Release notes - LSC23 

Contents

Release notes - LSC23

Release tag 

The manifest tag for this release is LSC23.1.

Platform Support 

This software release is tested on TC3 Fixed Virtual Platform (FVP) version 11.26.16.

Components 

The following is a summary of the key components of the release:

Board Support Package (BSP) build supports Debian distros;
Trusted firmware-A for secure boot;
EDK2 bootloader;
Hafnium for S-EL2 Secure Partition Manager core;
System Control Processor (SCP) firmware for programming the interconnect, power control, and so on;
Runtime Security Engine (RSE) - previously known as Runtime Security SubSystem (RSS) - firmware for providing hardware Root-of-Trust (RoT);

Hardware Features 

This software release provides the following high-level hardware features:

Arm® Tower MCN and NCI Interconnect with Memory Tagging Unit (MTU) support driver in SCP firmware;
Arm® CoreLink™ GIC-700 Generic Interrupt Controller in Trusted Firmware-A;
Mali-G725 GPU;
Arm® Mali™-D71 Display Processor and virtual encoder support for display on Linux;
MHUv3 Driver for SCP and Application Processor (AP) communication;
UARTs, Timers, Flash, Clock drivers, CCSM (Clock Control State Machine);
PL180 MMC;
DynamIQ Shared Unit (DSU) with 8 cores (2x Cortex-X925 + 4x Cortex-A725 + 2x Cortex-A520 cores configuration);
Cortex®-M55-based Runtime Security Engine (RSE);
Cortex®-M85-based System Control Processor (SCP).

Software Features 

Debian 12 (aka Bookworm);

KVM default mode of operation is set to protected by default, thus effectively enabling pKVM on the system. This is a nVHE based mode with kernel running at EL1;

Maximum Power Mitigation Mechanism (MPMM) support;

Support for Memory System Resource Partitioning and Monitoring (MPAM) (see link);

Support for Energy Aware Scheduling (EAS) (see link);

Trusted Firmware-A v2.10;

Hafnium v2.10 as Secure Partition Manager (SPM) at S-EL2;

OP-TEE 4.2.0 as Secure Partition at S-EL1, managed by S-EL2 SPMC (Hafnium), support in Buildroot distribution. This includes OP-TEE client and OP-TEE test suite;

Trusty with FF-A messaging - FF-A v1.0;

Tower Interconnect PMU’s enabled for profiling;

Support for secure boot based on Trusted Boot Board Requirements (TBBR) specification (see link);

System Control Processor (SCP) firmware v2.14;

Runtime Security Engine (RSE) firmware v2.0.0;

EDK2 v202411 (Nov 2024);

Power management features: cpufreq and cpuidle;

System Control and Management Interface (SCMI) support;

Trusted Services (Crypto and Internal Trusted Storage) running at S-EL0;

Tools Support 

This software release extends docker support to Debian distro (making it supported to all TC build variants).

Limitations 

Development Host OS Support 

Ubuntu 22.04 is not supported in this release;

Known issues 

The SSH connection to the FVP running Debian may fail due to a “Host key verification failed…” error. To resolve this issue, you can use the following command to remove the localhost entry and try again: ssh-keygen -f "$HOME/.ssh/known_hosts" -R "[localhost]:8022"

Below are the known failures seen in ACS test

SCT Test Failures

PlatformSpecificElements: [FAILED]
  Passes........... 6
  Warnings......... 19
  Errors........... 5

ExitBootServices_Conf: [FAILED]
  Passes........... 0
  Warnings......... 0
  Errors........... 1

GetNextMonotonicCount_Func: [FAILED]
  Passes........... 15
  Warnings......... 0
  Errors........... 3

SetVariable_Func: [FAILED]
  Passes........... 76
  Warnings......... 0
  Errors........... 4

SetTime_Func: [FAILED]
  Passes........... 12
  Warnings......... 0
  Errors........... 4

MediaIoProtocols: [FAILED]
  Passes........... 0
  Warnings......... 0
  Errors........... 1

SmbiosTable: [FAILED]
  Passes........... 0
  Warnings......... 0

BSA Test Failures

Operating System View:
1 : Check Arch symmetry across PE
        Primary PE Index    : 0
        Primary PE MIDR_EL1 : 0x410FD801
Other Cores         : 0x410FD870
                   0x410FD850
PE Index: 2, ID_AA64DFR0_EL1    : 0x100F11F310305719    FAIL
  Masked Primary PE Value : 0x100F110000000000
  Masked Current PE Value : 0x100F110000000000
PE Index: 2, ID_AA64MMFR1_EL1   : 0x1001111010312122    FAIL
  Masked Primary PE Value : 0x1001110000000000
  Masked Current PE Value : 0x1001110000000000
PE Index: 2, PMCEID0_EL0        : 0x0000000F72DBFFFF    FAIL
  Masked Primary PE Value : 0x0000000040000000
  Masked Current PE Value : 0x0000000040000000
PE Index: 3, ID_AA64DFR0_EL1    : 0x100F11F310305719    FAIL
  Masked Primary PE Value : 0x100F11F010301719
  Masked Current PE Value : 0x100F11F310301719
PE Index: 3, ID_AA64MMFR1_EL1   : 0x1001111010312122    FAIL
  Masked Primary PE Value : 0x1001111011312122
  Masked Current PE Value : 0x1001111010312122
PE Index: 3, PMCEID0_EL0        : 0x0000000F72DBFFFF    FAIL
  Masked Primary PE Value : 0x0000000072DB3FFF
  Masked Current PE Value : 0x0000000F72DB3FFF
PE Index: 4, ID_AA64DFR0_EL1    : 0x100F11F310305719    FAIL
  Masked Primary PE Value : 0x100F11F010305719
  Masked Current PE Value : 0x100F11F310305719
PE Index: 4, ID_AA64MMFR1_EL1   : 0x1001111010312122    FAIL
  Masked Primary PE Value : 0x1001111011312122
  Masked Current PE Value : 0x1001111010312122
PE Index: 4, PMCEID0_EL0        : 0x0000000F72DBFFFF    FAIL
  Masked Primary PE Value : 0x0000000072DBFFFF
  Masked Current PE Value : 0x0000000F72DBFFFF
PE Index: 5, ID_AA64DFR0_EL1    : 0x100F11F310305719    FAIL
  Masked Primary PE Value : 0x100F11F010305719
  Masked Current PE Value : 0x100F11F310305719
PE Index: 5, ID_AA64MMFR1_EL1   : 0x1001111010312122    FAIL
  Masked Primary PE Value : 0x1001111011312122
  Masked Current PE Value : 0x1001111010312122
PE Index: 5, PMCEID0_EL0        : 0x0000000F72DBFFFF    FAIL
  Masked Primary PE Value : 0x0000000072DBFFFF
  Masked Current PE Value : 0x0000000F72DBFFFF
PE Index: 6, ID_AA64DFR0_EL1    : 0x100F11F310305719    FAIL
  Masked Primary PE Value : 0x100F11F010305719
  Masked Current PE Value : 0x100F11F310305719
PE Index: 6, ID_AA64MMFR1_EL1   : 0x1001111010312122    FAIL
  Masked Primary PE Value : 0x1001111011312122
  Masked Current PE Value : 0x1001111010312122
PE Index: 6, PMCEID0_EL0        : 0x0F0F1A7F7FFF6F3F    FAIL
  Masked Primary PE Value : 0x0000000072DBFFFF
  Masked Current PE Value : 0x0F0F1A7F7FFF6F3F
PE Index: 6, PMCEID1_EL0        : 0x00000077FEF2AE7F    FAIL
  Masked Primary PE Value : 0x00000000FEFE087A
  Masked Current PE Value : 0x00000077FEF2AE7F
PE Index: 6, PMCR_EL0           : 0x000000000000F840    FAIL
  Masked Primary PE Value : 0x0000000000003040
  Masked Current PE Value : 0x000000000000F840
PE Index: 7, ID_AA64DFR0_EL1    : 0x100F11F310305719    FAIL
  Masked Primary PE Value : 0x100F11F010305719
  Masked Current PE Value : 0x100F11F310305719
PE Index: 7, ID_AA64MMFR1_EL1   : 0x1001111010312122    FAIL
  Masked Primary PE Value : 0x1001111011312122
  Masked Current PE Value : 0x1001111010312122
PE Index: 7, PMCEID0_EL0        : 0x0F0F1A7F7FFF6F3F    FAIL
  Masked Primary PE Value : 0x0000000072DBFFFF
  Masked Current PE Value : 0x0F0F1A7F7FFF6F3F
PE Index: 7, PMCEID1_EL0        : 0x00000077FEF2AE7F    FAIL
  Masked Primary PE Value : 0x00000000FEFE087A
  Masked Current PE Value : 0x00000077FEF2AE7F
PE Index: 7, PMCR_EL0           : 0x000000000000F840    FAIL
  Masked Primary PE Value : 0x0000000000003040
  Masked Current PE Value : 0x000000000000F840

Total Register and cache fail for all PE: 22

Failed on PE -    2
B_PE_01
Checkpoint --  2                           : Result:  FAIL

6 : Check Cryptographic extensions
  Failed on PE -    0
  B_PE_06
  Checkpoint --  1                           : Result:  FAIL

14 : Check PAuth if implementation
  Failed on PE -    0
  B_PE_15
  Checkpoint --  1                           : Result:  FAIL

405 : Restore PE timer on PE wake up
  System timer interrupt not generated
  Failed on PE -    0
  B_TIME_09
  Checkpoint --  1                           : Result:  FAIL

Support 

For support email: support@arm.com.