Add walnascar security manual#455
Draft
landerweit-phytec wants to merge 14 commits into
Draft
Conversation
landerweit-phytec
force-pushed
the
WIP/landerweit-phytec/walnascar-security
branch
2 times, most recently
from
adc658b to
d3dd784
Compare
landerweit-phytec
force-pushed
the
WIP/landerweit-phytec/walnascar-security
branch
3 times, most recently
from
12c8443 to
a27c817
Compare
Add a label to the manual so others can reference it. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Rebrand from SECURIphy to securiPHY. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Reset the board before reading the fuses because 'fuse read' returns zeros instead of the programmed values before the reset. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Activating the eMMC boot partitions manually is not necessary because partup takes care of that during provisioning. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Remove information on phytec-dev-ca which is already present in the phytec-dev-ca repository. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Directly link to the HAB documentation. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Add a chapter on SSH certificate creation. SSH certificates are used to access the device starting in walnascar. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Loading overlays.txt is disabled in securiPHY so it can not be used to specify which overlays should be used. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Move the key generation script to the older manuals. It will be re-added in a new chapter for new manuals. This separates security knowledge from the concrete steps. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Move no longer relevant content to the manuals where it is still used. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Move no longer relevant content to the manuals where it is still used. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Add the boot script as a new step in the secure boot chain between bootloader and kernel fitImage. It is used in yocto walnascar and newer. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Replace the secure boot chain graphic to include the boot script as a separate step. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
landerweit-phytec
force-pushed
the
WIP/landerweit-phytec/walnascar-security
branch
2 times, most recently
from
7cb21cd to
6997769
Compare
Replace the head security manual with a walnascar security manual. The manual is now structured as a step by step guide. It separates the build instructions and configuration from the security concepts. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
landerweit-phytec
force-pushed
the
WIP/landerweit-phytec/walnascar-security
branch
from
6997769 to
98704a5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Add a security manual for yocto walnascar.
The new manual is restructured to start with a step by step guide. It separates the build instructions and configuration from the security concepts.