TDA4VEN-Q1: Secure Boot

bing zhu

Intellectual 360 points

Part Number: TDA4VEN-Q1

Tool/software:

Hi, experts

We are planning to use Secure Boot on top of tda4ven, is there any references available for that?

I notice the link J722S MCU+ SDK: BOOTLOADER mentions that HSM is not supported.

board: custom board

sdk: 10_00_00_08

Best Regards,

Bing

over 1 year ago

0 Diwakar Dhyani over 1 year ago

TI__Guru 62455 points

HI Bing

bing zhu said:
We are planning to use Secure Boot on top of tda4ven, is there any references available for that?

Which SDK you are using Linux or RTOS?

Regards
Diwakar

0 bing zhu over 1 year ago in reply to Diwakar Dhyani

Intellectual 360 points

Hi Diwakar,

The version we use is 10_0_8, which contains the following directory:

ti-processor-sdk-linux-adas-j722s-evm-10_00_00_08 ti-processor-sdk-rtos-j722s-evm-10_00_00_05

Best Regards,

Bing

0 Diwakar Dhyani over 1 year ago in reply to bing zhu

TI__Guru 62455 points

HI Bing

bing zhu said:
ti-processor-sdk-linux-adas-j722s-evm-10_00_00_08 ti-processor-sdk-rtos-j722s-evm-10_00_00_05

One is Linux SDK and other is RTOS which one you are using? Are you using SPL boot flow or SBL.

In RTOS sdk there is no support for secure boot currently plane is to support this feature in 11,0 SDK, whereas Linux sdk does support's it.

Regards
Diwakar

0 bing zhu over 1 year ago in reply to Diwakar Dhyani

Intellectual 360 points

Hi Diwakar,

We are using SBL boot flow, because our other modules and application logic are based on version 10_0_8, so it is not too easy to migrate to version 11.0 as a whole, is it possible to support HSM by applying the appropriate patches on top of 10.8?

Best Regards,

Bing

0 bing zhu over 1 year ago in reply to bing zhu

Intellectual 360 points

Hi Diwakar,

I see that version 11.0 has not been released yet, can you confirm this patch for me? We have a project that requires this HSM functionality and we need to implement the HSM functionality as soon as possible.

Best Regards,

Bing

0 Diwakar Dhyani over 1 year ago in reply to bing zhu

TI__Guru 62455 points

HI Bing,

bing zhu said:
I see that version 11.0 has not been released yet, can you confirm this patch for me?

Currently RTOS SDK does not support HS-SE device as the HS-SE device have root trust keys, these device can only load signed images. Changes need to be done in the SBL to authenticate the other images using TISCI API.we dont have any patch for this.Regarding you HSM development that can still be done on HS-FS device if you have one.

Regards
Diwakar

0 bing zhu over 1 year ago in reply to Diwakar Dhyani

Intellectual 360 points

Hi Diwakar,

Diwakar Dhyani said:
.Regarding you HSM development that can still be done on HS-FS device if you have one.

I'm using the HS-FS device now, can I use HSM under the current rtos sdk?

Best Regards,

Bing

0 Diwakar Dhyani over 1 year ago in reply to bing zhu

TI__Guru 62455 points

HI Bing,

ideally you should be can you run SBL NULL image and see if M4_1 is getting turned on or not.

Note: M4 core will be locked by default on HS-FS device, so you will not be able to unlock it using debug certificate.

Ref:

Regards
Diwakar

Processors

Processors forum

TDA4VEN-Q1: Secure Boot