TrustFence support in Digi Embedded Yocto is encapsulated in the TrustFence class. This class must be inherited into your project’s conf/local.conf configuration file to use TrustFence support:

conf/local.conf
INHERIT += "trustfence"

The TrustFence class configures a set of default configuration options, including:

  • Secure boot with both signed and encrypted images

  • U-Boot environment encryption

  • Encrypted root file system

Trustfence features are only fully supported on closed devices. See Secure boot overview.