RSE: Allow CM ROTPK in non-endorsed flow
The non-endorsed provisioning flow (to provision DM ROTPKs late on in SE
state) uses a blob which then subsequently receives the plain data. This
blob can be signed using the CM ROTPK (specifically with the public key
in the blob and the hash of that key in the OTP) and therefore we need
to allow this signing configuration in SE LCS.
Update the ROTPK getter function in the provisioning flow to allow for
this LCS.
Change-Id: I97f506e25dd7dc9bbb5bf8bed913fc44bbac31e3
Signed-off-by: Jackson Cooper-Driver <jackson.cooper-driver@arm.com>
1 file changed