blob: 3dadbc54b58b115158f9542be00170a410b56a31 [file] [log] [blame]
Ilias Apalodimas17aea462024-08-30 14:45:27 +03001menu "UEFI Support"
2
Alexander Graf67ee7052016-03-04 01:10:07 +01003config EFI_LOADER
Heinrich Schuchardt96b236a2019-05-11 10:27:58 +02004 bool "Support running UEFI applications"
Tom Rini86216cc2024-11-15 10:53:58 -06005 depends on ( \
Heinrich Schuchardt30c3a5f2019-11-19 04:19:09 +01006 ARM && (SYS_CPU = arm1136 || \
7 SYS_CPU = arm1176 || \
8 SYS_CPU = armv7 || \
9 SYS_CPU = armv8) || \
Heinrich Schuchardt79cea672019-11-17 10:44:16 +010010 X86 || RISCV || SANDBOX)
Tom Rinidd487d22025-01-14 19:22:10 -060011 # We have not fully removed the requirement for some block device
12 depends on BLK
Alexander Graf5e247172018-01-24 14:54:21 +010013 # We need EFI_STUB_64BIT to be set on x86_64 with EFI_STUB
14 depends on !EFI_STUB || !X86_64 || EFI_STUB_64BIT
15 # We need EFI_STUB_32BIT to be set on x86_32 with EFI_STUB
16 depends on !EFI_STUB || !X86 || X86_64 || EFI_STUB_32BIT
Simon Glass49a643b2021-11-03 21:09:07 -060017 depends on !EFI_APP
Heinrich Schuchardtac212dc2019-11-20 18:48:02 +010018 default y if !ARM || SYS_CPU = armv7 || SYS_CPU = armv8
Heinrich Schuchardt013aabb2022-05-02 06:27:00 +020019 select CHARSET
Tom Rini7d3684a2023-01-16 15:46:49 -050020 # We need to send DM events, dynamically, in the EFI block driver
AKASHI Takahiro2381f2e2022-04-19 10:05:12 +090021 select DM_EVENT
22 select EVENT_DYNAMIC
Adam Ford70c8f052018-02-06 12:14:28 -060023 select LIB_UUID
Sughosh Ganufa0ddab2024-10-15 21:07:06 +053024 select LMB
Tom Rini86216cc2024-11-15 10:53:58 -060025 select OF_LIBFDT
AKASHI Takahiroae18a672022-04-19 10:01:56 +090026 imply PARTITION_UUIDS
Heinrich Schuchardt9e18bfa2019-01-22 21:35:23 +010027 select REGEX
Heinrich Schuchardt6c46aaa2020-03-21 20:45:50 +010028 imply FAT
29 imply FAT_WRITE
Gabriel Dalimonte4b93d6e2025-02-17 13:26:44 -050030 imply FAT_RENAME
Heinrich Schuchardt29db4c52019-12-04 22:58:58 +010031 imply USB_KEYBOARD_FN_KEYS
Heinrich Schuchardt8a7514a2020-01-15 00:49:35 +010032 imply VIDEO_ANSI
Alexander Graf67ee7052016-03-04 01:10:07 +010033 help
Heinrich Schuchardt96b236a2019-05-11 10:27:58 +020034 Select this option if you want to run UEFI applications (like GNU
35 GRUB or iPXE) on top of U-Boot. If this option is enabled, U-Boot
36 will expose the UEFI API to a loaded application, enabling it to
37 reuse U-Boot's device drivers.
Alexander Graf7c00a3c2016-05-11 18:25:48 +020038
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +020039if EFI_LOADER
40
AKASHI Takahiro9b08b9a2024-01-17 13:39:41 +090041config EFI_BINARY_EXEC
42 bool "Execute UEFI binary"
43 default y
44 help
45 Select this option if you want to execute the UEFI binary after
46 loading it with U-Boot load commands or other methods.
47 You may enable CMD_BOOTEFI_BINARY so that you can use bootefi
48 command to do that.
49
Ilias Apalodimas17aea462024-08-30 14:45:27 +030050config EFI_SECURE_BOOT
51 bool "Enable EFI secure boot support"
52 depends on EFI_LOADER && FIT_SIGNATURE
53 select HASH
54 select SHA256
55 select RSA
56 select RSA_VERIFY_WITH_PKEY
57 select IMAGE_SIGN_INFO
58 select ASYMMETRIC_KEY_TYPE
59 select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
60 select X509_CERTIFICATE_PARSER
61 select PKCS7_MESSAGE_PARSER
62 select PKCS7_VERIFY
63 select MSCODE_PARSER
64 select EFI_SIGNATURE_SUPPORT
65 help
66 Select this option to enable EFI secure boot support.
67 Once SecureBoot mode is enforced, any EFI binary can run only if
68 it is signed with a trusted key. To do that, you need to install,
69 at least, PK, KEK and db.
70
71config EFI_SIGNATURE_SUPPORT
72 bool
73
74menu "UEFI services"
75
76config EFI_GET_TIME
77 bool "GetTime() runtime service"
78 depends on DM_RTC
Heinrich Schuchardtb2625e82021-01-15 19:02:50 +010079 default y
80 help
Ilias Apalodimas17aea462024-08-30 14:45:27 +030081 Provide the GetTime() runtime service at boottime. This service
82 can be used by an EFI application to read the real time clock.
83
84config EFI_SET_TIME
85 bool "SetTime() runtime service"
86 depends on EFI_GET_TIME
87 default y if ARCH_QEMU || SANDBOX
88 help
89 Provide the SetTime() runtime service at boottime. This service
90 can be used by an EFI application to adjust the real time clock.
91
92config EFI_HAVE_RUNTIME_RESET
93 # bool "Reset runtime service is available"
94 bool
95 default y
96 depends on ARCH_BCM283X || FSL_LAYERSCAPE || PSCI_RESET || \
97 SANDBOX || SYSRESET_SBI || SYSRESET_X86
98
99endmenu
100
101menu "UEFI Variables"
Heinrich Schuchardtb2625e82021-01-15 19:02:50 +0100102
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +0200103choice
104 prompt "Store for non-volatile UEFI variables"
105 default EFI_VARIABLE_FILE_STORE
106 help
107 Select where non-volatile UEFI variables shall be stored.
108
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +0000109config EFI_VARIABLE_FILE_STORE
110 bool "Store non-volatile UEFI variables as file"
111 depends on FAT_WRITE
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +0200112 help
113 Select this option if you want non-volatile UEFI variables to be
114 stored as file /ubootefi.var on the EFI system partition.
115
Ilias Apalodimas86ba8692024-04-18 15:54:50 +0300116config EFI_RT_VOLATILE_STORE
117 bool "Allow variable runtime services in volatile storage (e.g RAM)"
118 depends on EFI_VARIABLE_FILE_STORE
119 help
120 When EFI variables are stored on file we don't allow SetVariableRT,
Michal Simek0ac27982024-07-16 15:56:51 +0200121 since the OS doesn't know how to write that file. At the same time
Ilias Apalodimas86ba8692024-04-18 15:54:50 +0300122 we copy runtime variables in DRAM and support GetVariableRT
123
124 Enable this option to allow SetVariableRT on the RAM backend of
125 the EFI variable storage. The OS will be responsible for syncing
126 the RAM contents to the file, otherwise any changes made during
127 runtime won't persist reboots.
128 Authenticated variables are not supported. Note that this will
129 violate the EFI spec since writing auth variables will return
130 EFI_INVALID_PARAMETER
131
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +0200132config EFI_MM_COMM_TEE
Abdellatif El Khlifi431c7b52023-08-04 14:33:44 +0100133 bool "UEFI variables storage service via the trusted world"
Tom Rini74aad482023-07-24 19:51:05 -0400134 depends on OPTEE
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +0000135 help
Abdellatif El Khlifi431c7b52023-08-04 14:33:44 +0100136 Allowing access to the MM SP services (SPs such as StandAlonneMM, smm-gateway).
137 When using the u-boot OP-TEE driver, StandAlonneMM is supported.
138 When using the u-boot FF-A driver any MM SP is supported.
139
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +0200140 If OP-TEE is present and running StandAloneMM, dispatch all UEFI
141 variable related operations to that. The application will verify,
142 authenticate and store the variables on an RPMB.
143
Abdellatif El Khlifi431c7b52023-08-04 14:33:44 +0100144 When ARM_FFA_TRANSPORT is used, dispatch all UEFI variable related
145 operations to the MM SP running in the secure world.
146 A door bell mechanism is used to notify the SP when there is data in the shared
147 MM buffer. The data is copied by u-boot to the shared buffer before issuing
148 the door bell event.
149
150config FFA_SHARED_MM_BUF_SIZE
151 int "Memory size of the shared MM communication buffer"
152 depends on EFI_MM_COMM_TEE && ARM_FFA_TRANSPORT
153 help
154 This defines the size in bytes of the memory area reserved for the shared
155 buffer used for communication between the MM feature in U-Boot and
156 the MM SP in secure world.
157 The size of the memory region must be a multiple of the size of the maximum
158 translation granule size that is specified in the ID_AA64MMFR0_EL1 System register.
159 It is assumed that the MM SP knows the size of the shared MM communication buffer.
160
161config FFA_SHARED_MM_BUF_OFFSET
162 int "Data offset in the shared MM communication buffer"
163 depends on EFI_MM_COMM_TEE && ARM_FFA_TRANSPORT
164 help
165 This defines the offset in bytes of the data read or written to in the shared
166 buffer by the MM SP.
167
168config FFA_SHARED_MM_BUF_ADDR
169 hex "Define the address of the shared MM communication buffer"
170 depends on EFI_MM_COMM_TEE && ARM_FFA_TRANSPORT
171 help
172 This defines the address of the shared MM communication buffer
173 used for communication between the MM feature in U-Boot and
174 the MM SP in secure world.
175 It is assumed that the MM SP knows the address of the shared MM communication buffer.
176
Tom Saeger79696ce2022-03-22 15:21:10 -0600177config EFI_VARIABLE_NO_STORE
178 bool "Don't persist non-volatile UEFI variables"
179 help
180 If you choose this option, non-volatile variables cannot be persisted.
181 You could still provide non-volatile variables via
182 EFI_VARIABLES_PRESEED.
183
Heinrich Schuchardt41bc6012020-07-14 19:18:33 +0200184endchoice
Heinrich Schuchardt09a8d502020-03-19 18:21:58 +0000185
Heinrich Schuchardt4b7d5c12020-07-14 21:25:28 +0200186config EFI_VARIABLES_PRESEED
187 bool "Initial values for UEFI variables"
Tom Saeger79696ce2022-03-22 15:21:10 -0600188 depends on !EFI_MM_COMM_TEE
Heinrich Schuchardt4b7d5c12020-07-14 21:25:28 +0200189 help
190 Include a file with the initial values for non-volatile UEFI variables
191 into the U-Boot binary. If this configuration option is set, changes
192 to authentication related variables (PK, KEK, db, dbx) are not
193 allowed.
194
195if EFI_VARIABLES_PRESEED
196
197config EFI_VAR_SEED_FILE
198 string "File with initial values of non-volatile UEFI variables"
Michal Simekc44f36f2024-04-16 08:55:17 +0200199 default "ubootefi.var"
Heinrich Schuchardt4b7d5c12020-07-14 21:25:28 +0200200 help
201 File with initial values of non-volatile UEFI variables. The file must
202 be in the same format as the storage in the EFI system partition. The
203 easiest way to create it is by setting the non-volatile variables in
204 U-Boot. If a relative file path is used, it is relative to the source
205 directory.
206
207endif
208
Heinrich Schuchardt12f18612020-12-20 11:05:38 +0100209config EFI_VAR_BUF_SIZE
210 int "Memory size of the UEFI variable store"
Ilias Apalodimasc1a8e6d2023-11-06 17:47:53 +0200211 default 131072
Heinrich Schuchardt12f18612020-12-20 11:05:38 +0100212 range 4096 2147483647
213 help
214 This defines the size in bytes of the memory area reserved for keeping
215 UEFI variables.
216
Ilias Apalodimasc1a8e6d2023-11-06 17:47:53 +0200217 When using StandAloneMM (CONFIG_EFI_MM_COMM_TEE=y) is used the
218 available size for storing variables is defined in
219 PcdFlashNvStorageVariableSize.
220 That value is probed at runtime from U-Boot. In that case,
221 EFI_VAR_BUF_SIZE represents the memory U-Boot reserves to present
222 runtime variables to the OS.
Heinrich Schuchardt12f18612020-12-20 11:05:38 +0100223
Ilias Apalodimasc1a8e6d2023-11-06 17:47:53 +0200224 Minimum 4096, default 131072
Heinrich Schuchardt12f18612020-12-20 11:05:38 +0100225
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300226config EFI_PLATFORM_LANG_CODES
227 string "Language codes supported by firmware"
228 default "en-US"
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +0200229 help
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300230 This value is used to initialize the PlatformLangCodes variable. Its
231 value is a semicolon (;) separated list of language codes in native
232 RFC 4646 format, e.g. "en-US;de-DE". The first language code is used
233 to initialize the PlatformLang variable.
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +0200234
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300235endmenu
Heinrich Schuchardtf2856ad2019-05-31 22:56:02 +0200236
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300237menu "Capsule support"
Jan Kiszkad4d0fec2023-01-18 22:24:59 +0100238
AKASHI Takahiro473d9b32020-11-17 09:27:55 +0900239config EFI_HAVE_CAPSULE_SUPPORT
240 bool
241
242config EFI_RUNTIME_UPDATE_CAPSULE
243 bool "UpdateCapsule() runtime service"
AKASHI Takahiro473d9b32020-11-17 09:27:55 +0900244 select EFI_HAVE_CAPSULE_SUPPORT
245 help
246 Select this option if you want to use UpdateCapsule and
247 QueryCapsuleCapabilities API's.
248
AKASHI Takahiro45b819542020-11-17 09:27:56 +0900249config EFI_CAPSULE_ON_DISK
250 bool "Enable capsule-on-disk support"
Masami Hiramatsuff744862022-03-21 22:37:56 +0900251 depends on SYSRESET
AKASHI Takahiro45b819542020-11-17 09:27:56 +0900252 select EFI_HAVE_CAPSULE_SUPPORT
AKASHI Takahiro45b819542020-11-17 09:27:56 +0900253 help
254 Select this option if you want to use capsule-on-disk feature,
255 that is, capsules can be fetched and executed from files
256 under a specific directory on UEFI system partition instead of
257 via UpdateCapsule API.
258
Ilias Apalodimasa38d0cb2021-06-29 07:55:51 +0300259config EFI_IGNORE_OSINDICATIONS
260 bool "Ignore OsIndications for CapsuleUpdate on-disk"
261 depends on EFI_CAPSULE_ON_DISK
Ilias Apalodimas44fa8ff2024-06-20 23:15:31 +0300262 default y if !EFI_RT_VOLATILE_STORE
Ilias Apalodimasa38d0cb2021-06-29 07:55:51 +0300263 help
264 There are boards where U-Boot does not support SetVariable at runtime.
265 Select this option if you want to use the capsule-on-disk feature
266 without setting the EFI_OS_INDICATIONS_FILE_CAPSULE_DELIVERY_SUPPORTED
267 flag in variable OsIndications.
268
AKASHI Takahiro45b819542020-11-17 09:27:56 +0900269config EFI_CAPSULE_ON_DISK_EARLY
270 bool "Initiate capsule-on-disk at U-Boot boottime"
271 depends on EFI_CAPSULE_ON_DISK
AKASHI Takahiro45b819542020-11-17 09:27:56 +0900272 help
273 Normally, without this option enabled, capsules will be
274 executed only at the first time of invoking one of efi command.
275 If this option is enabled, capsules will be enforced to be
276 executed as part of U-Boot initialisation so that they will
277 surely take place whatever is set to distro_bootcmd.
278
Caleb Connolly3744e472024-08-30 13:34:33 +0100279config EFI_CAPSULE_NAMESPACE_GUID
280 string "Namespace for dynamic capsule GUIDs"
281 # v4 UUID as a default for upstream U-Boot boards
282 default "8c9f137e-91dc-427b-b2d6-b420faebaf2a"
283 depends on EFI_HAVE_CAPSULE_SUPPORT
284 help
285 Define the namespace or "salt" GUID used to generate the per-image
286 GUIDs. This should be a GUID in the standard 8-4-4-4-12 format.
287
288 Device vendors are expected to generate their own namespace GUID
289 to avoid conflicts with upstream/community images.
290
AKASHI Takahiro7ff3f3c2020-11-17 09:28:00 +0900291config EFI_CAPSULE_FIRMWARE
292 bool
AKASHI Takahiro7ff3f3c2020-11-17 09:28:00 +0900293
AKASHI Takahiro0d963782020-11-30 18:12:11 +0900294config EFI_CAPSULE_FIRMWARE_MANAGEMENT
295 bool "Capsule: Firmware Management Protocol"
296 depends on EFI_HAVE_CAPSULE_SUPPORT
297 default y
298 help
299 Select this option if you want to enable capsule-based
300 firmware update using Firmware Management Protocol.
301
Ilias Apalodimas967334d2021-06-22 17:38:52 +0300302config EFI_CAPSULE_FIRMWARE_FIT
303 bool "FMP driver for FIT images"
304 depends on FIT
305 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
306 select UPDATE_FIT
307 select DFU
308 select EFI_CAPSULE_FIRMWARE
309 help
310 Select this option if you want to enable firmware management protocol
311 driver for FIT image
312
313config EFI_CAPSULE_FIRMWARE_RAW
314 bool "FMP driver for raw images"
315 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
316 depends on SANDBOX || (!SANDBOX && !EFI_CAPSULE_FIRMWARE_FIT)
317 select DFU_WRITE_ALT
318 select DFU
319 select EFI_CAPSULE_FIRMWARE
320 help
321 Select this option if you want to enable firmware management protocol
322 driver for raw image
323
Sughosh Ganu586bb982020-12-30 19:27:09 +0530324config EFI_CAPSULE_AUTHENTICATE
325 bool "Update Capsule authentication"
326 depends on EFI_CAPSULE_FIRMWARE
327 depends on EFI_CAPSULE_ON_DISK
328 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
Alexandru Gagniuc1a69f4d2021-05-24 14:28:57 -0500329 select HASH
Sughosh Ganu586bb982020-12-30 19:27:09 +0530330 select SHA256
331 select RSA
332 select RSA_VERIFY
333 select RSA_VERIFY_WITH_PKEY
334 select X509_CERTIFICATE_PARSER
335 select PKCS7_MESSAGE_PARSER
336 select PKCS7_VERIFY
Sughosh Ganu3f5318f2021-04-07 17:23:31 +0530337 select IMAGE_SIGN_INFO
Masahisa Kojima915e4272021-05-14 09:53:36 +0900338 select EFI_SIGNATURE_SUPPORT
Sughosh Ganu586bb982020-12-30 19:27:09 +0530339 help
340 Select this option if you want to enable capsule
341 authentication
342
Etienne Carriere6326e912023-02-16 18:21:41 +0100343config EFI_CAPSULE_MAX
344 int "Max value for capsule index"
345 default 15
346 range 0 65535
347 help
348 Select the max capsule index value used for capsule report
349 variables. This value is used to create CapsuleMax variable.
350
Jonathan Humphreys0d6f8412024-06-13 15:27:53 -0500351config EFI_CAPSULE_CRT_FILE
352 string "Path to the EFI capsule public key certificate"
Sughosh Ganu3f46bcc2023-08-22 23:10:05 +0530353 depends on EFI_CAPSULE_AUTHENTICATE
354 help
Jonathan Humphreys0d6f8412024-06-13 15:27:53 -0500355 Provides the path to the EFI capsule public key certificate that
356 corresponds to the capsule signing key. This certificate will be used
357 to generate the EFI capsule ESL (signature list file) that gets
358 embedded in the platform's device tree and used for capsule
359 authentication at the time of capsule update.
Sughosh Ganu3f46bcc2023-08-22 23:10:05 +0530360
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300361endmenu
362
363menu "UEFI protocol support"
364
Heinrich Schuchardt3db35912019-05-11 09:53:33 +0200365config EFI_DEVICE_PATH_TO_TEXT
366 bool "Device path to text protocol"
367 default y
368 help
369 The device path to text protocol converts device nodes and paths to
370 human readable strings.
371
Heinrich Schuchardt1cb1a9d2021-01-16 09:44:25 +0100372config EFI_DEVICE_PATH_UTIL
373 bool "Device path utilities protocol"
374 default y
375 help
376 The device path utilities protocol creates and manipulates device
377 paths and device nodes. It is required to run the EFI Shell.
378
Heinrich Schuchardt0404b282021-01-16 09:33:24 +0100379config EFI_DT_FIXUP
380 bool "Device tree fixup protocol"
381 depends on !GENERATE_ACPI_TABLE
382 default y
383 help
384 The EFI device-tree fix-up protocol provides a function to let the
385 firmware apply fix-ups. This may be used by boot loaders.
386
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200387config EFI_LOADER_HII
388 bool "HII protocols"
Heinrich Schuchardte884ea42025-01-17 21:34:01 +0100389 default y if !HAS_BOARD_SIZE_LIMIT
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200390 help
391 The Human Interface Infrastructure is a complicated framework that
392 allows UEFI applications to draw fancy menus and hook strings using
393 a translation framework.
394
395 U-Boot implements enough of its features to be able to run the UEFI
396 Shell, but not more than that.
397
Heinrich Schuchardtb3258842019-05-16 07:52:58 +0200398config EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200399 bool "Unicode collation protocol"
400 default y
401 help
402 The Unicode collation protocol is used for lexical comparisons. It is
403 required to run the UEFI shell.
404
Heinrich Schuchardtb3258842019-05-16 07:52:58 +0200405if EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200406
Heinrich Schuchardt58ddcd32018-09-04 19:34:56 +0200407config EFI_UNICODE_CAPITALIZATION
408 bool "Support Unicode capitalization"
Heinrich Schuchardte884ea42025-01-17 21:34:01 +0100409 default y if !HAS_BOARD_SIZE_LIMIT
Heinrich Schuchardt58ddcd32018-09-04 19:34:56 +0200410 help
411 Select this option to enable correct handling of the capitalization of
412 Unicode codepoints in the range 0x0000-0xffff. If this option is not
413 set, only the the correct handling of the letters of the codepage
414 used by the FAT file system is ensured.
415
Heinrich Schuchardt532fec72019-05-08 23:24:26 +0200416endif
417
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530418config EFI_RNG_PROTOCOL
419 bool "EFI_RNG_PROTOCOL support"
420 depends on DM_RNG
Peter Robinsonfa497522020-04-01 11:15:01 +0100421 default y
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530422 help
Heinrich Schuchardt7bcc7fc2020-02-14 23:28:58 +0100423 Provide a EFI_RNG_PROTOCOL implementation using the hardware random
424 number generator of the platform.
Sughosh Ganu7064a5d2019-12-29 00:01:05 +0530425
Ilias Apalodimas590fef62020-11-11 11:18:11 +0200426config EFI_TCG2_PROTOCOL
427 bool "EFI_TCG2_PROTOCOL support"
Ilias Apalodimascc29c9b2021-05-11 14:40:58 +0300428 default y
Ilias Apalodimas590fef62020-11-11 11:18:11 +0200429 depends on TPM_V2
Ilias Apalodimascc29c9b2021-05-11 14:40:58 +0300430 select SHA1
431 select SHA256
Ilias Apalodimascc29c9b2021-05-11 14:40:58 +0300432 select SHA384
433 select SHA512
Masahisa Kojima70be5a62021-05-26 12:09:58 +0900434 select HASH
Masahisa Kojimacd1fe7d2021-10-26 17:27:24 +0900435 select SMBIOS_PARSER
Ilias Apalodimas590fef62020-11-11 11:18:11 +0200436 help
437 Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
438 of the platform.
439
Etienne Carriereb9064352023-02-16 17:29:48 +0100440config EFI_TCG2_PROTOCOL_MEASURE_DTB
441 bool "Measure DTB with EFI_TCG2_PROTOCOL"
442 depends on EFI_TCG2_PROTOCOL
443 help
444 When enabled, the DTB image passed to the booted EFI image is
445 measured using the EFI TCG2 protocol. Do not enable this feature if
Heinrich Schuchardt204ed9f2025-05-18 08:43:44 +0200446 the passed DTB contains data that changes across platform reboots
447 and cannot be used for a predictable measurement. Otherwise, this
448 feature allows for better measurement of the system boot sequence.
Etienne Carriereb9064352023-02-16 17:29:48 +0100449
Ilias Apalodimas3510ba72020-02-21 09:55:45 +0200450config EFI_LOAD_FILE2_INITRD
451 bool "EFI_FILE_LOAD2_PROTOCOL for Linux initial ramdisk"
Ilias Apalodimasb307e3d2021-03-17 21:55:00 +0200452 default y
Ilias Apalodimas3510ba72020-02-21 09:55:45 +0200453 help
Ilias Apalodimasb307e3d2021-03-17 21:55:00 +0200454 Linux v5.7 and later can make use of this option. If the boot option
455 selected by the UEFI boot manager specifies an existing file to be used
456 as initial RAM disk, a Linux specific Load File2 protocol will be
457 installed and Linux 5.7+ will ignore any initrd=<ramdisk> command line
458 argument.
Ilias Apalodimas3510ba72020-02-21 09:55:45 +0200459
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300460config EFI_RISCV_BOOT_PROTOCOL
461 bool "RISCV_EFI_BOOT_PROTOCOL support"
462 default y
463 depends on RISCV
AKASHI Takahiro1900a3b2020-04-14 11:51:38 +0900464 help
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300465 The EFI_RISCV_BOOT_PROTOCOL is used to transfer the boot hart ID
466 to the next boot stage. It should be enabled as it is meant to
467 replace the transfer via the device-tree. The latter is not
468 possible on systems using ACPI.
AKASHI Takahiro1900a3b2020-04-14 11:51:38 +0900469
Adriano Cordova9debc902024-12-04 00:05:25 -0300470config EFI_IP4_CONFIG2_PROTOCOL
471 bool "EFI_IP4_CONFIG2_PROTOCOL support"
472 default y if ARCH_QEMU || SANDBOX
473 depends on NET || NET_LWIP
474 help
475 Provides an implementation of the EFI_IP4_CONFIG2_PROTOCOL, this
476 protocol can be used to set and get the current ip address and
477 other network information.
478
Adriano Cordovae9b19eb2024-12-04 00:05:26 -0300479config EFI_HTTP_PROTOCOL
480 bool "EFI_HTTP_PROTOCOL support"
481 default y if ARCH_QEMU || SANDBOX
482 depends on WGET
483 help
484 Provides an EFI HTTP driver implementing the EFI_HTTP_PROTOCOL. and
485 EFI_HTTP_SERVICE_BINDING_PROTOCOL.
486
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300487endmenu
488
489menu "Misc options"
490config EFI_LOADER_BOUNCE_BUFFER
491 bool "EFI Applications use bounce buffers for DMA operations"
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300492 help
493 Some hardware does not support DMA to full 64bit addresses. For this
494 hardware we can create a bounce buffer so that payloads don't have to
495 worry about platform details.
496
497config EFI_GRUB_ARM32_WORKAROUND
498 bool "Workaround for GRUB on 32bit ARM"
499 default n if ARCH_BCM283X || ARCH_SUNXI || ARCH_QEMU
500 default y
501 depends on ARM && !ARM64
502 help
503 GRUB prior to version 2.04 requires U-Boot to disable caches. This
504 workaround currently is also needed on systems with caches that
505 cannot be managed via CP15.
Masahisa Kojima915e4272021-05-14 09:53:36 +0900506
Jose Marinhoebb61ee2021-03-02 17:26:38 +0000507config EFI_ESRT
508 bool "Enable the UEFI ESRT generation"
509 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
510 default y
511 help
512 Enabling this option creates the ESRT UEFI system table.
513
Jose Marinhoff72cb32021-12-23 14:51:07 +0000514config EFI_ECPT
515 bool "Enable the UEFI ECPT generation"
516 default y
517 help
518 Enabling this option created the ECPT UEFI table.
519
Vincent Stehléc53cec62022-12-16 17:55:04 +0100520config EFI_EBBR_2_1_CONFORMANCE
521 bool "Add the EBBRv2.1 conformance entry to the ECPT table"
Heinrich Schuchardt7cbf7452024-07-18 14:05:09 +0200522 depends on BOOTMETH_EFI_BOOTMGR
Jose Marinhoe3b7c9b2021-12-17 12:55:05 +0000523 depends on EFI_ECPT
524 depends on EFI_LOADER_HII
525 depends on EFI_RISCV_BOOT_PROTOCOL || !RISCV
526 depends on EFI_RNG_PROTOCOL || !DM_RNG
527 depends on EFI_UNICODE_COLLATION_PROTOCOL2
528 default y
529 help
Vincent Stehléc53cec62022-12-16 17:55:04 +0100530 Enabling this option adds the EBBRv2.1 conformance entry to the ECPT UEFI table.
Jose Marinhoe3b7c9b2021-12-17 12:55:05 +0000531
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300532config EFI_SCROLL_ON_CLEAR_SCREEN
533 bool "Avoid overwriting previous output on clear screen"
534 help
535 Instead of erasing the screen content when the console screen should
536 be cleared, emit blank new lines so that previous output is scrolled
537 out of sight rather than overwritten. On serial consoles this allows
538 to capture complete boot logs (except for interactive menus etc.)
539 and can ease debugging related issues.
540
541endmenu
542
543menu "EFI bootmanager"
544
545config EFI_BOOTMGR
546 bool "UEFI Boot Manager"
Sunil V L279d1c82022-01-28 20:48:44 +0530547 default y
Sunil V L279d1c82022-01-28 20:48:44 +0530548 help
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300549 Select this option if you want to select the UEFI binary to be booted
550 via UEFI variables Boot####, BootOrder, and BootNext. You should also
551 normally enable CMD_BOOTEFI_BOOTMGR so that the command is available.
Sunil V L279d1c82022-01-28 20:48:44 +0530552
Masahisa Kojima949c4412023-11-10 13:25:40 +0900553config EFI_HTTP_BOOT
554 bool "EFI HTTP Boot support"
Heinrich Schuchardtc7a6a802024-10-19 12:59:57 +0200555 depends on NET || NET_LWIP
556 select CMD_NET
Masahisa Kojima949c4412023-11-10 13:25:40 +0900557 select CMD_DNS
558 select CMD_WGET
559 select BLKMAP
560 help
561 Enabling this option adds EFI HTTP Boot support. It allows to
562 directly boot from network.
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300563endmenu
Masahisa Kojima949c4412023-11-10 13:25:40 +0900564
Simon Glassb343ee32024-09-26 23:59:31 +0200565config BOOTEFI_HELLO_COMPILE
566 bool "Compile a standard EFI hello world binary for testing"
567 default y
568 help
569 This compiles a standard EFI hello world application with U-Boot so
570 that it can be used with the test/py testing framework. This is useful
571 for testing that EFI is working at a basic level, and for bringing
572 up EFI support on a new architecture.
573
574 No additional space will be required in the resulting U-Boot binary
575 when this option is enabled.
576
Simon Glass8a4ee052024-11-07 14:31:41 -0700577config BOOTEFI_TESTAPP_COMPILE
578 bool "Compile an EFI test app for testing"
579 default y
580 help
581 This compiles an app designed for testing. It is packed into an image
582 by the test.py testing frame in the setup_efi_image() function.
583
584 No additional space will be required in the resulting U-Boot binary
585 when this option is enabled.
586
Heinrich Schuchardt0cbab582019-05-08 23:17:38 +0200587endif
Ilias Apalodimas17aea462024-08-30 14:45:27 +0300588
589source "lib/efi/Kconfig"
590
591endmenu