Adapt the README file because the distribution on which Primary
Compute subsystem is based has been changed from Cassini to EWAOL.

Signed-off-by: Maximilian Berndt <maximilian.berndt@arm.com>

- Fix incorrect if() conditional statements in RSS drivers.
- Update the release note.

Signed-off-by: David Hu <david.hu2@arm.com>

Change diagram to show that RSE BL1_2 is executed from SRAM, because
the current diagram suggests that BL1_2 is executed from OTP memory,
which is not the case.
Additionally, change diagram to show that BL2 releases SCP RAMFW from
reset, because the diagram suggests that this is done by RSE Runtime.

Signed-off-by: Maximilian Berndt <maximilian.berndt@arm.com>

- Google Analytics support is ended on the RTD side, so Sphinx Google
Analytics extension is used instead.

Signed-off-by: Musa Antike <musa.antike@arm.com>

Use the RTD_ENV_ARM_AUTO_SOLUTIONS_VERSION backend variable
to get the arm-auto-solutions version, in its absence, few
other variable will be fetched, in case no variable is found
a default value will be used.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Ambroise Vincent authored Oct 01, 2024 and Luca Fancellu committed Oct 02, 2024

There is currently no workaround for this.

Signed-off-by: Ambroise Vincent <ambroise.vincent@arm.com>

Currently, the xl.cfg configuration for the DomU1 is wrongly
assigning the vCPU0 to run on either the pCPU 1 or 2, instead
what was intended was to pin both vCPU0 and vCPU1 to the pCPU1
and pCPU2 respectively.

Correct the xl.cfg syntax to have that behaviour.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Signed-off-by: Michael Zhao <michael.zhao2@arm.com>

Isaac Perry authored Sep 20, 2024 and Michael Zhao committed Oct 01, 2024

Copy the results of the capsule update test run in the ACS tests to the
FW directory so that it can be used by check-sr-results.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>

Isaac Perry authored Sep 20, 2024 and Michael Zhao committed Oct 01, 2024

Expect capsule-update.log as part of the results of the ACS tests.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>

Isaac Perry authored Sep 13, 2024 and Michael Zhao committed Oct 01, 2024

The capsule update is automated to test that SystemReady requirements
for the FWU are met.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>
Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>
Signed-off-by: Michael Zhao <michael.zhao2@arm.com>

Change the 'Unreleased' section to 'v1.1'.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Move the entry about fixing the RSE for the RSE<->AP
communication in the 'Resolved Issues' section, where
it belongs.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Update the component table entries in the component page, aligning
them to the v1.1 release.

Add a deviation for the cspell checker for the conf.py file, since
the name of the branch for the TF-A is in the not-allowed list.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Update the component table in the integration page for the v1.1
release.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Update the name of the branch for Trusted Firmware M and
SCP firmware in the component table of the release notes
page.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Add a full stop on all the entries of the bullet list of the
changed section to be consistent with the Changed section of
the 1.0 release.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Ziad Elhanafy authored Oct 01, 2024 and Luca Fancellu committed Oct 01, 2024

1- Add an additional screenshot showing what to choose when
   the `Install the GRUB boot loader` prompt appears.
2- Remove a redundant `mkdir` command which failed because the
   directory already exists, also update the related screenshot.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Ziad Elhanafy authored Oct 01, 2024 and Luca Fancellu committed Oct 01, 2024

In the Secure Firmware Update, when the firmware update starts,
RSE writes the image into the flash correctly. Then both
RSE and U-Boot restart. U-Boot will require the RSE to write
the image again. Since the image version has been updated, RSE
will report a version error message.

Add a note in the documentation to tell the user that this
is an expected behavior.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Ziad Elhanafy authored Oct 01, 2024 and Luca Fancellu committed Oct 01, 2024

Remove the width property from all documentation diagrams as they
were causing the diagrams in the HTML version of the document
to not scale correctly when zooming in/out.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Ziad Elhanafy authored Oct 01, 2024 and Luca Fancellu committed Oct 01, 2024

Fix the indentation of some code blocks in the CAM Virtualization
use case, which were causing the document to not be rendered
as expected.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Capsule authentication has been implemented as part of Secure Firmware
Update. The documentation makes note of this.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>
Signed-off-by: Michael Zhao <michael.zhao2@arm.com>

The current capsule tampering for test doesn't modify header info,
authentication info or payload in a capsule. This tampering might not be
detected.

Enhance the tampering by modifying the last few bytes of payload in the
capsule.

Signed-off-by: David Hu <david.hu2@arm.com>

1- Align steps correctly in UEFI Secure Boot process.
2- Remove width property Secure Flash layout and Secure Firmware
   Update diagrams.
3- Rename `Armv8-R64` to `Armv8-R AArch64`.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Bump the CAM version to the latest changes by modifying the SHA,
reflect the change also in the documentation and remove unused
strings related to CAM from the rst_prolog in conf.py.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Config changes and a Kronos FVP platform specific capsule update method
enable capsule authentication. This prevents unsigned or tampered
update capsules from being run by the firmware.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>

The update capsule signature is inserted as a capsule-key node into the
dts. The firmware uses the capsule-key to verify the update capsule's
signature when capsule authentication is enabled.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>

Three update capsules are deployed on the MMC for testing the capsule
update. One is signed with a verification signature, one is unsigned
and the last is a signed capsule that has been tampered with.

Signed-off-by: Isaac Perry <isaac.perry@arm.com>

Ziad Elhanafy authored Sep 24, 2024 and Luca Fancellu committed Sep 25, 2024

Basic spinlock implementation is based on single
atomic variable and doesn't guarantee locking fairness
across multiple CPUs. It's even possible that single CPU
will win the contention every time which will result
in a live-lock.

Ticket spinlocks provide a FIFO order of lock acquisition
which resolves such unfairness issue at the cost of slightly
increased memory footprint.

Also remove the HIPC Safety Island Cluster hang known issue.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Ziad Elhanafy authored Sep 22, 2024 and Luca Fancellu committed Sep 25, 2024

Random invalid characters in the Safety Island Clusters logs
cause the decode function to fail with a UnicodeDecodeError.
Replace those invalid characters with a replacement
character to avoid the failure of OEQA tests.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Ziad Elhanafy authored Sep 18, 2024 and Luca Fancellu committed Sep 25, 2024

After enabling the stack monitoring in Zephyr, it seems that we
have multiple stack overflows in different threads.

Increase the stack size for these threads to prevent such issues.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Documentation Updated:
- Added Memory layout for PS storage
- Added asset layout for EFI variables and FMU faults
- Added Memory layout for ITS storage

Signed-off-by: Ahmed Azeem <ahmed.azeem@arm.com>

Document heading hierarchy was fixed:

Ensured that the order of #->*->=->-->^
was followed in the secure_services.rst headings

Signed-off-by: Ahmed Azeem <ahmed.azeem@arm.com>

Add a downstream patch for the meta-arm layer, fixing an issue on the
OEQA lib python class used for FVP.

Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Amr Mohamed authored Sep 18, 2024 and Luca Fancellu committed Sep 23, 2024

Update unattended openSUSE oeqa test suite patch
applied by kas increasing timeouts failing on CI.

Override Kubernetes memory limits for the OpenSUSE
job that requires more memory than the other distros
installation.

Signed-off-by: Amr Mohamed <amr.mohamed@arm.com>
Signed-off-by: Luca Fancellu <luca.fancellu@arm.com>

Ziad Elhanafy authored Sep 17, 2024 and Luca Fancellu committed Sep 23, 2024

It looks like kas parses the includes in the yml file before
applying the patches. Since the patch makes a change to the yml
file, the parsed file does not have the changes inside it.
This causes the OpenSUSE Unattended Installation to not run.

Apply the patch changes to the sw-ref-stack yml file directly
and remove the patch file to avoid this issue.

Signed-off-by: Ziad Elhanafy <ziad.elhanafy@arm.com>

Ambroise Vincent authored Sep 20, 2024 and Luca Fancellu committed Sep 23, 2024

Signed-off-by: Ambroise Vincent <ambroise.vincent@arm.com>

Ambroise Vincent authored Sep 19, 2024 and Luca Fancellu committed Sep 23, 2024

The information in the paragraph is incorrect. And the mention of this
specific interconnect stands out since the other CMN and NCIs do not
appear in the documentation.

Signed-off-by: Ambroise Vincent <ambroise.vincent@arm.com>

Ambroise Vincent authored Sep 19, 2024 and Luca Fancellu committed Sep 23, 2024

Remove a diagram that overlapped with the more complete and more
accurate Boot Process one. Refer to it from the Components page.

Signed-off-by: Ambroise Vincent <ambroise.vincent@arm.com>

Add a new section in the user guide to show how to change the
disk and memory size.

Signed-off-by: Debbie Martin <Debbie.Martin@arm.com>