blob: 1681b37c49c28ddd9deb3ccff60c72d6a15ab806 [file] [log] [blame]
Alexander Grafed980b82016-03-04 01:10:07 +01001config EFI_LOADER
Heinrich Schuchardt9363fd22019-05-11 10:27:58 +02002 bool "Support running UEFI applications"
Heinrich Schuchardtb20bb092019-11-17 10:44:16 +01003 depends on OF_LIBFDT && ( \
Heinrich Schuchardt38064ee2019-11-19 04:19:09 +01004 ARM && (SYS_CPU = arm1136 || \
5 SYS_CPU = arm1176 || \
6 SYS_CPU = armv7 || \
7 SYS_CPU = armv8) || \
Heinrich Schuchardtb20bb092019-11-17 10:44:16 +01008 X86 || RISCV || SANDBOX)
Alexander Graf6698bb32018-01-24 14:54:21 +01009 # We need EFI_STUB_64BIT to be set on x86_64 with EFI_STUB
10 depends on !EFI_STUB || !X86_64 || EFI_STUB_64BIT
11 # We need EFI_STUB_32BIT to be set on x86_32 with EFI_STUB
12 depends on !EFI_STUB || !X86 || X86_64 || EFI_STUB_32BIT
Heinrich Schuchardtb7cdecf2019-11-20 18:48:02 +010013 default y if !ARM || SYS_CPU = armv7 || SYS_CPU = armv8
Adam Forda451bc22018-02-06 12:14:28 -060014 select LIB_UUID
Adam Ford1811a922018-02-06 12:43:56 -060015 select HAVE_BLOCK_DEVICE
Heinrich Schuchardtdba51482019-01-22 21:35:23 +010016 select REGEX
Heinrich Schuchardt503e04f2018-04-29 23:37:12 +020017 imply CFB_CONSOLE_ANSI
Heinrich Schuchardt93f62012020-03-21 20:45:50 +010018 imply FAT
19 imply FAT_WRITE
Heinrich Schuchardt8876e1b2019-12-04 22:58:58 +010020 imply USB_KEYBOARD_FN_KEYS
Heinrich Schuchardtfaadc042020-01-15 00:49:35 +010021 imply VIDEO_ANSI
Alexander Grafed980b82016-03-04 01:10:07 +010022 help
Heinrich Schuchardt9363fd22019-05-11 10:27:58 +020023 Select this option if you want to run UEFI applications (like GNU
24 GRUB or iPXE) on top of U-Boot. If this option is enabled, U-Boot
25 will expose the UEFI API to a loaded application, enabling it to
26 reuse U-Boot's device drivers.
Alexander Graf51735ae2016-05-11 18:25:48 +020027
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +020028if EFI_LOADER
Alexander Graf5fbb2892019-02-11 15:24:00 +010029
AKASHI Takahiroc57c9432020-10-29 13:47:45 +090030config EFI_SETUP_EARLY
31 bool
32 default n
33
Heinrich Schuchardtbe66b892020-07-14 19:18:33 +020034choice
35 prompt "Store for non-volatile UEFI variables"
36 default EFI_VARIABLE_FILE_STORE
37 help
38 Select where non-volatile UEFI variables shall be stored.
39
Heinrich Schuchardt5f7dcf02020-03-19 18:21:58 +000040config EFI_VARIABLE_FILE_STORE
41 bool "Store non-volatile UEFI variables as file"
42 depends on FAT_WRITE
Heinrich Schuchardt5f7dcf02020-03-19 18:21:58 +000043 help
Heinrich Schuchardtbe66b892020-07-14 19:18:33 +020044 Select this option if you want non-volatile UEFI variables to be
45 stored as file /ubootefi.var on the EFI system partition.
46
47config EFI_MM_COMM_TEE
48 bool "UEFI variables storage service via OP-TEE"
49 depends on OPTEE
50 help
51 If OP-TEE is present and running StandAloneMM, dispatch all UEFI
52 variable related operations to that. The application will verify,
53 authenticate and store the variables on an RPMB.
54
55endchoice
Heinrich Schuchardt5f7dcf02020-03-19 18:21:58 +000056
Heinrich Schuchardt7dda1632020-07-14 21:25:28 +020057config EFI_VARIABLES_PRESEED
58 bool "Initial values for UEFI variables"
59 depends on EFI_VARIABLE_FILE_STORE
60 help
61 Include a file with the initial values for non-volatile UEFI variables
62 into the U-Boot binary. If this configuration option is set, changes
63 to authentication related variables (PK, KEK, db, dbx) are not
64 allowed.
65
66if EFI_VARIABLES_PRESEED
67
68config EFI_VAR_SEED_FILE
69 string "File with initial values of non-volatile UEFI variables"
70 default ubootefi.var
71 help
72 File with initial values of non-volatile UEFI variables. The file must
73 be in the same format as the storage in the EFI system partition. The
74 easiest way to create it is by setting the non-volatile variables in
75 U-Boot. If a relative file path is used, it is relative to the source
76 directory.
77
78endif
79
Heinrich Schuchardt5ec48e32019-05-31 22:56:02 +020080config EFI_GET_TIME
81 bool "GetTime() runtime service"
82 depends on DM_RTC
83 default y
84 help
85 Provide the GetTime() runtime service at boottime. This service
86 can be used by an EFI application to read the real time clock.
87
88config EFI_SET_TIME
89 bool "SetTime() runtime service"
90 depends on EFI_GET_TIME
Heinrich Schuchardt31cadc32020-11-21 20:52:18 +010091 default y if ARCH_QEMU || SANDBOX
Heinrich Schuchardt5ec48e32019-05-31 22:56:02 +020092 default n
93 help
94 Provide the SetTime() runtime service at boottime. This service
95 can be used by an EFI application to adjust the real time clock.
96
AKASHI Takahiro2bc27ca2020-11-17 09:27:55 +090097config EFI_HAVE_CAPSULE_SUPPORT
98 bool
99
100config EFI_RUNTIME_UPDATE_CAPSULE
101 bool "UpdateCapsule() runtime service"
102 default n
103 select EFI_HAVE_CAPSULE_SUPPORT
104 help
105 Select this option if you want to use UpdateCapsule and
106 QueryCapsuleCapabilities API's.
107
Heinrich Schuchardt64b5ba42019-05-11 09:53:33 +0200108config EFI_DEVICE_PATH_TO_TEXT
109 bool "Device path to text protocol"
110 default y
111 help
112 The device path to text protocol converts device nodes and paths to
113 human readable strings.
114
Alexander Graf5fbb2892019-02-11 15:24:00 +0100115config EFI_LOADER_HII
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200116 bool "HII protocols"
Heinrich Schuchardt084f0932019-04-07 23:58:50 +0200117 default y
Alexander Graf5fbb2892019-02-11 15:24:00 +0100118 help
119 The Human Interface Infrastructure is a complicated framework that
120 allows UEFI applications to draw fancy menus and hook strings using
121 a translation framework.
122
123 U-Boot implements enough of its features to be able to run the UEFI
Heinrich Schuchardt084f0932019-04-07 23:58:50 +0200124 Shell, but not more than that.
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200125
Heinrich Schuchardt95ab3812019-05-16 07:52:58 +0200126config EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt33499732019-05-08 23:24:26 +0200127 bool "Unicode collation protocol"
128 default y
129 help
130 The Unicode collation protocol is used for lexical comparisons. It is
131 required to run the UEFI shell.
132
Heinrich Schuchardt95ab3812019-05-16 07:52:58 +0200133if EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt33499732019-05-08 23:24:26 +0200134
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200135config EFI_UNICODE_CAPITALIZATION
136 bool "Support Unicode capitalization"
137 default y
138 help
139 Select this option to enable correct handling of the capitalization of
140 Unicode codepoints in the range 0x0000-0xffff. If this option is not
141 set, only the the correct handling of the letters of the codepage
142 used by the FAT file system is ensured.
143
Heinrich Schuchardtb1b782d2019-05-16 18:19:00 +0200144config EFI_UNICODE_COLLATION_PROTOCOL
145 bool "Deprecated version of the Unicode collation protocol"
146 default n
147 help
148 In EFI 1.10 a version of the Unicode collation protocol using ISO
149 639-2 language codes existed. This protocol is not part of the UEFI
150 specification any longer. Unfortunately it is required to run the
151 UEFI Self Certification Test (SCT) II, version 2.6, 2017.
152
153 Choose this option for testing only. It is bound to be removed.
154
Heinrich Schuchardt33499732019-05-08 23:24:26 +0200155endif
156
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200157config EFI_LOADER_BOUNCE_BUFFER
158 bool "EFI Applications use bounce buffers for DMA operations"
159 depends on ARM64
160 default n
161 help
162 Some hardware does not support DMA to full 64bit addresses. For this
163 hardware we can create a bounce buffer so that payloads don't have to
164 worry about platform details.
165
166config EFI_PLATFORM_LANG_CODES
167 string "Language codes supported by firmware"
168 default "en-US"
169 help
170 This value is used to initialize the PlatformLangCodes variable. Its
171 value is a semicolon (;) separated list of language codes in native
172 RFC 4646 format, e.g. "en-US;de-DE". The first language code is used
173 to initialize the PlatformLang variable.
174
Heinrich Schuchardt953661a2019-07-05 18:12:16 +0200175config EFI_HAVE_RUNTIME_RESET
176 # bool "Reset runtime service is available"
177 bool
178 default y
179 depends on ARCH_BCM283X || FSL_LAYERSCAPE || PSCI_RESET || SYSRESET_X86
180
Heinrich Schuchardt6f3badb2019-07-22 22:04:36 +0200181config EFI_GRUB_ARM32_WORKAROUND
182 bool "Workaround for GRUB on 32bit ARM"
Heinrich Schuchardt4b71f6d2020-09-17 19:09:23 +0200183 default n if ARCH_QEMU
Heinrich Schuchardt6f3badb2019-07-22 22:04:36 +0200184 default y
185 depends on ARM && !ARM64
186 help
187 GRUB prior to version 2.04 requires U-Boot to disable caches. This
188 workaround currently is also needed on systems with caches that
189 cannot be managed via CP15.
Sughosh Ganuf552fa42019-12-29 00:01:05 +0530190
191config EFI_RNG_PROTOCOL
192 bool "EFI_RNG_PROTOCOL support"
193 depends on DM_RNG
Peter Robinsonbdf329e2020-04-01 11:15:01 +0100194 default y
Sughosh Ganuf552fa42019-12-29 00:01:05 +0530195 help
Heinrich Schuchardt0e228852020-02-14 23:28:58 +0100196 Provide a EFI_RNG_PROTOCOL implementation using the hardware random
197 number generator of the platform.
Sughosh Ganuf552fa42019-12-29 00:01:05 +0530198
Ilias Apalodimasc1c02102020-11-11 11:18:11 +0200199config EFI_TCG2_PROTOCOL
200 bool "EFI_TCG2_PROTOCOL support"
201 depends on TPM_V2
202 help
203 Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
204 of the platform.
205
Ilias Apalodimasc8d0fd52020-11-30 11:47:40 +0200206config EFI_TCG2_PROTOCOL_EVENTLOG_SIZE
207 int "EFI_TCG2_PROTOCOL EventLog size"
208 depends on EFI_TCG2_PROTOCOL
209 default 4096
210 help
211 Define the size of the EventLog for EFI_TCG2_PROTOCOL. Note that
212 this is going to be allocated twice. One for the eventlog it self
213 and one for the configuration table that is required from the spec
214
Ilias Apalodimasec80b472020-02-21 09:55:45 +0200215config EFI_LOAD_FILE2_INITRD
216 bool "EFI_FILE_LOAD2_PROTOCOL for Linux initial ramdisk"
217 default n
218 help
219 Expose a EFI_FILE_LOAD2_PROTOCOL that the Linux UEFI stub can
220 use to load the initial ramdisk. Once this is enabled using
221 initrd=<ramdisk> will stop working.
222
223config EFI_INITRD_FILESPEC
224 string "initramfs path"
225 default "host 0:1 initrd"
226 depends on EFI_LOAD_FILE2_INITRD
227 help
228 Full path of the initramfs file, e.g. mmc 0:2 initramfs.cpio.gz.
229
AKASHI Takahiro9bf09b52020-04-14 11:51:38 +0900230config EFI_SECURE_BOOT
231 bool "Enable EFI secure boot support"
232 depends on EFI_LOADER
233 select SHA256
234 select RSA
235 select RSA_VERIFY_WITH_PKEY
236 select IMAGE_SIGN_INFO
237 select ASYMMETRIC_KEY_TYPE
238 select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
239 select X509_CERTIFICATE_PARSER
240 select PKCS7_MESSAGE_PARSER
AKASHI Takahiro1115edd2020-07-21 19:35:22 +0900241 select PKCS7_VERIFY
AKASHI Takahiro9bf09b52020-04-14 11:51:38 +0900242 default n
243 help
244 Select this option to enable EFI secure boot support.
245 Once SecureBoot mode is enforced, any EFI binary can run only if
246 it is signed with a trusted key. To do that, you need to install,
247 at least, PK, KEK and db.
248
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200249endif