CONFIG_TFM_ISOLATION_LEVEL

Isolation level setting.

Type: int

Help

Manually set the required TFM isolation level. Possible values are
1,2 or 3; the default is set by build configuration. When TF-M
Profile option is supplied, do not allow manual setting of the
isolation level, as it is determined by the profile setting.
As isolation levels 2 and 3 require PSA_API (TFM_IPC) support,
force level 1 when TFM_IPC is not enabled.

Help

Manually set the required TFM isolation level. Possible values are
1,2 or 3; the default is set by build configuration. When TF-M
Profile option is supplied, do not allow manual setting of the
isolation level, as it is determined by the profile setting.
As isolation levels 2 and 3 require PSA_API (TFM_IPC) support,
force level 1 when TFM_IPC is not enabled.

Direct dependencies

(BUILD_WITH_TFM && BUILD_WITH_TFM) || (BUILD_WITH_TFM && BUILD_WITH_TFM && 0)

(Includes any dependencies from ifs and menus.)

Defaults

1 if TFM_PROFILE_TYPE_SMALL || !TFM_IPC
2 if TFM_PROFILE_TYPE_MEDIUM
3 if TFM_PROFILE_TYPE_LARGE
1 if TFM_PROFILE_TYPE_SMALL || !TFM_IPC
2 if TFM_PROFILE_TYPE_MEDIUM
3 if TFM_PROFILE_TYPE_LARGE

Kconfig definitions

At <Zephyr>/modules/trusted-firmware-m/Kconfig.tfm:127

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:6 → <nRF>/doc/_build/kconfig/Kconfig.modules:20 → <nRF>/modules/trusted-firmware-m/Kconfig:44

Menu path: (Top) → Modules → trusted-firmware-m (/home/runner/work/sdk-nrf/sdk-nrf/ncs/modules/tee/tf-m/trusted-firmware-m) → Build with TF-M as the Secure Execution Environment

config TFM_ISOLATION_LEVEL
    int "Isolation level setting." if TFM_PROFILE_TYPE_NOT_SET && TFM_IPC
    range 1 3
    default 1 if TFM_PROFILE_TYPE_SMALL || !TFM_IPC
    default 2 if TFM_PROFILE_TYPE_MEDIUM
    default 3 if TFM_PROFILE_TYPE_LARGE
    depends on BUILD_WITH_TFM && BUILD_WITH_TFM
    help
      Manually set the required TFM isolation level. Possible values are
      1,2 or 3; the default is set by build configuration. When TF-M
      Profile option is supplied, do not allow manual setting of the
      isolation level, as it is determined by the profile setting.
      As isolation levels 2 and 3 require PSA_API (TFM_IPC) support,
      force level 1 when TFM_IPC is not enabled.

At <Zephyr>/modules/trusted-firmware-m/Kconfig.tfm:127

Included via <Zephyr>/Kconfig:8 → <Zephyr>/Kconfig.zephyr:33 → <Zephyr>/modules/Kconfig:80 → <Zephyr>/modules/trusted-firmware-m/Kconfig:7

Menu path: (Top) → Modules → Build with TF-M as the Secure Execution Environment

config TFM_ISOLATION_LEVEL
    int "Isolation level setting." if TFM_PROFILE_TYPE_NOT_SET && TFM_IPC
    range 1 3
    default 1 if TFM_PROFILE_TYPE_SMALL || !TFM_IPC
    default 2 if TFM_PROFILE_TYPE_MEDIUM
    default 3 if TFM_PROFILE_TYPE_LARGE
    depends on BUILD_WITH_TFM && BUILD_WITH_TFM && 0
    help
      Manually set the required TFM isolation level. Possible values are
      1,2 or 3; the default is set by build configuration. When TF-M
      Profile option is supplied, do not allow manual setting of the
      isolation level, as it is determined by the profile setting.
      As isolation levels 2 and 3 require PSA_API (TFM_IPC) support,
      force level 1 when TFM_IPC is not enabled.

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)