AM2634: SBL can not load the HSM after converting the device to SE

Abdelrhman Afifi

Part Number: AM2634
Other Parts Discussed in Thread: UNIFLASH

Hello,

I built the SBL UART Uniflash and SBL QSPI with my newer key and they are working properly.

SBL QSPI can not load the HSM firmware, the checksum is correct but the hardware fails to load it.

Does the HSM image itself requires new handling like the SBL?

Yours,
Abdelrhman Afifi

over 2 years ago

0 Aakash Kedia over 2 years ago

TI__Mastermind 26145 points

Hi,

Abdelrhman Afifi said:
Does the HSM image itself requires new handling like the SBL?

Is your HSM also signed with your new keys ? I mean, did you re-built your HSM with the new MPK and MEK ?

Best Regards,
Aakash

0 Aakash Kedia over 2 years ago in reply to Aakash Kedia

TI__Mastermind 26145 points

Hi,

Checkout the documentation of TIFS-MCU - https://software-dl.ti.com/secure/software/sitara-sec/AM263X-RESTRICTED-SECURITY/TIFS_MCU/v08_06/tifs_am263x_08_06_00_05_docs_only/docs/api_guide_am263x/html/hsm_runtime_firmware.html?__gda__=1692215389_0457bdd54438cfb65fcbcd8a08c2c5a0#autotoc_md22

This is MySecureSW link so make sure to login beforehand to have a seamless experience on the same.

Best Regards,
Aakash

0 Abdelrhman Afifi over 2 years ago in reply to Aakash Kedia

Intellectual 415 points

Hello,

How I can sign it with the new key?

0 Abdelrhman Afifi over 2 years ago in reply to Aakash Kedia

Intellectual 415 points

I don't have access to this.

0 Aakash Kedia over 2 years ago in reply to Abdelrhman Afifi

TI__Mastermind 26145 points

Hi Abdelrhman Afifi,

You have converted the device to HS-SE device ? For the same, you might have used OTP Key Writer.

It means you already hold the access to MySecureSW. Just login to ti.com with the credentials that have access to MySecureSW and the OTP Keywriter Package. After the same, you will be able to access the link.

Best Regards,
Aakash

Arm-based microcontrollers

Arm-based microcontrollers forum

AM2634: SBL can not load the HSM after converting the device to SE