tegra-uefi-keys: add support for update keys

new to R35.4.1, and used in BUP payloads.

Signed-off-by: Matt Madison <matt@madison.systems>

recipes-bsp/uefi/tegra-uefi-keys-dtb.bb

@@ -4,11 +4,14 @@ LIC_FILES_CHKSUM = "file://${COMMON_LICENSE_DIR}/MIT;md5=0835ade698e0bcf8506ecda
 
 COMPATIBLE_MACHINE = "(tegra)"
 
-# Add a bbappend to this recipe to supply a
-# non-empty file continaing the key information,
-# as generated by gen_uefi_default_keys_dts.sh
+# Add a bbappend to this recipe to supply
+# non-empty files continaing the key information,
+# as generated by gen_uefi_keys_dts.sh
 # in the L4T kit.
-SRC_URI = "file://UefiDefaultSecurityKeys.dts"
+SRC_URI = "\
+    file://UefiDefaultSecurityKeys.dts \
+    file://UefiUpdateSecurityKeys.dts \
+"
 
 inherit deploy nopackages
 
@@ -20,10 +23,14 @@ do_configure() {
     if [ ! -s "${WORKDIR}/UefiDefaultSecurityKeys.dts" ]; then
         bbfatal "Please provide a non-empty UefiDefaultSecurityKeys.dts"
     fi
+    if [ ! -s "${WORKDIR}/UefiUpdateSecurityKeys.dts" ]; then
+        bbfatal "Please provide a non-empty UefiUpdateSecurityKeys.dts"
+    fi
 }
 
 do_compile() {
     dtc -Idts -Odtb -o ${B}/UefiDefaultSecurityKeys.dtbo ${WORKDIR}/UefiDefaultSecurityKeys.dts
+    dtc -Idts -Odtb -o ${B}/UefiUpdateSecurityKeys.dtbo ${WORKDIR}/UefiUpdateSecurityKeys.dts
 }
 
 do_install[noexec] = "1"
@@ -31,6 +38,7 @@ do_install[noexec] = "1"
 do_deploy() {
     install -d ${DEPLOYDIR}
     install -m 0644 ${B}/UefiDefaultSecurityKeys.dtbo ${DEPLOYDIR}/
+    install -m 0644 ${B}/UefiUpdateSecurityKeys.dtbo ${DEPLOYDIR}/
 }
 
 addtask deploy before do_build after do_compile