AM2432: OTP Keywriter: AM243x ALV Package

Hi Robin Bross,

Robin Bross said:

Are there dependencies for Silicon Revision B, where it is mandatory to use the HS_FS tiimages/appimages?

The OTP Keywriter is suppose to work only with HS_FS devices.

Robin Bross said:

Is the software inside the "tiboot3.bin" file (which shall be used to run the Keywriter according to the manual) a HS_FS image? 

tiboot3.bin is a combined image (a x509 certificate). It contains SBL (which is required for keywriter application) with keywriter application (instead of hsfs sysfw) and boardcfg as a part of package.

ROM boots the SBL and then SBL and keywriter application interact and install the certificate with keys information.

If I am missing any point, can you reframe your question ?

Best Regards,
Aakash

Hello Aakash,

thank you for the fast response.

I managed run the keywriter application (I adapted the example of the lp243x/ALX to the ALV packages). 

I can observe the VPP pin getting supplied with 1.8 volts.

The following output is generated by the keywriter on the uart:

Starting Keywriting
Enabled VPP
keys Certificate found: 0x70004c80
Keywriter Debug Response:0x200000
Error occured...

Can you identify by this output where the issue may be? 
By reading out the socid information after running the keywriter we can see that no keys were written. 

Thanks and best regards
Robin

Hi Robin Bross,

Robin Bross said:

I managed run the keywriter application (I adapted the example of the lp243x/ALX to the ALV packages). 

I don't think you have to do that.

am64x-evm is a ALV package and even if your device is am243x-evm the am64x-evm package should work.

My suggestion for you would be to try the same with this package.

Till then, I will also look into the probable reason from the debug code.

Best Regards,
Aakash

Hi Aakash,

I ran the the tiboot3.bin out of the am64x-evm folder, I get the same debug code: 

Starting Keywriting
Enabled VPP
keys Certificate found: 0x70004f80
Keywriter Debug Response:0x200000
Error occured...

Also as additional information the output of the read out socid (read by the socid parser):
This info stays the same after running the keywriter.

-----------------------
SoC ID Header Info:
-----------------------
NumBlocks : 2
-----------------------
SoC ID Public ROM Info:
-----------------------
SubBlockId : 1
SubBlockSize : 26
DeviceName : am64x
DeviceType : HSFS
DMSC ROM Version : [0, 2, 0, 0]
R5 ROM Version : [0, 2, 0, 0]
-----------------------
SoC ID Secure ROM Info:
-----------------------
Sec SubBlockId : 2
Sec SubBlockSize : 166
Sec Prime : 0
Sec Key Revision : 0
Sec Key Count : 0
Sec TI MPK Hash : b018658ad99dc903c8c9bfb27b12751099920a042ad1dfea7b7ba57369f15546de285edde6a7b39a8bdc40a27b237f8fb1e57f245e80b929c1e28b024aa2ecc6
Sec Cust MPK Hash : ad0bc40b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Sec Unique ID : c4c73513e945cce9469cf3ef891b36852b3233b1574a6b30a71cf988efa2bb93 

The following parameters were used to configure the keywriter (as described in the AM64X_AM243X_OTP_Keywriter_User_Guide_08.02.pdf):

./gen_keywr_cert.sh -t tifek/ti_fek_public.pem --msv 0xC0FFE -b keys_devel/am64x/bmpk.pem --bmek keys_devel/am64x/bmek.key -s keys_devel/am64x/smpk.pem --smek keys_devel/am64x/smek.key --keycnt 2 --keyrev 1

Hi Robin,

The error code means -

KEYWR_ERR_VALIDATION_SMPK_KEY (21) Error validating SMPK key

Let me check what went wrong with the same.

Best Regards,
Aakash

Hi Robin,

Can you confirm if you are using OTP Key writer version 08.04 ? It has some modifications w.r.t PG2 version of the device (which you have).

Best Regards,
Aakash

I built the keywriter out the SDK 08.04 yes and the keywriter is named with 08.04.
The User Guide is (according to the title: "AM64X_AM243X_OTP_Keywriter_User_Guide_08.02.pdf)" for SDK 08.02. 

Best Regards
Robin

Hi Robin,

Can we have a short call to try and debug the issue ? Send me out an email at a-kedia@ti.com

Best Regards,
Aakash