tree 2547557c42764842c30996495721d95694781d0e
parent 598f6754f016b71fd535c7741c7e09dd08e60005
author Hieu Huynh <hieuh@os.amperecomputing.com> 1690645191 +0000
committer Hieu Huynh <hieuh@os.amperecomputing.com> 1690645191 +0000

meta-ampere: mtmitchell: support Host Secure Provisioning procedure

BMC shall assert SPECIAL_BOOT GPIO to the CPU to trigger Host Secure
Provision. Then BMC shall reset the system, or turn on the system if
it is being OFF.
After the host enters Provisioning Boot Mode successfully (or having
failure), BMC shall deassert the SPECIAL_BOOT GPIO to LOW.

Tested:
1. Flash HostFW with PASS case.
   - $ ampere_flash_bios.sh spinor.img 1 1
   - Host boot with logs:
   [00:00:00.248,000] <inf> scu_stat: is_special_boot() = 1
   [00:00:00.383,000] <inf> SECpro_cert_ext: Assert FW_BOOT_OK
   [00:00:00.383,000] <inf> SECpro_cert_ext: Deassert FAULT_ALERT
   [00:00:00.383,000] <inf> SECpro_cert_ext: SEC provision completed \
   successfully
2. Flash HostFW with FAULT case.
   - $ ampere_flash_bios.sh spinor_fault.img 1 1
   - Host boot with logs:
   [00:00:00.253,000] <inf> scu_stat: is_special_boot() = 1
   [00:00:00.388,000] <err> SECpro_cert_ext: Invalid version cert 0.0
   [00:00:00.388,000] <inf> SECpro_cert_ext: Assert FW_BOOT_OK
   [00:00:00.388,000] <err> SECpro_cert_ext: SEC provision failed
   [00:00:00.388,000] <err> SECpro_cert_ext: Sending error on \
   FAULT_ALERT
3. Turn off the Host, flash HostFW with PASS case. After flash done,
   Host boot with logs is the same with step #1.

Signed-off-by: Hieu Huynh <hieuh@os.amperecomputing.com>
Change-Id: I546c7ffd80474edf6165e67f1b96eacbedcd0939