AM623: secure Boot: SECURE RECOVERY MODE

Binson Binoy

Part Number: AM623

Tool/software:

Hi,

I was working with secure boot using sha256 and ECDSA in am6231 processor, here in this secure boot after the bootloader verification if its authentication fails it moves to a secure recovery mode and loads another bootloader using UART.

Need a brief idea about:

1) Secure recovery mode

2) From where this new bootloader comes from.

3) How it is load into the device using UART, What its procedures.

over 1 year ago

0 Hong Guan64 over 1 year ago

TI__Guru 69910 points

- FAQ
https://e2e.ti.com/support/processors-group/processors/f/processors-forum/1190873/faq-am64x-am62x-soc-redundant-recovery-boot-support-in-rom-booting-r5-bootloader
- Refer to AM62x TRM sections in <Chapter 5 5 Initialization> for more details
Best,
-Hong

0 Binson Binoy over 1 year ago in reply to Hong Guan64

Prodigy 130 points

Hi Hong,

If the primary bootloader fails, ROM enters to a secure recovery mode so all I wanted to know is what is this Secure recovery mode and need a definition on it. I couldn't find it from your recent response, and from where this second bootloader comes from either from the developer side or the inbuild one.

How it is load into the device using UART, What its procedures.

0 Hong Guan64 over 1 year ago in reply to Binson Binoy

TI__Guru 69910 points

- From the FAQ
https://e2e.ti.com/support/processors-group/processors/f/processors-forum/1190873/faq-am64x-am62x-soc-redundant-recovery-boot-support-in-rom-booting-r5-bootloader
"1. Summary on redundancy/recovery boot support in ROM booting R5F-BL

A quick summary on boot order/list by ROM after POR (Power-On-Reset):
a) Primary boot media configured by BOOTMODE pins
If primary boot media is memory boot media, i.e. (x)SPI, SD/eMMC, GPMC… the primary boot offset (0x0) is first used by ROM to load R5-BL. If integrity check on R5-BL by ROM fails, the redundant boot offset is used by ROM to load R5-BL.
b) Backup boot media configured by BOOTMODE pins
In case of integrity check on R5-BL on primary boot media fails, backup boot media is used by ROM to load R5-BL."

- refer to <Chapter 5 5 Initialization> for more details on
primary boot mode, backup boot mode, primary boot offset, redundant boot offset etc...
Best,
-Hong

Processors

Processors forum

AM623: secure Boot: SECURE RECOVERY MODE