diff options
| author | Simon Glass <sjg@chromium.org> | 2019-07-20 20:51:17 -0600 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2019-08-02 11:19:14 -0400 |
| commit | 88fa4beb631c5329bf616554f7d2714ece7a5f0b (patch) | |
| tree | 845ded2b808a0c57184b45d83035487aa8dbc60c /cmd | |
| parent | e8c780560ad2a3104c0cbfbb61f0ac229881599d (diff) | |
autoboot: Improve docs for CONFIG_AUTOBOOT_ENCRYPTION
This option is not documented properly at present. Fix it.
Signed-off-by: Simon Glass <sjg@chromium.org>
Diffstat (limited to 'cmd')
| -rw-r--r-- | cmd/Kconfig | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/cmd/Kconfig b/cmd/Kconfig index 16cb5c2956c..2cbfc0f87ec 100644 --- a/cmd/Kconfig +++ b/cmd/Kconfig @@ -101,7 +101,14 @@ config AUTOBOOT_PROMPT config AUTOBOOT_ENCRYPTION bool "Enable encryption in autoboot stopping" depends on AUTOBOOT_KEYED - default n + help + This option allows a string to be entered into U-Boot to stop the + autoboot. The string itself is hashed and compared against the hash + in the environment variable 'bootstopkeysha256'. If it matches then + boot stops and a command-line prompt is presented. + + This provides a way to ship a secure production device which can also + be accessed at the U-Boot command line. config AUTOBOOT_DELAY_STR string "Delay autobooting via specific input key / string" |