The following section defines those U-Boot configuration variables that can be configured using the kbuild build system configuration tools, such as menuconfig or xconfig. You can access the configuration user interfaces using

~$ make menuconfig

This will build and run an ncurses-based configuration UI.

You can also build and run a graphical QT-based UI using

~$ make xconfig

Configure a secure console

U-Boot allows you to configure console activation at boot. Go to General setup > Console settings in your configuration tool of choice and define the following configuration variables:

  • CONSOLE_DISABLE: This setting disables the U-Boot input and output consoles and performs a silent boot into Linux. You can then choose whether to optionally enable the console in one of two exclusive methods:

    • CONSOLE_ENABLE_GPIO: Use this setting to enable the console when the selected GPIO is high at boot.

    • CONSOLE_ENABLE_PASSPHRASE: Use this setting to enable the console when the correct passphrase is used at boot time.

      • CONSOLE_ENABLE_PASSPHRASE_KEY: This is the SHA-256 hash of the passphrase in binary form. You can generate it using the following command:

        ~$ echo -n "mypassphrase" | sha256sum
        788006caf535441ad49e2747bb0edd0203f38a74caacf7c337fc1a9ecfa99cd8  -

See the Digi TrustFence for Yocto for further details.