TrustFence support in Digi Embedded Yocto is encapsulated in the TrustFence class. This class must be inherited into your project’s conf/local.conf configuration file to use TrustFence support:
INHERIT += "trustfence"
The TrustFence class configures a set of default configuration options, including:
Secure boot with both signed and encrypted images
U-Boot environment encryption
Encrypted root filesystem
These defaults can be further modified by adding TRUSTFENCE configuration macros to your conf/local.conf file.
|Trustfence features are only fully supported on closed devices. See Secure boot overview.|