AM625: Secure boot Keywriter --msv

John Tobias

Part Number: AM625

Tool/software:

Hi All,

Let say we use this command:

./gen_keywr_cert.sh -s keys/smpk.pem --smek keys/smek.key -t ti_fek_public.pem -a keys/aes256.key --msv 0xC0FFE --keycnt 1 --keyrev 1 --sr-bcfg 16 --sr-sbl 16 --sr-sysfw 16 --ext-otp ext_otp_data.bin --ext-otp-indx 1 --ext-otp-size 3

I would like to read the msv value (0xC0FFE) from R5 or in u-boot. I've been looking the tisci_protocol.h and I couldn't figure out which one.

Could you tell me how to read the msv value?.

Regards,

John Tobias

over 1 year ago

0 Prashant Shivhare over 1 year ago

TI__Guru* 76211 points

Hello,

John Tobias said:
Could you tell me how to read the msv value?.

The MSV value can be directly read from the SECMGR_MSV_STATUS_REG MMR described in the K3 Security Hardware Architecture available on the secure resources.

Regards,

Prashant

0 John Tobias over 1 year ago in reply to Prashant Shivhare

Intellectual 335 points

Hi Prashant,

I found it but I couldn't find any reference code in mcu_sdk_plus where it call any related SECMGR request/response command.

Is it based on TISCI command?. If yes, where I can find the TISCI Message ID for the said SECMGR_MSV_STATUS_REG?. If no, could you provide me the info how to read the MSV?.

Regards,

John

0 Prashant Shivhare over 1 year ago in reply to John Tobias

TI__Guru* 76211 points

Hi, it is a simple register read like so:

DebugP_log("MSV: 0x%x\r\n", *((uint32_t*)SECMGR_MSV_STATUS_REG));

0 John Tobias over 1 year ago in reply to Prashant Shivhare

Intellectual 335 points

oh, okay. I thought I have to use the tisci protocol to get the data.

Regards,

John

0 John Tobias over 1 year ago in reply to John Tobias

Intellectual 335 points

oh, okay. I thought I have to use the tisci protocol to get the data.

Btw, will that work in u-boot as well "*((uint32_t*)SECMGR_MSV_STATUS_REG)"?

Regards,

John

0 Prashant Shivhare over 1 year ago in reply to John Tobias

TI__Guru* 76211 points

John Tobias said:
Btw, will that work in u-boot as well "*((uint32_t*)SECMGR_MSV_STATUS_REG)"?

Yes. It can be read from any core.

Processors

Processors forum

AM625: Secure boot Keywriter --msv