The R5 code will load the full barebox binary which needs to be authenticated in order to get a secure boot flow. Select HAS_INSECURE_DEFAULTS when no authentication method is compiled in. Signed-off-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> --- arch/arm/mach-k3/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm/mach-k3/Kconfig b/arch/arm/mach-k3/Kconfig index e93e3154c8..3dcdb20186 100644 --- a/arch/arm/mach-k3/Kconfig +++ b/arch/arm/mach-k3/Kconfig @@ -19,6 +19,7 @@ config MACH_K3_CORTEX_R5 select HAVE_FIRMWARE_VERIFY_NEXT_IMAGE depends on 32BIT select ARM_USE_COMPRESSED_DTB + select HAS_INSECURE_DEFAULTS if (!FIRMWARE_VERIFY_NEXT_IMAGE && !ARCH_K3_AUTHENTICATE_IMAGE) default y config MACH_K3_CORTEX_A -- 2.39.5