Mention Secretkeeper public key
We use the VM reference DT mechanism to securely provision the
Secretkeeper public key to pvmfw. Mention it here and link to the
documentation.
Bug: 291232226
Test: N/A
Change-Id: I0ff520eb2d1755965b85d7586894cb87e3497b0f
diff --git a/pvmfw/README.md b/pvmfw/README.md
index 5d347b2..795bb05 100644
--- a/pvmfw/README.md
+++ b/pvmfw/README.md
@@ -214,14 +214,17 @@
that if matching properties are present in the VM device tree they contain the
correct values.
+ One use case for this mechanism is passing the [public key of the
+ Secretkeeper][secretkeeper_key] HAL implementation to each VM.
+
<!--
TODO(b/319192461): Attach link explaining about Microdroid vendor partition
- TODO(b/291232226): Attach link explaining about Secretkeeper
-->
[header]: src/config.rs
[DTBO]: https://android.googlesource.com/platform/external/dtc/+/refs/heads/main/Documentation/dt-object-internal.txt
[debug_policy]: ../docs/debug/README.md#debug-policy
+[secretkeeper_key]: https://android.googlesource.com/platform/system/secretkeeper/+/refs/heads/main/README.md#secretkeeper-public-key
#### Virtual Platform Boot Certificate Chain Handover