This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

PROCESSOR-SDK-AM62X: Secure boot: BMPK use case and OTA applicability

Part Number: PROCESSOR-SDK-AM62X

Tool/software:

Hi,

What are the use cases for switching a board from the SMPK to the BMPK?

Is it a given that this switch would be performed with physical access to the board?  Or is it possible to perform the operation to set keyrev=2 in an unattended (i.e. Over-the-air deployment) manner?

Since the tiboot3 binary performing the keyrev=2 operation must be signed by the SMPK, and since after the change to BMPK the tiboot3 must be signed by the BMPK, that seems to rule out the possibility of performing the change unattended.  Is this correct?