TrustFence support in Digi Embedded Yocto is encapsulated in the TrustFence class. This class must be inherited into your project’s conf/local.conf configuration file to use TrustFence support:
INHERIT += "trustfence"
The TrustFence class configures a set of default configuration options, including:
-
Secure boot with both signed and encrypted images
-
U-Boot environment encryption
-
Encrypted root filesystem
Default configuration can be further modified by adding TRUSTFENCE configuration macros to your conf/local.conf file.
Trustfence features are only fully supported on closed devices. See Secure boot overview. |