This feature is currently not supported on the ConnectCore 8X.

TrustFence support in Digi Embedded Yocto is encapsulated in the TrustFence class. This class must be inherited into your project’s conf/local.conf configuration file to use TrustFence support:

INHERIT += "trustfence"

The TrustFence class configures a set of default configuration options, including:

  • Secure boot with both signed and encrypted images

  • U-Boot environment encryption

  • Encrypted root filesystem

These defaults can be further modified by adding TRUSTFENCE configuration macros to your conf/local.conf file.

Trustfence features are only fully supported on closed devices. See Secure boot overview.