Hello TI,
Please help me clarify if I understood the secure boot on AM2431B correctly and I am not missing any steps.
We have a custom board using AM2431B. This chip has not had any customer key burned into the eFUSEs.
I assume no factory setting is present in the efuses.
Would the steps for flashing SBL be:
1. Setting mcu_custMpk.pem and custMek_am64x_am243x.txt in ${SDK_INSTALL_PATH}/tools/boot/signing to key of our choice
2. Use OTP keywritter to burn the same customer key into the eFUSEs.
3. Enable HS fw and SBL build. By setting DEVICE_TYPE?=HS in ${SDK_INSTALL_PATH}/devconfig/devconfig.mak
4. Flashing and running the firmware the same way as GP device.
Also is there any documentation on what to look for when choosing customer key.
Or will any random generated key (such as the one in the SDK) do the trick?
Thanks for your help.
Dominik
