustFence support in Digi Embedded Yocto is encapsulated in the TrustFence class. This class must be inherited into your project’s conf/local.conf configuration file to use TrustFence support:

INHERIT += "trustfence"

The TrustFence class configures a set of default configuration options, including:

  • Secure boot with both signed and encrypted images

  • U-Boot environment encryption

  • Encrypted root filesystem

These defaults can be further modified by adding TRUSTFENCE configuration macros to your conf/local.conf file.

Trustfence features are only fully supported on closed devices. See Secure boot overview.