sec-cfg: Add dkek_config section

Update the common.h headers to add new defines from SYSFW 2020.03.

Starting from SYSFW v2020.03, a dkek_config section is mandatory in
the security config. Otherwise the boot fails.

Fix this by adding a section for dkek_config with HOST_ID_ALL in
allowed_hosts and allow_dkek_export_tisci set.

Signed-off-by: Dave Gerlach <d-gerlach@ti.com>
Tested-by: Suman Anna <s-anna@ti.com>

1 files changed, 11 insertions, 0 deletions

diff --git a/soc/am65x/evm/sec-cfg.c b/soc/am65x/evm/sec-cfg.c
index 291b2af65..b15030749 100644
--- a/soc/am65x/evm/sec-cfg.c
+++ b/soc/am65x/evm/sec-cfg.c
@@ -71,4 +71,15 @@ const struct boardcfg_security am65_boardcfg_security_data = {
                 /* This is an array with 32 entries */
                 .otp_entry = {{ 0 } },
         },
+
+        /* DKEK configuration */
+        .dkek_config = {
+                .subhdr = {
+                        .magic = BOARDCFG_DKEK_CFG_MAGIC_NUM,
+                        .size = sizeof(struct boardcfg_dkek),
+                },
+                .allowed_hosts = { HOST_ID_ALL, 0, 0, 0 },
+                .allow_dkek_export_tisci = 0x5A,
+                .rsvd = {0, 0, 0},
+        },
 };