C6748 Secure Boot with DSP/BIOS

jw7

Other Parts Discussed in Thread: OMAPL138

When I follow the note to enable Secure Boot support in DSP/BIOS (support for exiting the secure boot loader in 'SECUREWITHSK' mode), it appears as though the documented cwrap files are not complete and I get linking errors. I have read about a package 'Security_collateral_update.zip' that perhaps is more up to date. I have not been able to locate that package, where do I find it? Also, are there any examples of creating a DSP/BIOS application with Secure Boot support?

- Jerry

over 7 years ago

0 Titusrathinaraj Stalin over 7 years ago

TI__Guru** 116100 points

Dear Jerry,
Can you please post your linker error log ?
Please refer to the following e2e post.
e2e.ti.com/.../331476

0 jw7 over 7 years ago in reply to Titusrathinaraj Stalin

Intellectual 255 points

I had seen that post. Those are the exact linker errors that I was getting. I also tried the wrapper files that were posted further in the thread (5466sk_cwrap.asm and 7701sk_cwrap.h). Using those file, I am able to link, but at run time it hangs during the DSP/BIOS initialization between the call to UserInit() and the call to main() in what looks to be cinit function. This had led me to believe that those wrapper files are not correct for the C6748 or worse, that DSP/BIOS does not support the secure kernel.

And yes I am declaring "bios.GBL.ENABLE_SK = true;" in the tcf file, reserving the bottom 32K of L2 RAM for use by the secure kernel, and opening the security for memory and IO in the boot ini file. Also, the application boots and runs perfectly when "bootExitType =NONSECURE" and "bios.GBL.ENABLE_SK = true;" is not specified.

Following that thread farther, it eventually ends without a solution. I really need the ability to encrypt the secure key from a DSP/BIOS application so that I can support field upgrades.

0 jw7 over 7 years ago in reply to jw7

Intellectual 255 points

So....Does DSP/BIOS support the Secure Kernel on the C6748? If so, where do you get the correct wrapper files?

0 Titusrathinaraj Stalin over 7 years ago in reply to jw7

TI__Guru** 116100 points

Sorry for the delayed responses on this post.

Yes, it does support DSP/BIOS in secure mode for Secure SoCs C6748/OMAPL138.

processors.wiki.ti.com/.../Basic_Secure_Boot_for_OMAP-L138_C6748

Let me check with internal team for the secure APIs for DSP/BIOS.