- Ask a related questionWhat is a related question?A related question is a question created from another question. When the related question is created, it will be automatically linked to the original question.
Original question:
AM6412: How to switch to BMPK in the field when the SMPK is compromised
Tool/software:
Hi,
I am running into an issue where my HS-FS device does not boot. I believe it failed to authenticate the tiboot3 certificate. The only difference between the working and the non-working certificate is the `NOT_AFTER` date (besides the signature). According to RFC5280, the date should be in generic format if it is after 2049 (4 digits for the year instead of 2). Examining the certificate, it looks like openssl automatically adjust the format bases on the date to include 2 extra bytes for the year.
My understanding is that TI ROM/sysfw does not check the date on the certificate as this happens very early during boot.
1. Does TI ROM/sysfw support both date formats?
2. Is the authentication done by the ROM or sysfw? Possible to fix if it is an issue?
Thank you for your support.
