blob: 7a469f227211fae639f3c7a7b52d9753706f93ed [file] [log] [blame]
Alexander Grafed980b82016-03-04 01:10:07 +01001config EFI_LOADER
Heinrich Schuchardt9363fd22019-05-11 10:27:58 +02002 bool "Support running UEFI applications"
Heinrich Schuchardtb20bb092019-11-17 10:44:16 +01003 depends on OF_LIBFDT && ( \
Heinrich Schuchardt38064ee2019-11-19 04:19:09 +01004 ARM && (SYS_CPU = arm1136 || \
5 SYS_CPU = arm1176 || \
6 SYS_CPU = armv7 || \
7 SYS_CPU = armv8) || \
Heinrich Schuchardtb20bb092019-11-17 10:44:16 +01008 X86 || RISCV || SANDBOX)
Alexander Graf6698bb32018-01-24 14:54:21 +01009 # We need EFI_STUB_64BIT to be set on x86_64 with EFI_STUB
10 depends on !EFI_STUB || !X86_64 || EFI_STUB_64BIT
11 # We need EFI_STUB_32BIT to be set on x86_32 with EFI_STUB
12 depends on !EFI_STUB || !X86 || X86_64 || EFI_STUB_32BIT
Heinrich Schuchardtb7cdecf2019-11-20 18:48:02 +010013 default y if !ARM || SYS_CPU = armv7 || SYS_CPU = armv8
Adam Forda451bc22018-02-06 12:14:28 -060014 select LIB_UUID
Alfonso Sánchez-Beato17f8cda2021-07-15 15:31:42 +020015 select PARTITION_UUIDS
Adam Ford1811a922018-02-06 12:43:56 -060016 select HAVE_BLOCK_DEVICE
Heinrich Schuchardtdba51482019-01-22 21:35:23 +010017 select REGEX
Heinrich Schuchardt503e04f2018-04-29 23:37:12 +020018 imply CFB_CONSOLE_ANSI
Heinrich Schuchardt93f62012020-03-21 20:45:50 +010019 imply FAT
20 imply FAT_WRITE
Heinrich Schuchardt8876e1b2019-12-04 22:58:58 +010021 imply USB_KEYBOARD_FN_KEYS
Heinrich Schuchardtfaadc042020-01-15 00:49:35 +010022 imply VIDEO_ANSI
Alexander Grafed980b82016-03-04 01:10:07 +010023 help
Heinrich Schuchardt9363fd22019-05-11 10:27:58 +020024 Select this option if you want to run UEFI applications (like GNU
25 GRUB or iPXE) on top of U-Boot. If this option is enabled, U-Boot
26 will expose the UEFI API to a loaded application, enabling it to
27 reuse U-Boot's device drivers.
Alexander Graf51735ae2016-05-11 18:25:48 +020028
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +020029if EFI_LOADER
Alexander Graf5fbb2892019-02-11 15:24:00 +010030
Heinrich Schuchardtff2f5322021-01-15 19:02:50 +010031config CMD_BOOTEFI_BOOTMGR
32 bool "UEFI Boot Manager"
33 default y
34 help
35 Select this option if you want to select the UEFI binary to be booted
36 via UEFI variables Boot####, BootOrder, and BootNext. This enables the
37 'bootefi bootmgr' command.
38
AKASHI Takahiroc57c9432020-10-29 13:47:45 +090039config EFI_SETUP_EARLY
40 bool
41 default n
42
Heinrich Schuchardtbe66b892020-07-14 19:18:33 +020043choice
44 prompt "Store for non-volatile UEFI variables"
45 default EFI_VARIABLE_FILE_STORE
46 help
47 Select where non-volatile UEFI variables shall be stored.
48
Heinrich Schuchardt5f7dcf02020-03-19 18:21:58 +000049config EFI_VARIABLE_FILE_STORE
50 bool "Store non-volatile UEFI variables as file"
51 depends on FAT_WRITE
Heinrich Schuchardt5f7dcf02020-03-19 18:21:58 +000052 help
Heinrich Schuchardtbe66b892020-07-14 19:18:33 +020053 Select this option if you want non-volatile UEFI variables to be
54 stored as file /ubootefi.var on the EFI system partition.
55
56config EFI_MM_COMM_TEE
57 bool "UEFI variables storage service via OP-TEE"
58 depends on OPTEE
59 help
60 If OP-TEE is present and running StandAloneMM, dispatch all UEFI
61 variable related operations to that. The application will verify,
62 authenticate and store the variables on an RPMB.
63
64endchoice
Heinrich Schuchardt5f7dcf02020-03-19 18:21:58 +000065
Heinrich Schuchardt7dda1632020-07-14 21:25:28 +020066config EFI_VARIABLES_PRESEED
67 bool "Initial values for UEFI variables"
68 depends on EFI_VARIABLE_FILE_STORE
69 help
70 Include a file with the initial values for non-volatile UEFI variables
71 into the U-Boot binary. If this configuration option is set, changes
72 to authentication related variables (PK, KEK, db, dbx) are not
73 allowed.
74
75if EFI_VARIABLES_PRESEED
76
77config EFI_VAR_SEED_FILE
78 string "File with initial values of non-volatile UEFI variables"
79 default ubootefi.var
80 help
81 File with initial values of non-volatile UEFI variables. The file must
82 be in the same format as the storage in the EFI system partition. The
83 easiest way to create it is by setting the non-volatile variables in
84 U-Boot. If a relative file path is used, it is relative to the source
85 directory.
86
87endif
88
Heinrich Schuchardtc0c21d62020-12-20 11:05:38 +010089config EFI_VAR_BUF_SIZE
90 int "Memory size of the UEFI variable store"
91 default 16384
92 range 4096 2147483647
93 help
94 This defines the size in bytes of the memory area reserved for keeping
95 UEFI variables.
96
97 When using StandAloneMM (CONFIG_EFI_MM_COMM_TEE=y) this value should
98 match the value of PcdFlashNvStorageVariableSize used to compile the
99 StandAloneMM module.
100
101 Minimum 4096, default 16384.
102
Heinrich Schuchardt5ec48e32019-05-31 22:56:02 +0200103config EFI_GET_TIME
104 bool "GetTime() runtime service"
105 depends on DM_RTC
106 default y
107 help
108 Provide the GetTime() runtime service at boottime. This service
109 can be used by an EFI application to read the real time clock.
110
111config EFI_SET_TIME
112 bool "SetTime() runtime service"
113 depends on EFI_GET_TIME
Heinrich Schuchardt31cadc32020-11-21 20:52:18 +0100114 default y if ARCH_QEMU || SANDBOX
Heinrich Schuchardt5ec48e32019-05-31 22:56:02 +0200115 default n
116 help
117 Provide the SetTime() runtime service at boottime. This service
118 can be used by an EFI application to adjust the real time clock.
119
AKASHI Takahiro2bc27ca2020-11-17 09:27:55 +0900120config EFI_HAVE_CAPSULE_SUPPORT
121 bool
122
123config EFI_RUNTIME_UPDATE_CAPSULE
124 bool "UpdateCapsule() runtime service"
125 default n
126 select EFI_HAVE_CAPSULE_SUPPORT
127 help
128 Select this option if you want to use UpdateCapsule and
129 QueryCapsuleCapabilities API's.
130
AKASHI Takahiroc74cd8b2020-11-17 09:27:56 +0900131config EFI_CAPSULE_ON_DISK
132 bool "Enable capsule-on-disk support"
133 select EFI_HAVE_CAPSULE_SUPPORT
134 default n
135 help
136 Select this option if you want to use capsule-on-disk feature,
137 that is, capsules can be fetched and executed from files
138 under a specific directory on UEFI system partition instead of
139 via UpdateCapsule API.
140
Ilias Apalodimas0fa50202021-06-29 07:55:51 +0300141config EFI_IGNORE_OSINDICATIONS
142 bool "Ignore OsIndications for CapsuleUpdate on-disk"
143 depends on EFI_CAPSULE_ON_DISK
144 default n
145 help
146 There are boards where U-Boot does not support SetVariable at runtime.
147 Select this option if you want to use the capsule-on-disk feature
148 without setting the EFI_OS_INDICATIONS_FILE_CAPSULE_DELIVERY_SUPPORTED
149 flag in variable OsIndications.
150
AKASHI Takahiroc74cd8b2020-11-17 09:27:56 +0900151config EFI_CAPSULE_ON_DISK_EARLY
152 bool "Initiate capsule-on-disk at U-Boot boottime"
153 depends on EFI_CAPSULE_ON_DISK
154 default n
155 select EFI_SETUP_EARLY
156 help
157 Normally, without this option enabled, capsules will be
158 executed only at the first time of invoking one of efi command.
159 If this option is enabled, capsules will be enforced to be
160 executed as part of U-Boot initialisation so that they will
161 surely take place whatever is set to distro_bootcmd.
162
AKASHI Takahirobb7e71d2020-11-17 09:28:00 +0900163config EFI_CAPSULE_FIRMWARE
164 bool
165 default n
166
AKASHI Takahiro8d990262020-11-30 18:12:11 +0900167config EFI_CAPSULE_FIRMWARE_MANAGEMENT
168 bool "Capsule: Firmware Management Protocol"
169 depends on EFI_HAVE_CAPSULE_SUPPORT
170 default y
171 help
172 Select this option if you want to enable capsule-based
173 firmware update using Firmware Management Protocol.
174
Ilias Apalodimasb891ff12021-06-22 17:38:52 +0300175config EFI_CAPSULE_FIRMWARE_FIT
176 bool "FMP driver for FIT images"
177 depends on FIT
178 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
179 select UPDATE_FIT
180 select DFU
181 select EFI_CAPSULE_FIRMWARE
182 help
183 Select this option if you want to enable firmware management protocol
184 driver for FIT image
185
186config EFI_CAPSULE_FIRMWARE_RAW
187 bool "FMP driver for raw images"
188 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
189 depends on SANDBOX || (!SANDBOX && !EFI_CAPSULE_FIRMWARE_FIT)
190 select DFU_WRITE_ALT
191 select DFU
192 select EFI_CAPSULE_FIRMWARE
193 help
194 Select this option if you want to enable firmware management protocol
195 driver for raw image
196
Sughosh Ganu04be98b2020-12-30 19:27:09 +0530197config EFI_CAPSULE_AUTHENTICATE
198 bool "Update Capsule authentication"
199 depends on EFI_CAPSULE_FIRMWARE
200 depends on EFI_CAPSULE_ON_DISK
201 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
Alexandru Gagniuc464010b2021-05-24 14:28:57 -0500202 select HASH
Sughosh Ganu04be98b2020-12-30 19:27:09 +0530203 select SHA256
204 select RSA
205 select RSA_VERIFY
206 select RSA_VERIFY_WITH_PKEY
207 select X509_CERTIFICATE_PARSER
208 select PKCS7_MESSAGE_PARSER
209 select PKCS7_VERIFY
Sughosh Ganudd40cf62021-04-07 17:23:31 +0530210 select IMAGE_SIGN_INFO
Masahisa Kojimaf6081a82021-05-14 09:53:36 +0900211 select EFI_SIGNATURE_SUPPORT
Sughosh Ganu04be98b2020-12-30 19:27:09 +0530212 default n
213 help
214 Select this option if you want to enable capsule
215 authentication
216
Heinrich Schuchardt64b5ba42019-05-11 09:53:33 +0200217config EFI_DEVICE_PATH_TO_TEXT
218 bool "Device path to text protocol"
219 default y
220 help
221 The device path to text protocol converts device nodes and paths to
222 human readable strings.
223
Heinrich Schuchardt59593a52021-01-16 09:44:25 +0100224config EFI_DEVICE_PATH_UTIL
225 bool "Device path utilities protocol"
226 default y
227 help
228 The device path utilities protocol creates and manipulates device
229 paths and device nodes. It is required to run the EFI Shell.
230
Heinrich Schuchardt4cb07d82021-01-16 09:33:24 +0100231config EFI_DT_FIXUP
232 bool "Device tree fixup protocol"
233 depends on !GENERATE_ACPI_TABLE
234 default y
235 help
236 The EFI device-tree fix-up protocol provides a function to let the
237 firmware apply fix-ups. This may be used by boot loaders.
238
Alexander Graf5fbb2892019-02-11 15:24:00 +0100239config EFI_LOADER_HII
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200240 bool "HII protocols"
Heinrich Schuchardt084f0932019-04-07 23:58:50 +0200241 default y
Alexander Graf5fbb2892019-02-11 15:24:00 +0100242 help
243 The Human Interface Infrastructure is a complicated framework that
244 allows UEFI applications to draw fancy menus and hook strings using
245 a translation framework.
246
247 U-Boot implements enough of its features to be able to run the UEFI
Heinrich Schuchardt084f0932019-04-07 23:58:50 +0200248 Shell, but not more than that.
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200249
Heinrich Schuchardt95ab3812019-05-16 07:52:58 +0200250config EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt33499732019-05-08 23:24:26 +0200251 bool "Unicode collation protocol"
252 default y
253 help
254 The Unicode collation protocol is used for lexical comparisons. It is
255 required to run the UEFI shell.
256
Heinrich Schuchardt95ab3812019-05-16 07:52:58 +0200257if EFI_UNICODE_COLLATION_PROTOCOL2
Heinrich Schuchardt33499732019-05-08 23:24:26 +0200258
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200259config EFI_UNICODE_CAPITALIZATION
260 bool "Support Unicode capitalization"
261 default y
262 help
263 Select this option to enable correct handling of the capitalization of
264 Unicode codepoints in the range 0x0000-0xffff. If this option is not
265 set, only the the correct handling of the letters of the codepage
266 used by the FAT file system is ensured.
267
Heinrich Schuchardt33499732019-05-08 23:24:26 +0200268endif
269
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200270config EFI_LOADER_BOUNCE_BUFFER
271 bool "EFI Applications use bounce buffers for DMA operations"
272 depends on ARM64
273 default n
274 help
275 Some hardware does not support DMA to full 64bit addresses. For this
276 hardware we can create a bounce buffer so that payloads don't have to
277 worry about platform details.
278
279config EFI_PLATFORM_LANG_CODES
280 string "Language codes supported by firmware"
281 default "en-US"
282 help
283 This value is used to initialize the PlatformLangCodes variable. Its
284 value is a semicolon (;) separated list of language codes in native
285 RFC 4646 format, e.g. "en-US;de-DE". The first language code is used
286 to initialize the PlatformLang variable.
287
Heinrich Schuchardt953661a2019-07-05 18:12:16 +0200288config EFI_HAVE_RUNTIME_RESET
289 # bool "Reset runtime service is available"
290 bool
291 default y
Heinrich Schuchardt9c547292020-12-02 16:22:11 +0100292 depends on ARCH_BCM283X || FSL_LAYERSCAPE || PSCI_RESET || \
293 SANDBOX || SYSRESET_X86
Heinrich Schuchardt953661a2019-07-05 18:12:16 +0200294
Heinrich Schuchardt6f3badb2019-07-22 22:04:36 +0200295config EFI_GRUB_ARM32_WORKAROUND
296 bool "Workaround for GRUB on 32bit ARM"
Heinrich Schuchardt4bad14a2021-03-03 14:05:05 +0100297 default n if ARCH_BCM283X || ARCH_SUNXI || ARCH_QEMU
Heinrich Schuchardt6f3badb2019-07-22 22:04:36 +0200298 default y
299 depends on ARM && !ARM64
300 help
301 GRUB prior to version 2.04 requires U-Boot to disable caches. This
302 workaround currently is also needed on systems with caches that
303 cannot be managed via CP15.
Sughosh Ganuf552fa42019-12-29 00:01:05 +0530304
305config EFI_RNG_PROTOCOL
306 bool "EFI_RNG_PROTOCOL support"
307 depends on DM_RNG
Peter Robinsonbdf329e2020-04-01 11:15:01 +0100308 default y
Sughosh Ganuf552fa42019-12-29 00:01:05 +0530309 help
Heinrich Schuchardt0e228852020-02-14 23:28:58 +0100310 Provide a EFI_RNG_PROTOCOL implementation using the hardware random
311 number generator of the platform.
Sughosh Ganuf552fa42019-12-29 00:01:05 +0530312
Ilias Apalodimasc1c02102020-11-11 11:18:11 +0200313config EFI_TCG2_PROTOCOL
314 bool "EFI_TCG2_PROTOCOL support"
Ilias Apalodimas48ee0842021-05-11 14:40:58 +0300315 default y
Ilias Apalodimasc1c02102020-11-11 11:18:11 +0200316 depends on TPM_V2
Ilias Apalodimas48ee0842021-05-11 14:40:58 +0300317 select SHA1
318 select SHA256
319 select SHA512_ALGO
320 select SHA384
321 select SHA512
Masahisa Kojima163a0d72021-05-26 12:09:58 +0900322 select HASH
Ilias Apalodimasc1c02102020-11-11 11:18:11 +0200323 help
324 Provide a EFI_TCG2_PROTOCOL implementation using the TPM hardware
325 of the platform.
326
Ilias Apalodimasc8d0fd52020-11-30 11:47:40 +0200327config EFI_TCG2_PROTOCOL_EVENTLOG_SIZE
328 int "EFI_TCG2_PROTOCOL EventLog size"
329 depends on EFI_TCG2_PROTOCOL
Masahisa Kojimad934ed52021-07-14 22:00:01 +0900330 default 65536
Ilias Apalodimasc8d0fd52020-11-30 11:47:40 +0200331 help
332 Define the size of the EventLog for EFI_TCG2_PROTOCOL. Note that
333 this is going to be allocated twice. One for the eventlog it self
334 and one for the configuration table that is required from the spec
335
Ilias Apalodimasec80b472020-02-21 09:55:45 +0200336config EFI_LOAD_FILE2_INITRD
337 bool "EFI_FILE_LOAD2_PROTOCOL for Linux initial ramdisk"
Ilias Apalodimas53f6a5a2021-03-17 21:55:00 +0200338 default y
Ilias Apalodimasec80b472020-02-21 09:55:45 +0200339 help
Ilias Apalodimas53f6a5a2021-03-17 21:55:00 +0200340 Linux v5.7 and later can make use of this option. If the boot option
341 selected by the UEFI boot manager specifies an existing file to be used
342 as initial RAM disk, a Linux specific Load File2 protocol will be
343 installed and Linux 5.7+ will ignore any initrd=<ramdisk> command line
344 argument.
Ilias Apalodimasec80b472020-02-21 09:55:45 +0200345
AKASHI Takahiro9bf09b52020-04-14 11:51:38 +0900346config EFI_SECURE_BOOT
347 bool "Enable EFI secure boot support"
348 depends on EFI_LOADER
Alexandru Gagniuc464010b2021-05-24 14:28:57 -0500349 select HASH
AKASHI Takahiro9bf09b52020-04-14 11:51:38 +0900350 select SHA256
351 select RSA
352 select RSA_VERIFY_WITH_PKEY
353 select IMAGE_SIGN_INFO
354 select ASYMMETRIC_KEY_TYPE
355 select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
356 select X509_CERTIFICATE_PARSER
357 select PKCS7_MESSAGE_PARSER
AKASHI Takahiro1115edd2020-07-21 19:35:22 +0900358 select PKCS7_VERIFY
Masahisa Kojimaf6081a82021-05-14 09:53:36 +0900359 select EFI_SIGNATURE_SUPPORT
AKASHI Takahiro9bf09b52020-04-14 11:51:38 +0900360 default n
361 help
362 Select this option to enable EFI secure boot support.
363 Once SecureBoot mode is enforced, any EFI binary can run only if
364 it is signed with a trusted key. To do that, you need to install,
365 at least, PK, KEK and db.
366
Masahisa Kojimaf6081a82021-05-14 09:53:36 +0900367config EFI_SIGNATURE_SUPPORT
368 bool
369
Jose Marinho64a8aae2021-03-02 17:26:38 +0000370config EFI_ESRT
371 bool "Enable the UEFI ESRT generation"
372 depends on EFI_CAPSULE_FIRMWARE_MANAGEMENT
373 default y
374 help
375 Enabling this option creates the ESRT UEFI system table.
376
Heinrich Schuchardt5684c8d2019-05-08 23:17:38 +0200377endif