Hi,

With RME enabled FVP_Base_RevC_2xAEMvA, we are trying to have TF-A's BL31 successfully exit EL3 and jump to a normal world boot firmware (edk2 UEFI boot loader) instead of tftf.bin. Yet, it fails with the following log messages (showing the last 3):

INFO:    BL31: Preparing for EL3 exit to normal world

INFO:    Entry point address = 0x88000000

INFO:    SPSR = 0x3c9

We could boot and run RMM and tftf.bin successfully following the instructions on the TF-A documentation page (https://trustedfirmware-a.readthedocs.io/en/latest/components/realm-management-extension.html). While keeping build and run commands same, we tried to just replace the tftf.bin with FVP_AARCH64_EFI.fd, the build artifact of the edk2-platform for ARM (https://github.com/tianocore/edk2-platforms/tree/master/Platform/ARM)

We checked both tftf.bin and FVP_AARCH64_EFI.fd cases result in the same entry point address 0x88000000. Yet, the latter stops after exiting EL3 as aforementioned, unlike tftf.bin which successfully proceeds to run some tests afterwards. Also, we found that FVP_AARCH64_EFI.fd can boot successfully with the same fast model but without RME enabled.

What is the possible reason for this symptom and the necessary tweaks we should do to address this issue? What should we look for to get some clue?

Cheers,