AM2432: How to enable Secure Boot in AM2432

Hello,

Please see the following guide: software-dl.ti.com/.../SECURE_BOOT.html

Hi, Prashant

  Could you give me more clear guide please. I just want to test with TI dummy key first.

  1) How to transfer AM2432 chip from HS_FS to HS status;  For AM64X, sbl_keywriter is for this, but in AM243X secure resource, mcu_plus_sdk_am243x_09_02_00_51, there is no such tool.

  2)After we have transferred AM2432 chip to HS. We set "DEVICE_TYPE=HS" in devconfig.mak, recompile and get sbl.hs_tiimage and xxx.hs_appimage by CCS.  Am I right?

ronny.cheng said:

  1) How to transfer AM2432 chip from HS_FS to HS status;  For AM64X, sbl_keywriter is for this, but in AM243X secure resource, mcu_plus_sdk_am243x_09_02_00_51, there is no such tool.

Please note the AM243x secure resources are hosted here:

https://www.ti.com/secureresources/AM243X-RESTRICTED-SECURITY

 Here you would find the Keywriter tool and the user guide as well.

Hi Prashant

Customer have test the secure boot on AM64 and all is good.

They need to move to AM243 and I have helped customer download AM243 security boot resources.

But the AM243 Docs are different with AM64's, which confuse customer how to get started.

From my understanding, the only difference of AM243 and AM64 is A53 core.

Can they use AM64 docs to finish AM243 secure boot? If not, how to get started with AM243 docs, any recommendations?

Thanks

Zekun

Hello,

Zekun Bai said:

But the AM243 Docs are different with AM64's, which confuse customer how to get started.

I am not sure which docs are being referred here. The steps in the OTP Keywriter guide for both AM64 and AM243 are same only.

Hi, Prashant

  There seems to be a question about MA243X sbl_keywriter.

  I use mcu_plus_sdk_am243x_10_00_00_20, so I install otp_keywriter_am243x_v10.00.08_am243x_keywriter-windows-installer.exe, copy folder "sbl_keywriter" to "C:\ti\mcu_plus_sdk_am243x_10_00_00_20\source\security", as guide "AM64X_AM243X OTP Keywriter User Guide.pdf" in sbl_keywriter\user_guide\am64x_am243x.

  I executed this command "./gen_keywr_cert.sh --msv 0xC0FFE -t tifek/ti_fek_public.pem", there throwed error.

Compared to AM64X, it seems to be lacking some files

ronny.cheng said:

  I executed this command "./gen_keywr_cert.sh --msv 0xC0FFE -t tifek/ti_fek_public.pem", there throwed error.

As mentioned in the keywriter user guide, this version is compatible with OpenSSL v3.x. Mostly likely, you have OpenSSL v1.1.x. Please use the expected OpenSSL version to resolve the error.