Skip to content

To go further

The other features of Welma can be activated and customized:

  • Secure boot
    • Set the keys (ROOTKEY, SWK1, SWK2)
    • Kernel: CONFIG_DM_VERITY=y
    • Kernel: patch command line size (optional if SWK2 is used)
    • U-Boot: patch to pass SWK1 to the kernel (optional if SWK2 is used)
    • imx:
      • BOOT_SIGNING_MECHANISM = "imx"
      • BOOT_SIGNING_MECHANISM_VERSION = "hab4" or "ahab"
  • Prod image: deactivate U-Boot's command line
  • Secure storage
  • Data provisioning
  • Test

Please refer to the documentation for more details on these.