tree e006817db9467446e932182739c9f25bcb702c3c
parent cb87e8966c5da0e2ba3395cbd737d969c43cd3b5
author Soby Mathew <soby.mathew@arm.com> 1464098715 +0100
committer Soby Mathew <soby.mathew@arm.com> 1464974856 +0100

Allow dynamic overriding of ROTPK verification

A production ROM with TBB enabled must have the ability to boot test software
before a real ROTPK is deployed (e.g. manufacturing mode). Previously the
function plat_get_rotpk_info() must return a valid ROTPK for TBB to succeed.
This patch adds an additional bit `ROTPK_NOT_DEPLOYED` in the output `flags`
parameter from plat_get_rotpk_info(). If this bit is set, then the ROTPK
in certificate is used without verifying against the platform value.

Fixes ARM-software/tf-issues#381

Change-Id: Icbbffab6bff8ed76b72431ee21337f550d8fdbbb