PROCESSOR-SDK-AM62X: Reference for the key used to sign fitImage

Koji Hirohashi

Tool/software:

The keys to sign fitImage is in following directory:

recipe-sysroot-native/usr/share/ti/ti-k3-secdev/keys
|-- custMpk.crt
|-- custMpk.key
|-- custMpk.pem
|-- swrv.txt
`-- ti-degenerate-key.pem

Where is put the keys in the directory from?

I would like to know how to replace the custMpk.

Best Regards,

Koji

0 Koji Hirohashi 4 months ago

My using SDK version is v09.02.01.09.

0 Prashant Shivhare 4 months ago in reply to Koji Hirohashi

Hello,

The keys are present in the U-Boot source code itself:

You may replace the keys in this directly with your custom keys to sign the images with the same.

Regards,

Prashant

0 Koji Hirohashi 4 months ago in reply to Prashant Shivhare

Hi Prashant,

Is it possible to put and replace both SMPK and BMPK in U-Boot?

Best Reagrds,

Koji

+1 Prashant Shivhare 4 months ago in reply to Koji Hirohashi

Koji Hirohashi said:
Is it possible to put and replace both SMPK and BMPK in U-Boot?

At any point, only one key is active so you would replace the "custMpk.pem" with the active key only.

Processors forum