Configure security services - Qualcomm Dragonwing Documentation

Qualcomm Linux Security provides a wide range of security configurations aimed at enhancing device security, ensuring software authenticity and integrity, and protecting critical and sensitive information for both developers and users. This section guides you through the following configuration workflows.

Enable secure boot

Configure hardware-backed secure boot on the device.

Enable UEFI secure boot

Ensure only verified software is loaded during startup.

Enable device configuration from Qualcomm TEE

Apply device configuration changes from Qualcomm TEE.

Enable SELinux

Enforce strict access controls on the device.

Install or upgrade SoftSKU feature packs

Install or upgrade QCS5430 SoftSKU feature packs.

Next steps

To adjust Qualcomm TEE configurations, see Enable device configuration (Devcfg) from Qualcomm TEE.
To enable secure boot and to ensure only trusted applications run on the device, see Enable secure boot.
To enforce strict access controls, see Enable SELinux.
To ensure that only verified and trusted applications are loaded during startup, see Enable UEFI secure boot.
To install or upgrade QCS5430 SoftSKU feature packs, see Install or upgrade SoftSKU feature packs.

Verify the security configurations of Qualcomm Linux Enable device configurations from Qualcomm TEE

⌘I