Hi Ghy,

The reference implementation for integrating Hafnium and Trusted Services is the Total Compute Reference Solution. This software stack is maintained by the Arn Reference Solution Team, and they maintain dedicated documentation for the software stack. Unfortunately, the TC platform support has not been up-streamed to Trusted Services yet, and our documentation misses the pointers to TC documentation.

You have already found the TC documentation, but for the sake of completeness let me duplicate the link here: https://totalcompute.docs.arm.com/en/latest/totalcompute/tc2/user-guide.html Please refer to this documentation for detailed setup, build and run instructions. If you need further help, please ping davidson.kumaresan at arm.com (on CC).

In general, for platform specific information (build environment setup, build and run instructions, memory map, HW features, integrated SPs, etc...) the TC team will be your contact. For TS specific information (how a service works, howto extend a service or add a new service, etc...) the TS team is your best contact. To simplify things, I invited Davidson to this mailing list, thus he will receive any further emails sent to this list.

Regards: George

-----Original Message----- From: haiyuan.ghy--- via Trusted-services trusted-services@lists.trustedfirmware.org Sent: Monday, October 30, 2023 8:06 AM To: trusted-services@lists.trustedfirmware.org Subject: [Trusted-services] How to run trusted services under Hafnium, without OP-TEE

Hi experts: I want to run S-EL0 trusted services under S-EL2 Hafnium, without S-EL1 OP-TEE, in FVP simulation.

I see totalcompute project integrates trusted-service with architecture, that S-EL0 can run under S-EL2, as here: https://totalcompute.docs.arm.com/en/latest/totalcompute/tc2/tc2_sw_stack.ht...

However, trusted-service documents only describe S-EL0 examples running under S-EL1 OP-TEE https://trusted-services.readthedocs.io/en/v1.0.0-beta/quickstart/optee-test... https://trusted-services.readthedocs.io/en/v1.0.0-beta/environments/secure-p...

Anyone can help? -- Trusted-services mailing list -- trusted-services@lists.trustedfirmware.org To unsubscribe send an email to trusted-services-leave@lists.trustedfirmware.org