blob: 1681b37c49c28ddd9deb3ccff60c72d6a15ab806 [file] [log] [blame]
Alexander Graf67ee7052016-03-04 01:10:07 +01001config EFI_LOADER
Heinrich Schuchardt96b236a2019-05-11 10:27:58 +02002 bool "Support running UEFI applications"
Heinrich Schuchardt79cea672019-11-17 10:44:16 +01003 depends on OF_LIBFDT && ( \
Heinrich Schuchardt30c3a5f2019-11-19 04:19:09 +01004 ARM && (SYS_CPU = arm1136 || \
5 SYS_CPU = arm1176 || \
6 SYS_CPU = armv7 || \
7 SYS_CPU = armv8) || \
Heinrich Schuchardt79cea672019-11-17 10:44:16 +01008 X86 || RISCV || SANDBOX)
Alexander Graf5e247172018-01-24 14:54:21 +01009 # We need EFI_STUB_64BIT to be set on x86_64 with EFI_STUB
10 depends on !EFI_STUB || !X86_64 || EFI_STUB_64BIT
11 # We need EFI_STUB_32BIT to be set on x86_32 with EFI_STUB
12 depends on !EFI_STUB || !X86 || X86_64 || EFI_STUB_32BIT
Heinrich Schuchardtac212dc2019-11-20 18:48:02 +010013 default y if !ARM || SYS_CPU = armv7 || SYS_CPU = armv8
Adam Ford70c8f052018-02-06 12:14:28 -060014 select LIB_UUID
Adam Fordb10ba902018-02-06 12:43:56 -060015 select HAVE_BLOCK_DEVICE
Heinrich Schuchardt9e18bfa2019-01-22 21:35:23 +010016 select REGEX
Heinrich Schuchardt35550cc2018-04-29 23:37:12 +020017 imply CFB_CONSOLE_ANSI
Heinrich Schuchardt6c46aaa2020-03-21 20:45:50 +010018 imply FAT
19 imply FAT_WRITE
Heinrich Schuchardt29db4c52019-12-04 22:58:58 +010020 imply USB_KEYBOARD_FN_KEYS
Heinrich Schuchardt8a7514a2020-01-15 00:49:35 +010021 imply VIDEO_ANSI
Alexander Graf67ee7052016-03-04 01:10:07 +010022 help
Heinrich Schuchardt96b236a2019-05-11 10:27:58 +020023 Select this option if you want to run UEFI applications (like GNU
24 GRUB or iPXE) on top of U-Boot. If this option is enabled, U-Boot
25 will expose the UEFI API to a loaded application, enabling it to
26 reuse U-Boot's device drivers.
Alexander Graf7c00a3c2016-05-11 18:25:48 +020027
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +020028if EFI_LOADER
29
AKASHI Takahiro87942ac2020-10-29 13:47:45 +090030config EFI_SETUP_EARLY
31 bool
32 default n
33
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +020034choice
35 prompt "Store for non-volatile UEFI variables"
36 default EFI_VARIABLE_FILE_STORE
37 help
38 Select where non-volatile UEFI variables shall be stored.
39
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +000040config EFI_VARIABLE_FILE_STORE
41 bool "Store non-volatile UEFI variables as file"
42 depends on FAT_WRITE
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +020043 help
44 Select this option if you want non-volatile UEFI variables to be
45 stored as file /ubootefi.var on the EFI system partition.
46
47config EFI_MM_COMM_TEE
48 bool "UEFI variables storage service via OP-TEE"
49 depends on OPTEE
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +000050 help
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +020051 If OP-TEE is present and running StandAloneMM, dispatch all UEFI
52 variable related operations to that. The application will verify,
53 authenticate and store the variables on an RPMB.
54
55endchoice
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +000056
Heinrich Schuchardt4b7d5c12020-07-14 21:25:28 +020057config EFI_VARIABLES_PRESEED
58 bool "Initial values for UEFI variables"
59 depends on EFI_VARIABLE_FILE_STORE
60 help
61 Include a file with the initial values for non-volatile UEFI variables
62 into the U-Boot binary. If this configuration option is set, changes
63 to authentication related variables (PK, KEK, db, dbx) are not
64 allowed.
65
66if EFI_VARIABLES_PRESEED
67
68config EFI_VAR_SEED_FILE
69 string "File with initial values of non-volatile UEFI variables"
70 default ubootefi.var
71 help
72 File with initial values of non-volatile UEFI variables. The file must
73 be in the same format as the storage in the EFI system partition. The
74 easiest way to create it is by setting the non-volatile variables in
75 U-Boot. If a relative file path is used, it is relative to the source
76 directory.
77
78endif
79
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +020080config EFI_GET_TIME
81 bool "GetTime() runtime service"
82 depends on DM_RTC
83 default y
84 help
85 Provide the GetTime() runtime service at boottime. This service
86 can be used by an EFI application to read the real time clock.
87
88config EFI_SET_TIME
89 bool "SetTime() runtime service"
90 depends on EFI_GET_TIME
Heinrich Schuchardt8da46252020-11-21 20:52:18 +010091 default y if ARCH_QEMU || SANDBOX
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +020092 default n
93 help
94 Provide the SetTime() runtime service at boottime. This service
95 can be used by an EFI application to adjust the real time clock.
96
AKASHI Takahiro473d9b32020-11-17 09:27:55 +090097config EFI_HAVE_CAPSULE_SUPPORT
98 bool
99
100config EFI_RUNTIME_UPDATE_CAPSULE
101 bool "UpdateCapsule() runtime service"
102 default n
103 select EFI_HAVE_CAPSULE_SUPPORT
104 help
105 Select this option if you want to use UpdateCapsule and
106 QueryCapsuleCapabilities API's.
107
Heinrich Schuchardt3db35912019-05-11 09:53:33 +0200108config EFI_DEVICE_PATH_TO_TEXT
109 bool "Device path to text protocol"
110 default y
111 help
112 The device path to text protocol converts device nodes and paths to
113 human readable strings.
114
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200115config EFI_LOADER_HII
116 bool "HII protocols"
117 default y
118 help
119 The Human Interface Infrastructure is a complicated framework that
120 allows UEFI applications to draw fancy menus and hook strings using
121 a translation framework.
122
123 U-Boot implements enough of its features to be able to run the UEFI
124 Shell, but not more than that.
125
Heinrich Schuchardtb3258842019-05-16 07:52:58 +0200126config EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200127 bool "Unicode collation protocol"
128 default y
129 help
130 The Unicode collation protocol is used for lexical comparisons. It is
131 required to run the UEFI shell.
132
Heinrich Schuchardtb3258842019-05-16 07:52:58 +0200133if EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200134
Heinrich Schuchardt58ddcd32018-09-04 19:34:56 +0200135config EFI_UNICODE_CAPITALIZATION
136 bool "Support Unicode capitalization"
Heinrich Schuchardt58ddcd32018-09-04 19:34:56 +0200137 default y
138 help
139 Select this option to enable correct handling of the capitalization of
140 Unicode codepoints in the range 0x0000-0xffff. If this option is not
141 set, only the the correct handling of the letters of the codepage
142 used by the FAT file system is ensured.
143
Heinrich Schuchardt18ed8cf2019-05-16 18:19:00 +0200144config EFI_UNICODE_COLLATION_PROTOCOL
145 bool "Deprecated version of the Unicode collation protocol"
146 default n
147 help
148 In EFI 1.10 a version of the Unicode collation protocol using ISO
149 639-2 language codes existed. This protocol is not part of the UEFI
150 specification any longer. Unfortunately it is required to run the
151 UEFI Self Certification Test (SCT) II, version 2.6, 2017.
152
153 Choose this option for testing only. It is bound to be removed.
154
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200155endif
156
Alexander Graf7c00a3c2016-05-11 18:25:48 +0200157config EFI_LOADER_BOUNCE_BUFFER
158 bool "EFI Applications use bounce buffers for DMA operations"
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200159 depends on ARM64
Alexander Graf7c00a3c2016-05-11 18:25:48 +0200160 default n
161 help
162 Some hardware does not support DMA to full 64bit addresses. For this
163 hardware we can create a bounce buffer so that payloads don't have to
164 worry about platform details.
Alexander Graf44be5da2019-02-11 15:24:00 +0100165
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200166config EFI_PLATFORM_LANG_CODES
167 string "Language codes supported by firmware"
168 default "en-US"
Alexander Graf44be5da2019-02-11 15:24:00 +0100169 help
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200170 This value is used to initialize the PlatformLangCodes variable. Its
171 value is a semicolon (;) separated list of language codes in native
172 RFC 4646 format, e.g. "en-US;de-DE". The first language code is used
173 to initialize the PlatformLang variable.
Alexander Graf44be5da2019-02-11 15:24:00 +0100174
Heinrich Schuchardt05874fb2019-07-05 18:12:16 +0200175config EFI_HAVE_RUNTIME_RESET
176 # bool "Reset runtime service is available"
177 bool
178 default y
179 depends on ARCH_BCM283X || FSL_LAYERSCAPE || PSCI_RESET || SYSRESET_X86
180
Heinrich Schuchardt149d5d42019-07-22 22:04:36 +0200181config EFI_GRUB_ARM32_WORKAROUND
182 bool "Workaround for GRUB on 32bit ARM"
Heinrich Schuchardt33542332020-09-17 19:09:23 +0200183 default n if ARCH_QEMU
Heinrich Schuchardt149d5d42019-07-22 22:04:36 +0200184 default y
185 depends on ARM && !ARM64
186 help
187 GRUB prior to version 2.04 requires U-Boot to disable caches. This
188 workaround currently is also needed on systems with caches that
189 cannot be managed via CP15.
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530190
191config EFI_RNG_PROTOCOL
192 bool "EFI_RNG_PROTOCOL support"
193 depends on DM_RNG
Peter Robinsonfa497522020-04-01 11:15:01 +0100194 default y
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530195 help
Heinrich Schuchardt7bcc7fc2020-02-14 23:28:58 +0100196 Provide a EFI_RNG_PROTOCOL implementation using the hardware random
197 number generator of the platform.
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530198
Ilias Apalodimas590fef62020-11-11 11:18:11 +0200199config EFI_TCG2_PROTOCOL
200 bool "EFI_TCG2_PROTOCOL support"
201 depends on TPM_V2
202 help
203 Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
204 of the platform.
205
Ilias Apalodimas967650d2020-11-30 11:47:40 +0200206config EFI_TCG2_PROTOCOL_EVENTLOG_SIZE
207 int "EFI_TCG2_PROTOCOL EventLog size"
208 depends on EFI_TCG2_PROTOCOL
209 default 4096
210 help
211 Define the size of the EventLog for EFI_TCG2_PROTOCOL. Note that
212 this is going to be allocated twice. One for the eventlog it self
213 and one for the configuration table that is required from the spec
214
Ilias Apalodimas3510ba72020-02-21 09:55:45 +0200215config EFI_LOAD_FILE2_INITRD
216 bool "EFI_FILE_LOAD2_PROTOCOL for Linux initial ramdisk"
217 default n
218 help
219 Expose a EFI_FILE_LOAD2_PROTOCOL that the Linux UEFI stub can
220 use to load the initial ramdisk. Once this is enabled using
221 initrd=<ramdisk> will stop working.
222
223config EFI_INITRD_FILESPEC
224 string "initramfs path"
225 default "host 0:1 initrd"
226 depends on EFI_LOAD_FILE2_INITRD
227 help
228 Full path of the initramfs file, e.g. mmc 0:2 initramfs.cpio.gz.
229
AKASHI Takahiro1900a3b2020-04-14 11:51:38 +0900230config EFI_SECURE_BOOT
231 bool "Enable EFI secure boot support"
232 depends on EFI_LOADER
233 select SHA256
234 select RSA
235 select RSA_VERIFY_WITH_PKEY
236 select IMAGE_SIGN_INFO
237 select ASYMMETRIC_KEY_TYPE
238 select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
239 select X509_CERTIFICATE_PARSER
240 select PKCS7_MESSAGE_PARSER
AKASHI Takahiro14afd062020-07-21 19:35:22 +0900241 select PKCS7_VERIFY
AKASHI Takahiro1900a3b2020-04-14 11:51:38 +0900242 default n
243 help
244 Select this option to enable EFI secure boot support.
245 Once SecureBoot mode is enforced, any EFI binary can run only if
246 it is signed with a trusted key. To do that, you need to install,
247 at least, PK, KEK and db.
248
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200249endif