AM6548: secure boot

sarfaraz shaikh

Part Number: AM6548

Hi TI,

There is secure boot in AM6548. I guess it is being handled in tiboot3.bin Image. During the build for sdk I can see the log as below.

u-boot-2020.01+gitAUTOINC+3c9ebdb87d-g3c9ebdb87d/tools/k3_gen_x509_cert.sh -c 16 -b spl/u-boot-spl.bin \
-o tiboot3.bin -l 0x41c00000 -k ""

We would Like to have the code signing feature in our product. using the similar certificate feature. what all changes I have to do to the above scripts so that the cert.sh works with our keys and our binaries.

Thanks,

Sarfaraz

over 4 years ago

0 Keerthy J over 4 years ago

TI__Guru**** 166320 points

Sarfaraz,

Can you confirm if you are using a GP sample or HS sample?

- Keerthy

0 sarfaraz shaikh over 4 years ago in reply to Keerthy J

Expert 1546 points

Hi Keerthy, I am not familiar with these terminologies . can you please elaborate more on this.

0 Keerthy J over 4 years ago in reply to sarfaraz shaikh

TI__Guru**** 166320 points

What i meant is for normal booting right now are you signing it with some keys? If not you are using a GP(general purpose) sample.

I want to know that. If you are looking for secure boot on GP. It is not supported.

0 Keerthy J over 4 years ago in reply to sarfaraz shaikh

TI__Guru**** 166320 points

0 sarfaraz shaikh over 4 years ago in reply to Keerthy J

Expert 1546 points

Hi Keerthy,

Thanks for the clarification. We are not using any Key right now. We don't want secure boot on GP. We want the secure boot in our final release product.

Thanks,

Sarfaraz

0 Keerthy J over 4 years ago in reply to sarfaraz shaikh

TI__Guru**** 166320 points

Sarfaraz,

Yes secure boot on HS samples is supported. Click on verify answer if no further questions.

- Keerthy

0 sarfaraz shaikh over 4 years ago in reply to Keerthy J

Expert 1546 points

Hi keerthy, how can I do the HS secure boot. is there any document how to do it. and where can I store the secure key on board ?

Thanks,

0 Steve Reis over 4 years ago in reply to sarfaraz shaikh

TI__Genius 17625 points

Sarfaraz,

We are not able to support Secure (HS) devices for broad market at this time.

Processors

Processors forum

AM6548: secure boot