blob: 2a64bc49c3ff8073ba4a0ceb2358374b97a2630f [file] [log] [blame]
Simon Glassa7d660b2015-08-22 18:31:19 -06001#
2# TPM subsystem configuration
3#
4
5menu "TPM support"
6
Simon Glass527a0722015-03-06 13:19:07 -07007config TPM_TIS_SANDBOX
8 bool "Enable sandbox TPM driver"
Simon Glassa7d660b2015-08-22 18:31:19 -06009 depends on SANDBOX
Simon Glass527a0722015-03-06 13:19:07 -070010 help
11 This driver emulates a TPM, providing access to base functions
12 such as reading and writing TPM private data. This is enough to
13 support Chrome OS verified boot. Extend functionality is not
14 implemented.
Simon Glassa7d660b2015-08-22 18:31:19 -060015
16config TPM_ATMEL_TWI
17 bool "Enable Atmel TWI TPM device driver"
mario.six@gdsys.cc03dcd412016-07-18 13:47:45 +020018 depends on TPM
Simon Glassa7d660b2015-08-22 18:31:19 -060019 help
20 This driver supports an Atmel TPM device connected on the I2C bus.
21 The usual tpm operations and the 'tpm' command can be used to talk
22 to the device using the standard TPM Interface Specification (TIS)
23 protocol
24
Christophe Ricard0766ad22015-10-06 22:54:41 +020025config TPM_TIS_INFINEON
Simon Glassa7d660b2015-08-22 18:31:19 -060026 bool "Enable support for Infineon SLB9635/45 TPMs on I2C"
Simon Glass2419cd12015-10-03 06:39:36 -060027 depends on TPM && DM_I2C
Simon Glassa7d660b2015-08-22 18:31:19 -060028 help
29 This driver supports Infineon TPM devices connected on the I2C bus.
30 The usual tpm operations and the 'tpm' command can be used to talk
31 to the device using the standard TPM Interface Specification (TIS)
32 protocol
33
34config TPM_TIS_I2C_BURST_LIMITATION
35 bool "Enable I2C burst length limitation"
Christophe Ricard0766ad22015-10-06 22:54:41 +020036 depends on TPM_TIS_INFINEON
Simon Glassa7d660b2015-08-22 18:31:19 -060037 help
38 Some broken TPMs have a limitation on the number of bytes they can
39 receive in one message. Enable this option to allow you to set this
40 option. The can allow a broken TPM to be used by splitting messages
41 into separate pieces.
42
43config TPM_TIS_I2C_BURST_LIMITATION_LEN
44 int "Length"
45 depends on TPM_TIS_I2C_BURST_LIMITATION
46 help
47 Use this to set the burst limitation length
48
49config TPM_TIS_LPC
50 bool "Enable support for Infineon SLB9635/45 TPMs on LPC"
Simon Glass2419cd12015-10-03 06:39:36 -060051 depends on TPM && X86
Simon Glassa7d660b2015-08-22 18:31:19 -060052 help
Christophe Ricardca5bc1b2016-01-21 23:19:14 +010053 This driver supports Infineon TPM devices connected on the LPC bus.
Simon Glassa7d660b2015-08-22 18:31:19 -060054 The usual tpm operations and the 'tpm' command can be used to talk
55 to the device using the standard TPM Interface Specification (TIS)
56 protocol
57
58config TPM_AUTH_SESSIONS
59 bool "Enable TPM authentication session support"
60 depends on TPM
61 help
62 Enable support for authorised (AUTH1) commands as specified in the
63 TCG Main Specification 1.2. OIAP-authorised versions of the commands
64 TPM_LoadKey2 and TPM_GetPubKey are provided. Both features are
65 available using the 'tpm' command, too.
66
Christophe Ricard3aa74082016-01-21 23:27:13 +010067config TPM_ST33ZP24_I2C
68 bool "STMicroelectronics ST33ZP24 I2C TPM"
69 depends on TPM && DM_I2C
70 ---help---
71 This driver supports STMicroelectronics TPM devices connected on the I2C bus.
72 The usual tpm operations and the 'tpm' command can be used to talk
73 to the device using the standard TPM Interface Specification (TIS)
74 protocol
75
Christophe Ricardb75fdc12016-01-21 23:27:14 +010076config TPM_ST33ZP24_SPI
77 bool "STMicroelectronics ST33ZP24 SPI TPM"
78 depends on TPM && DM_SPI
79 ---help---
80 This driver supports STMicroelectronics TPM devices connected on the SPI bus.
81 The usual tpm operations and the 'tpm' command can be used to talk
82 to the device using the standard TPM Interface Specification (TIS)
83 protocol
84
Mario Six7690be32017-01-11 16:00:50 +010085config TPM_FLUSH_RESOURCES
86 bool "Enable TPM resource flushing support"
87 depends on TPM
88 help
89 Enable support to flush specific resources (e.g. keys) from the TPM.
90 The functionality is available via the 'tpm' command as well.
mario.six@gdsys.cc0f4b2ba2017-03-20 10:28:28 +010091
92config TPM_LOAD_KEY_BY_SHA1
93 bool "Enable TPM key loading by SHA1 support"
94 depends on TPM
95 help
96 Enable support to load keys into the TPM by identifying
97 their parent via the public key's SHA1 hash.
98 The functionality is available via the 'tpm' command as well.
mario.six@gdsys.cc3d1df0e2017-03-20 10:28:30 +010099
100config TPM_LIST_RESOURCES
101 bool "Enable TPM resource listing support"
102 depends on TPM
103 help
104 Enable support to list specific resources (e.g. keys) within the TPM.
105 The functionality is available via the 'tpm' command as well.
Simon Glassa7d660b2015-08-22 18:31:19 -0600106endmenu