Skip to content

feat(linux): Add fTPM based filesystem encryption rst#660

Open
shiva-ti wants to merge 1 commit intoTexasInstruments:masterfrom
shiva-ti:ftpm_encrypted_boot
Open

feat(linux): Add fTPM based filesystem encryption rst#660
shiva-ti wants to merge 1 commit intoTexasInstruments:masterfrom
shiva-ti:ftpm_encrypted_boot

Conversation

@shiva-ti
Copy link
Copy Markdown
Collaborator

Add new security subsection for fTPM based filesystem encryption feature.
Enable this documentation for AM62AX, AM62AX, AM62PX, AM62LX as per testing done with 12.0 SDK.

Copy link
Copy Markdown
Contributor

@Pratham-T Pratham-T left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Enable this documentation for AM62AX, AM62AX, AM62PX, AM62LX

Correct the commit message

Add new security subsection for fTPM based filesystem encryption
feature.
Enable this documentation for AM62X, AM62AX, AM62PX, AM62LX as per
testing done with 12.0 SDK.

Signed-off-by: Shiva Tripathi <s-tripathi1@ti.com>
@shiva-ti shiva-ti force-pushed the ftpm_encrypted_boot branch from 0749309 to b1b9add Compare April 13, 2026 11:07
@shiva-ti shiva-ti requested a review from Pratham-T April 13, 2026 11:08
@@ -90,6 +93,9 @@ The following table lists some of the key Security Features:
| **Memory Firewalls** | Prevents unauthorized access through hardware-enforced | :ref:`memory-firewalls` |
| | security boundaries | |
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Huh. I know this isn't related to your change, but could you fix the bug in this table?

@@ -64,6 +64,9 @@ The following table lists some of the key Security Features:
| **Memory Firewalls** | Prevents unauthorized access through hardware-enforced | :ref:`memory-firewalls` |
| | security boundaries | |
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same bug here...

Copy link
Copy Markdown
Member

@StaticRocket StaticRocket left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two vale comments, but otherwise this looks fine to me

The filesystem encryption implementation consists of several components
working together across the boot process:

- **Bootloader** : U-Boot loads kernel, initramfs and DTBs into memory
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
- **Bootloader** : U-Boot loads kernel, initramfs and DTBs into memory
- **Boot loader** : U-Boot loads kernel, initramfs and DTBs into memory


The encryption system operates during the Linux boot process:

#. **Bootloader Stage**: U-boot loads the kernel and initramfs into memory
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
#. **Bootloader Stage**: U-boot loads the kernel and initramfs into memory
#. **Boot loader Stage**: U-boot loads the kernel and initramfs into memory

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants