ci: make psa equiv for non-romlib fvp mbedtls confs
These have been generated by a script which
copies every config with "fvp*mbedtls" in its name,
excluding pre-existing psa-mbedtls configs and romlib configs,
and creates a psa-mbedtls equivalent with PSA_CRYPTO=1.
Some FVP configs also have FVP_TRUSTED_SRAM_SIZE=384
in the cases where they would otherwise fail to build.
The new configs are added to a psa-mbedtls-fvp
test group, which isn't part of the main CI.
Change-Id: I8c0bd5ac46293756e518393832f5e482c3f06de6
Signed-off-by: Ryan Everett <ryan.everett@arm.com>
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls b/tf_config/fvp-aarch32-tbb-psa-mbedtls
new file mode 100644
index 0000000..cd4bd2b
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls
@@ -0,0 +1,9 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-bl2-el3 b/tf_config/fvp-aarch32-tbb-psa-mbedtls-bl2-el3
new file mode 100644
index 0000000..ef408ff
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-bl2-el3
@@ -0,0 +1,10 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+RESET_TO_BL2=1
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-cc b/tf_config/fvp-aarch32-tbb-psa-mbedtls-cc
new file mode 100644
index 0000000..28e7d54
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-cc
@@ -0,0 +1,10 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-dualroot b/tf_config/fvp-aarch32-tbb-psa-mbedtls-dualroot
new file mode 100644
index 0000000..0b0ac40
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-dualroot
@@ -0,0 +1,10 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=arm-none-eabi-
+COT=dualroot
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-dualroot-cc b/tf_config/fvp-aarch32-tbb-psa-mbedtls-dualroot-cc
new file mode 100644
index 0000000..b39a683
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-dualroot-cc
@@ -0,0 +1,11 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=arm-none-eabi-
+COT=dualroot
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-ecdsa b/tf_config/fvp-aarch32-tbb-psa-mbedtls-ecdsa
new file mode 100644
index 0000000..295049c
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-ecdsa
@@ -0,0 +1,10 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-ecdsa-cc b/tf_config/fvp-aarch32-tbb-psa-mbedtls-ecdsa-cc
new file mode 100644
index 0000000..503181e
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-ecdsa-cc
@@ -0,0 +1,11 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-3k-cert b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-3k-cert
new file mode 100644
index 0000000..46026f1
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-3k-cert
@@ -0,0 +1,10 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+KEY_SIZE=3072
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-3k-cert-cc b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-3k-cert-cc
new file mode 100644
index 0000000..35bb281
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-3k-cert-cc
@@ -0,0 +1,11 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+KEY_SIZE=3072
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert
new file mode 100644
index 0000000..bc289ee
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert
@@ -0,0 +1,11 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+KEY_ALG=rsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert-cc b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert-cc
new file mode 100644
index 0000000..9a14a99
--- /dev/null
+++ b/tf_config/fvp-aarch32-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert-cc
@@ -0,0 +1,12 @@
+AARCH32_SP=sp_min
+ARCH=aarch32
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=arm-none-eabi-
+GENERATE_COT=1
+KEY_ALG=rsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-r-tbb-psa-mbedtls b/tf_config/fvp-r-tbb-psa-mbedtls
new file mode 100644
index 0000000..5f91e34
--- /dev/null
+++ b/tf_config/fvp-r-tbb-psa-mbedtls
@@ -0,0 +1,7 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp_r
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-bl2-el3 b/tf_config/fvp-tbb-psa-mbedtls-bl2-el3
new file mode 100644
index 0000000..22e7bbb
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-bl2-el3
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_rsa
+RESET_TO_BL2=1
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-cca-cot-in-dtb b/tf_config/fvp-tbb-psa-mbedtls-cca-cot-in-dtb
new file mode 100644
index 0000000..cc5e809
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-cca-cot-in-dtb
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+COT=cca
+COT_DESC_IN_DTB=1
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-ecdsa-cc b/tf_config/fvp-tbb-psa-mbedtls-ecdsa-cc
new file mode 100644
index 0000000..9106977
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-ecdsa-cc
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-ecdsa-sha512 b/tf_config/fvp-tbb-psa-mbedtls-ecdsa-sha512
new file mode 100644
index 0000000..d3ddbf4
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-ecdsa-sha512
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+HASH_ALG=sha512
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-ecdsa-sha512-cc b/tf_config/fvp-tbb-psa-mbedtls-ecdsa-sha512-cc
new file mode 100644
index 0000000..0e45487
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-ecdsa-sha512-cc
@@ -0,0 +1,11 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+HASH_ALG=sha512
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-ext-pstate-tspd-tsp-dram b/tf_config/fvp-tbb-psa-mbedtls-ext-pstate-tspd-tsp-dram
new file mode 100644
index 0000000..f4eff24
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-ext-pstate-tspd-tsp-dram
@@ -0,0 +1,11 @@
+ARM_RECOM_STATE_ID_ENC=1
+ARM_ROTPK_LOCATION=devel_rsa
+ARM_TSP_RAM_LOCATION=dram
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+PSCI_EXTENDED_STATE_ID=1
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p256-key b/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p256-key
new file mode 100644
index 0000000..0e49314
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p256-key
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_full_dev_ecdsa_key
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p384-key b/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p384-key
index 30e98ce..e5155b1 100644
--- a/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p384-key
+++ b/tf_config/fvp-tbb-psa-mbedtls-full-dev-ecdsa-p384-key
@@ -8,3 +8,4 @@
ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa_secp384r1.pem
TRUSTED_BOARD_BOOT=1
PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-full-dev-rsa-key b/tf_config/fvp-tbb-psa-mbedtls-full-dev-rsa-key
new file mode 100644
index 0000000..1fd09d1
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-full-dev-rsa-key
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_full_dev_rsa_key
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+KEY_ALG=rsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
\ No newline at end of file
diff --git a/tf_config/fvp-tbb-psa-mbedtls-full-dev-rsa-key-cc b/tf_config/fvp-tbb-psa-mbedtls-full-dev-rsa-key-cc
new file mode 100644
index 0000000..90f1060
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-full-dev-rsa-key-cc
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_full_dev_rsa_key
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+KEY_ALG=rsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
\ No newline at end of file
diff --git a/tf_config/fvp-tbb-psa-mbedtls-mb-spm-rme b/tf_config/fvp-tbb-psa-mbedtls-mb-spm-rme
new file mode 100644
index 0000000..ef285a5
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-mb-spm-rme
@@ -0,0 +1,17 @@
+ARM_ROTPK_LOCATION=devel_rsa
+BRANCH_PROTECTION=1
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_FEAT_MTE2=1
+CTX_INCLUDE_PAUTH_REGS=1
+ENABLE_RME=1
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+MEASURED_BOOT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SP_LAYOUT_FILE=${tftf_root}/build/fvp/${bin_mode}/sp_layout.json
+SPD=spmd
+TRUSTED_BOARD_BOOT=1
+GIC_EXT_INTID=1
+PLAT_TEST_SPM=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-no-cohmem b/tf_config/fvp-tbb-psa-mbedtls-no-cohmem
new file mode 100644
index 0000000..27aec1d
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-no-cohmem
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+USE_COHERENT_MEM=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-opteed-smc-load b/tf_config/fvp-tbb-psa-mbedtls-opteed-smc-load
new file mode 100644
index 0000000..0872805
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-opteed-smc-load
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+OPTEE_ALLOW_SMC_LOAD=1
+PLAT=fvp
+PLAT_XLAT_TABLES_DYNAMIC=1
+SPD=opteed
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-opteed-sram b/tf_config/fvp-tbb-psa-mbedtls-opteed-sram
new file mode 100644
index 0000000..7848200
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-opteed-sram
@@ -0,0 +1,8 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+SPD=opteed
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-pncd b/tf_config/fvp-tbb-psa-mbedtls-pncd
new file mode 100644
index 0000000..b514116
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-pncd
@@ -0,0 +1,11 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=pncd
+SPD_PNCD_NS_IRQ=126
+SPD_PNCD_S_IRQ=15
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rme-cot-in-dtb b/tf_config/fvp-tbb-psa-mbedtls-rme-cot-in-dtb
new file mode 100644
index 0000000..f82d7e5
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rme-cot-in-dtb
@@ -0,0 +1,11 @@
+ARM_ROTPK_LOCATION=devel_rsa
+COT_DESC_IN_DTB=1
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_RME=1
+FVP_HW_CONFIG_DTS=fdts/fvp-base-gicv3-psci-1t.dts
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-3k-cert b/tf_config/fvp-tbb-psa-mbedtls-rsa-3k-cert
new file mode 100644
index 0000000..b030669
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-3k-cert
@@ -0,0 +1,11 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=rsa
+KEY_SIZE=3072
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-3k-cert-cc b/tf_config/fvp-tbb-psa-mbedtls-rsa-3k-cert-cc
new file mode 100644
index 0000000..701a2d9
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-3k-cert-cc
@@ -0,0 +1,12 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=rsa
+KEY_SIZE=3072
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-4k-cert b/tf_config/fvp-tbb-psa-mbedtls-rsa-4k-cert
new file mode 100644
index 0000000..d96cf87
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-4k-cert
@@ -0,0 +1,11 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=rsa
+KEY_SIZE=4096
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-4k-cert-cc b/tf_config/fvp-tbb-psa-mbedtls-rsa-4k-cert-cc
new file mode 100644
index 0000000..6ef55b2
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-4k-cert-cc
@@ -0,0 +1,13 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=rsa
+KEY_SIZE=4096
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert b/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert
new file mode 100644
index 0000000..6f27205
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert
@@ -0,0 +1,12 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=rsa
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert-cc b/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert-cc
new file mode 100644
index 0000000..96ddc85
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-ecdsa-rotpk-rsa-cert-cc
@@ -0,0 +1,13 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=rsa
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-rsa-rotpk-ecdsa-cert-cc b/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-rsa-rotpk-ecdsa-cert-cc
new file mode 100644
index 0000000..6ba7a25
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-rsa-ecdsa-with-rsa-rotpk-ecdsa-cert-cc
@@ -0,0 +1,13 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=ecdsa
+LOG_LEVEL=20
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-tlkd b/tf_config/fvp-tbb-psa-mbedtls-tlkd
new file mode 100644
index 0000000..d081f87
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-tlkd
@@ -0,0 +1,8 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+SPD=tlkd
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-tsp-async b/tf_config/fvp-tbb-psa-mbedtls-tsp-async
new file mode 100644
index 0000000..9f77216
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-tsp-async
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+TSP_INIT_ASYNC=1
+FVP_TRUSTED_SRAM_SIZE=384
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-tsp-async-irq2el3 b/tf_config/fvp-tbb-psa-mbedtls-tsp-async-irq2el3
new file mode 100644
index 0000000..30922ca
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-tsp-async-irq2el3
@@ -0,0 +1,12 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+NS_TIMER_SWITCH=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+TSP_INIT_ASYNC=1
+TSP_NS_INTR_ASYNC_PREEMPT=1
+FVP_TRUSTED_SRAM_SIZE=384
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-tsp-async-irq2el3-no-cohmem b/tf_config/fvp-tbb-psa-mbedtls-tsp-async-irq2el3-no-cohmem
new file mode 100644
index 0000000..9325de0
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-tsp-async-irq2el3-no-cohmem
@@ -0,0 +1,13 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+FVP_TRUSTED_SRAM_SIZE=384
+NS_TIMER_SWITCH=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+TSP_INIT_ASYNC=1
+TSP_NS_INTR_ASYNC_PREEMPT=1
+USE_COHERENT_MEM=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tbb-psa-mbedtls-upcounter b/tf_config/fvp-tbb-psa-mbedtls-upcounter
new file mode 100644
index 0000000..a47b335
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-upcounter
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TFW_NVCTR_VAL=32
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tbb-psa-mbedtls-upcounter-cc b/tf_config/fvp-tbb-psa-mbedtls-upcounter-cc
new file mode 100644
index 0000000..cd28cd7
--- /dev/null
+++ b/tf_config/fvp-tbb-psa-mbedtls-upcounter-cc
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+TFW_NVCTR_VAL=32
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls b/tf_config/fvp-tspd-tbb-psa-mbedtls
new file mode 100644
index 0000000..60a2362
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+FVP_TRUSTED_SRAM_SIZE=384
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-cc b/tf_config/fvp-tspd-tbb-psa-mbedtls-cc
new file mode 100644
index 0000000..d2d191c
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-cc
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
+FVP_TRUSTED_SRAM_SIZE=384
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot b/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot
new file mode 100644
index 0000000..76225d0
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+COT=dualroot
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+FVP_TRUSTED_SRAM_SIZE=384
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot-cc b/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot-cc
new file mode 100644
index 0000000..0e63c2a
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot-cc
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+COT=dualroot
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot-cot-in-dtb b/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot-cot-in-dtb
new file mode 100644
index 0000000..322d045
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-dualroot-cot-in-dtb
@@ -0,0 +1,11 @@
+ARM_ROTPK_LOCATION=devel_rsa
+COT=dualroot
+COT_DESC_IN_DTB=1
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-ecdsa-dualroot b/tf_config/fvp-tspd-tbb-psa-mbedtls-ecdsa-dualroot
new file mode 100644
index 0000000..eab6a19
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-ecdsa-dualroot
@@ -0,0 +1,13 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+COT=dualroot
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+SPD=tspd
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+FVP_TRUSTED_SRAM_SIZE=384
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-ecdsa-dualroot-cc b/tf_config/fvp-tspd-tbb-psa-mbedtls-ecdsa-dualroot-cc
new file mode 100644
index 0000000..a2560cf
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-ecdsa-dualroot-cc
@@ -0,0 +1,13 @@
+ARM_ROTPK_LOCATION=devel_ecdsa
+COT=dualroot
+CROSS_COMPILE=aarch64-none-elf-
+ENABLE_ASSERTIONS=0
+GENERATE_COT=1
+KEY_ALG=ecdsa
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_ecdsa.pem
+SPD=tspd
+TF_MBEDTLS_KEY_ALG=rsa+ecdsa
+TRUSTED_BOARD_BOOT=1
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-rsa-4k-cert b/tf_config/fvp-tspd-tbb-psa-mbedtls-rsa-4k-cert
new file mode 100644
index 0000000..eb63554
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-rsa-4k-cert
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+KEY_SIZE=4096
+FVP_TRUSTED_SRAM_SIZE=384
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-rsa-4k-cert-cc b/tf_config/fvp-tspd-tbb-psa-mbedtls-rsa-4k-cert-cc
new file mode 100644
index 0000000..facbfe1
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-rsa-4k-cert-cc
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+CROSS_COMPILE=aarch64-none-elf-
+GENERATE_COT=1
+PLAT=fvp
+ROT_KEY=plat/arm/board/common/rotpk/arm_rotprivk_rsa.pem
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+KEY_SIZE=4096
+ENABLE_ASSERTIONS=0
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-tsp-dram b/tf_config/fvp-tspd-tbb-psa-mbedtls-tsp-dram
new file mode 100644
index 0000000..3644699
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-tsp-dram
@@ -0,0 +1,9 @@
+ARM_ROTPK_LOCATION=devel_rsa
+ARM_TSP_RAM_LOCATION=dram
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+PSA_CRYPTO=1
diff --git a/tf_config/fvp-tspd-tbb-psa-mbedtls-tsp-dram-no-cohmem b/tf_config/fvp-tspd-tbb-psa-mbedtls-tsp-dram-no-cohmem
new file mode 100644
index 0000000..0d075b8
--- /dev/null
+++ b/tf_config/fvp-tspd-tbb-psa-mbedtls-tsp-dram-no-cohmem
@@ -0,0 +1,10 @@
+ARM_ROTPK_LOCATION=devel_rsa
+ARM_TSP_RAM_LOCATION=dram
+CROSS_COMPILE=aarch64-none-elf-
+FVP_TRUSTED_SRAM_SIZE=384
+GENERATE_COT=1
+PLAT=fvp
+SPD=tspd
+TRUSTED_BOARD_BOOT=1
+USE_COHERENT_MEM=0
+PSA_CRYPTO=1
diff --git a/tf_config/imx8mm-mb_hash256-tbb-psa-mbedtls-debug b/tf_config/imx8mm-mb_hash256-tbb-psa-mbedtls-debug
new file mode 100644
index 0000000..146b4d6
--- /dev/null
+++ b/tf_config/imx8mm-mb_hash256-tbb-psa-mbedtls-debug
@@ -0,0 +1,9 @@
+CROSS_COMPILE=aarch64-none-elf-
+PLAT=imx8mm
+NEED_BL2=yes
+MEASURED_BOOT=1
+MBOOT_EL_HASH_ALG=sha256
+TRUSTED_BOARD_BOOT=1
+GENERATE_COT=1
+DEBUG=1
+PSA_CRYPTO=1