Running multiple TEE on Hikey

Products Support HiKey
#1

Hello,

I wanted to ask if its possible to run multiple instances of TEE on the hikey 620 board.

Related:
Page 38: https://globalplatform.org/wp-content/uploads/2018/09/GPD_TEE_SystemArch_v1.1.0.10-for-v1.2_PublicReview.pdf
Page 18: https://www.securetechalliance.org/wp-content/uploads/TEE-101-White-Paper-FINAL2-April-2018.pdf

Thanks

#2

To run multiple instances of TEE (or multiple trusted OS), we need proper resource partitioning in secure world which could be achieved via some sort of hypervisor in secure world like we have in normal world (EL2).

Secure EL2 (secure virtualization extensions) is added via recent ARMv8.4 architecture [1] which is not supported by hikey620. And I am not sure if there is any publicly available SoC supporting this secure world extension.

Also, current open source software software stack (TF-A and OP-TEE) doesn’t support multiple instances of TEE. But it seems to be WIP, see [2].

[1] https://community.arm.com/processors/b/blog/posts/architecting-more-secure-world-with-isolation-and-virtualization
[2] https://osfc.io/uploads/talk/paper/18/osfc_secure_partitions.pdf

1 Like
Running multiple TEE on Hikey 960