4.6.1 Introduction
This section describes the operating environment, tools and, dependencies necessary for deploying OP-TEE. It describes the
installation based on the design and setup of one specific environment. Thereafter, users need to adapt the setup and deployment
for their specific environment and requirements.
It includes the following:
• Getting OP-TEE and relevant test program
• Compiling the image
• Prerequisites of integrating TEE binary image into the final images.
• Installation and usage steps for the TEE application and output obtained on the LS1021A platform.
The TEE used for this demo is Open Portable Trusted Execution Environment (OP-TEE).
This release supports the following features:
• Supports the LS1021A-TSN and LS1021A-IOT platforms
• Secure boot by SD boot
• TrustZone Controller enabled
• U-boot: v2016.09.
• Linux Kernel v4.1 with OP-TEE drivers backported from mainline kernel v4.11
• OP-TEE OS: v2.4.0
• OP-TEE Client: v2.4.0
• OP-TEE Test: v2.4.0.
For LS1021AIOT, the
nxp_ls1021aiot_optee_defconfig
configuration file does not support secure
boot, it just includes OP-TEE.
NOTE
4.6.2 Deployment architecture
The following figure shows the deployment architecture of OP-TEE on ARM TrustZone enabled SoCs.
NXP Semiconductors
Industrial features
Open Industrial User Guide, Rev. 1.8, 05/2020
User's Guide
55 / 199