Run OP-TEE application on STM32MP157C-DK2 board

[Charles Dias]

Dear,

I'm starting with OP-TEE on STM32MP15x line. I bring-up the board as described here and built the optee_example_hello_world as described here. However, I got the error code below:

TEEC_Opensession failed with code 0xffff0008 origin 0x3

Checking the boot messages, I realized that the profile system_services is used. This way, it is not possible to run any TA. 

So, is there any already compiled image for STM32MP157C-DK2 board that allows running a TA or do I have to modify the image to enable it? 

Thanks!

 

[Erwan SZYMANSKI]

Hello @Charles Dias ,
Since OSTL v5.0, OP-TEE default configuration is non secure and loaded into DDR. It is mentioned here in OP-TEE overview : https://wiki.st.com/stm32mpu/wiki/OP-TEE_OTP_overview#OP-TEE_OS_configuration

So no, unfortunately we do not have an already compiled image that does what you want. You will have to recompile some components to load OP-TEE in SYSRAM, and activate secure_and_system_services profile.

Kind regards,
Erwan.

[mikiserf]

hello.

Sorry if I intrude on this post. It's not a relevant topic. I don't know who to turn to. I'm new to the forum and I need a little help.
I'm preparing the stm32mp157c-dk2 board with yocto project mickledore.

I have a problem compiling my Yocto for stm32mp157c-dk2 project. I run the bitbake command from build "bitbake -e core-image-minimal".
I get the error message: Error, the PACKAGE_ARCHS variable (all any noarch ${PACKAGE_EXTRA_ARCHS:tune-cortexa7}cortexa7 stm32mp157c_dk2) for DEFAULTTUNE (cortexa7) does not contain TUNE_PKGARCH ().Toolchain tunings invalid:
Tuning 'cortexa7' has no defined features, and cannot be used.

I tried to solve without success.
Anyone know how to solve it?

Thanks

[Charles Dias]

Hi, @Erwan SZYMANSKI,

When I activate the secure_and_system_services profile, should I load the OP-TEE in SYSRAM or can I keep it on DDR even if it's not secure?

Thanks for your help!

 

[Erwan SZYMANSKI]

Hello @Charles Dias ,
Yes you need to put OP-TEE in SYSRAM on MP15 because this is the only memory secured for this series. 
On MP13, you can put OP-TEE in DDR for this same use case.

Kind regards,
Erwan.

[debugging]

Yes you need to put OP-TEE in SYSRAM on MP15 because this is the only memory secured for this series.

For MP1 there are two modes and I managed to run them both:

1. With secure OP-TEE in SYSRAM and paging in DDR:

2. With unsecure OP-TEE in DDR

 

 

[Charles Dias]

Solution described in this post:

https://community.st.com/t5/stm32-mpus-products/stm32mp15x-lines-activate-secure-and-system-services-profile/m-p/706922#M11743