Supported Platforms

Trusted Substrate supports a variety of armv8 and armv7 boards. It’s important to understand that the hardware characteristics dictate the supported features as well as the level of the device security

Software Components

Generally the following software components are used to boot up the boards and setup the chain of trust

• U-Boot

• OP-TEE

• TF-A

• firmware TPM

• StandAloneMM from EDK2

• SCP

A high level overview of the boot chain looks will look like this

Board Support

• QEMU (arm64)

• SynQuacer DeveloperBox

• stm32mp157c-dk2

• stm32mp157c-ev1

• Rockpi4

• Raspberry Pi4

• Xilinx kv260 starter kit

• Xilinx kv260 commercial

Supported platform features

Board	FSBL	Secure Boot	Measured Boot	Auth. Capsule Updates	A/B updates
QEMU	TF-A	Yes (Built-in vars)	Yes	No	No
DeveloperBox	SCP + TF-A	Yes (RPMB vars)	Yes [fTPM]	Yes	WIP
stm32mp157c-dk2	TF-A	Yes (Built-in vars)	No	No	WIP
stm32mp157c-ev1	TF-A	Yes (RPMB vars)	No	No	WIP
Rockpi4	U-Boot SPL	Yes (RPMB vars)	Yes [fTPM]	Yes	No
Raspberry Pi4	Proprietary	Yes (Built-in vars)	Yes (needs SPI TPM)	No	No
Xilinx kv260 starter kit	U-Boot SPL	Yes (Built-in vars)	Yes	Yes	WIP
Xilinx kv260 commercial	U-Boot SPL	Yes (Built-in vars)	Yes	Yes	WIP