OP-TEE on i.MX6Q SDB Linux

2017-01-22

1. Get U-Boot

Compile:
  make ARCH=arm mx6qsabresd_optee_defconfig
  make ARCH=arm
Burn u-boot.imx to offset 0x400 of SD card:
  dd if=u-boot.imx of=/dev/sd[x] bs=512 seek=2 conv=sync conv=notrunc

2. Get Linux Kernel

Use NXP vendor kernel latest ga release 4.1.15.

Compile the Kernel:

make ARCH=arm imx_v7_defconfig
make ARCH=arm

Copy zImage and imx6q-sabresd.dtb to SD card.

If you are using 1.2G chip, you need to use imx6q-sabresd-ldo.dtb

In the dts file, default enabled psci. CAAM is disabled, this will be added in future.

3. OP-TEE OS

Code: https://github.com/OP-TEE/optee_os

How to Compile:

make PLATFORM=imx-mx6qsabresd ARCH=arm CFG_BUILT_IN_ARGS=y CFG_PAGEABLE_ADDR=0 CFG_NS_ENTRY_ADDR=0x12000000 CFG_DT_ADDR=0x18000000 CFG_DT=y CFG_PSCI_ARM32=y DEBUG=y CFG_TEE_CORE_LOG_LEVEL=4 CFG_BOOT_SYNC_CPU=n CFG_BOOT_SECONDARY_REQUEST=y
./mkimage -A arm -O linux -C none -a 0x4dffffe4 -e 0x4e000000 -d out/arm-plat-imx/core/tee.bin uTee

Recommend you use the mkimage from uboot/tools.

If do not want to see lots log, change CFG_TEE_CORE_LOG_LEVEL to 0.

4. OPTEE CLIENT

Code: https://github.com/OP-TEE/optee_client

make ARCH=arm

After compilation:
Copy all files in out/export/* to your rootfs root directory in your sd card.

5. OPTEE XTEST

Code: https://github.com/OP-TEE/optee_test

Compile, please change the directory to yours:

export TA_DEV_KIT_DIR=/home/Freenix/work/forfun/trustzone/optee_os/out/arm-plat-imx/export-ta_arm32
export OPTEE_CLIENT_EXPORT=/home/Freenix/work/forfun/trustzone/optee_client/out/export
export CROSS_COMPILE_HOST=arm-poky-linux-gnueabi-
export CROSS_COMPILE_TA=arm-poky-linux-gnueabi-
export CROSS_COMPILE=arm-poky-linux-gnueabi-

make ARCH=arm

After compilation:

Copy all xx.ta xx.elf in out/* to your sd card rootfs /lib/optee_armtz/
Copy xtest to your sd card rootfs /bin

6. Boot your optee os:

Using FAT:
    run loadfdt;
    run loadimage;
    fatload mmc [x]:[y] 0x20000000 uTee;
    run mmcargs;
    bootm 0x20000000 - ${fdt_addr};

Using TFTP:
    tftp 0x12000000 zImage;
    tftp 0x18000000 ${fdt_file};
    tftp 0x20000000 uTee;
    run netargs;
    bootm 0x20000000 - 0x18000000

    After linux boots up.
    Run: tee-supplicant &
    Run: xtest
    Now you'll see optee test case run.