[keymgr_dpe, sw] Read DISABLE_KEYMGR_DPE field in the CREATOR_SW_CFG OTP section
@rroth-lowrisc is already working on this.
Since Jul 22, 2026.
- Dominant language
- SystemVerilog
- Stars
- 3.6k
- Forks
- 1.1k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 141
Description
### Description
A new field called **DISABLE_KEYMGR_DPE** will be introduced in the CREATOR_SW_CFG OTP section. As defined in [this RFC](https://docs.google.com/document/d/1iF0EWyJkSEtRL9d057imLo4s6DWNrZ6Mpt0QKD8OMMc/edit?tab=t.0) this field allows to jump the `keymgr_dpe` initialization in the **ROM** section. If this field is set to **true** then the `keymgr_dpe` loads the sw binding value / max key version for the attestation _CreatorRootKey_ but does not derive the corresponding DPE context. The derivation is only done in the immutable section from **ROM_EXT**.
This fallback solution allows to continue even if the _entropy_src_ is not properly initialized.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.