xref: /openbmc/u-boot/doc/usage/measured_boot.rst (revision 9c452f1c)
1.. SPDX-License-Identifier: GPL-2.0+
2
3Measured Boot
4=====================
5
6U-Boot can perform a measured boot, the process of hashing various components
7of the boot process, extending the results in the TPM and logging the
8component's measurement in memory for the operating system to consume.
9
10Requirements
11---------------------
12
13* A hardware TPM 2.0 supported by the U-Boot drivers
14* CONFIG_TPM=y
15* CONFIG_MEASURED_BOOT=y
16* Device-tree configuration of the TPM device to specify the memory area
17  for event logging. The TPM device node must either contain a phandle to
18  a reserved memory region or "linux,sml-base" and "linux,sml-size"
19  indicating the address and size of the memory region. An example can be
20  found in arch/sandbox/dts/test.dts
21* The operating system must also be configured to use the memory regions
22  specified in the U-Boot device-tree in order to make use of the event
23  log.
24