AM623: processor SDK -am623

RJ DJ

Part Number: AM623

Tool/software:

Hi,

Good Day!

Currently I am working with yocto to build my own images using the SDK (link that i referred for building yocto : https://software-dl.ti.com/processor-sdk-linux/esd/AM62X/10_00_07_04/exports/docs/linux/Overview_Building_the_SDK.html ) my question ,

1. I want my images to sign and use it for HS-SE , how can i integrate the SDK into my yocto build eg: core-secdev-k3 , is there any reference that I'm missing out ,

I hope my question is clear !..

Regards,

-RJ

over 1 year ago

+1 Andreas Dannenberg over 1 year ago

TI__Guru 70632 points

Hi RJ,

since SDK v9.x we no longer rely on the external signing/helper package ("core-secdev-k3"), but all the signing with TI keys happens on a bootloader level, and is taken care of during the bootloader build process, using standard tools.

This being said the associated signing keys are part of the U-Boot source tree, see: https://git.ti.com/cgit/ti-u-boot/ti-u-boot/tree/arch/arm/mach-k3/keys?h=10.00.08

In order to use your custom signing key you need to update this device tree node here https://git.ti.com/cgit/ti-u-boot/ti-u-boot/tree/arch/arm/dts/k3-binman.dtsi?h=10.00.08#n15 to point to your own private key file instead of having it point to arch/arm/mach-k3/keys/custMpk.pem. I think it's probably best to keep your key outside U-Boot/Git and manage it separately in a secure manner (rather than replacing the key itself directly in U-Boot, which in theory you could also do).

Regards, Andreas

Processors

Processors forum

AM623: processor SDK -am623