firmware_Fingerprint: Require SSP for some tests

These tests rely on futility and dev keys in the autotest repo
to generate dev-signed firmware images. Use SSP so that we don't
need a lab push if we have to update futility or dev keys.

Server-side packaging (SSP) enables Autotest to run versioned
server-side tests. That is, the server-side test code and Autotest
infrastructure code (such as library files under site_utils) come from
the build being tested, rather than the code deployed in the hardware
lab. This eliminates the need to for a lab push to roll out new
server-side tests.

BUG=chromium:961293, chromium:1003023
TEST=test_that --board=nocturne <IP> suite:fingerprint

Change-Id: I758b67ce5866d91d063b0c89ba6425e5b7860070
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/autotest/+/2006019
Reviewed-by: Tom Hughes <tomhughes@chromium.org>
Tested-by: Yicheng Li <yichengli@chromium.org>
Tested-by: Tom Hughes <tomhughes@chromium.org>
Commit-Queue: Tom Hughes <tomhughes@chromium.org>
diff --git a/server/site_tests/firmware_Fingerprint/control.obeys_rollback b/server/site_tests/firmware_Fingerprint/control.obeys_rollback
index 0363e83..0040492 100644
--- a/server/site_tests/firmware_Fingerprint/control.obeys_rollback
+++ b/server/site_tests/firmware_Fingerprint/control.obeys_rollback
@@ -21,6 +21,9 @@
 DEPENDENCIES = "servo, fingerprint"
 JOB_RETRIES = 0
 
+# This test uses futility and dev keys from autotest/files/server/cros/faft.
+REQUIRE_SSP = True
+
 DOC = """
 Flashes new RW firmware with a rollback ID of '1' and verifies that all
 rollback state is set correctly. Then attempts to flash RW firmware with
diff --git a/server/site_tests/firmware_Fingerprint/control.ro_can_update_rw b/server/site_tests/firmware_Fingerprint/control.ro_can_update_rw
index a577bb6..f1fef87 100644
--- a/server/site_tests/firmware_Fingerprint/control.ro_can_update_rw
+++ b/server/site_tests/firmware_Fingerprint/control.ro_can_update_rw
@@ -20,6 +20,9 @@
 DEPENDENCIES = "servo, fingerprint"
 JOB_RETRIES = 0
 
+# This test uses futility and dev keys from autotest/files/server/cros/faft.
+REQUIRE_SSP = True
+
 DOC = """
 Flashes RW firmware with a version string that ends in '.rb0'
 (has rollback ID '0') and validates that it is running. Then flashes RW
diff --git a/server/site_tests/firmware_Fingerprint/control.ro_only_boots_valid_rw b/server/site_tests/firmware_Fingerprint/control.ro_only_boots_valid_rw
index c455db5..76d27dd 100644
--- a/server/site_tests/firmware_Fingerprint/control.ro_only_boots_valid_rw
+++ b/server/site_tests/firmware_Fingerprint/control.ro_only_boots_valid_rw
@@ -20,6 +20,9 @@
 DEPENDENCIES = "servo, fingerprint"
 JOB_RETRIES = 0
 
+# This test uses futility and dev keys from autotest/files/server/cros/faft.
+REQUIRE_SSP = True
+
 DOC = """
 Starts with MP-signed firmware. Then successively tries to flash three versions
 to RW: dev, corrupted first byte, and corrupted last byte. Each of these should
diff --git a/server/site_tests/firmware_Fingerprint/control.rw_no_update_ro b/server/site_tests/firmware_Fingerprint/control.rw_no_update_ro
index 5d4a609..059c1e1 100644
--- a/server/site_tests/firmware_Fingerprint/control.rw_no_update_ro
+++ b/server/site_tests/firmware_Fingerprint/control.rw_no_update_ro
@@ -20,6 +20,9 @@
 DEPENDENCIES = "servo, fingerprint"
 JOB_RETRIES = 0
 
+# This test uses futility and dev keys from autotest/files/server/cros/faft.
+REQUIRE_SSP = True
+
 DOC = """
 Enables hardware write protect, attempts to flash the RO fingerprint firmware,
 and verifies that the flashing fails.