TrustFence support in Digi Embedded Yocto is encapsulated in the TrustFence class. This class must be inherited into your project’s conf/local.conf configuration file to use TrustFence support:

conf/local.conf
INHERIT += "trustfence"

The TrustFence class configures a set of default configuration options, including:

  • Secure boot with signed images

  • U-Boot environment encryption

Trustfence features are only fully supported on closed devices. See Secure boot overview.