AM62P: am62p secure boot & spl at the same time

KONG XIANGXU

Expert 1986 points

Part Number: AM62P

Tool/software:

Hi Team,

I already can secure boot from an SD card. I want to integrate it with SPL. Could you tell me how to do this, or direct me to the relevant documentation?

Best regards

Kong Xiangxu

3 months ago

0 Prashant Shivhare 3 months ago

TI__Guru 69181 points

Hello,

The query is not clear. Could you please elabore it more?

Thanks!

0 KONG XIANGXU 3 months ago in reply to Prashant Shivhare

Expert 1986 points

I want to use spl booting on a HS-SE device . Do I need signed on images ? If does ,what are the images to be signed and and how to signe them.

0 Prashant Shivhare 3 months ago in reply to KONG XIANGXU

TI__Guru 69181 points

The secure boot is integrated in both MCU+ SDK and PSDK. You do not need to manually sign anything. Simply build U-Boot and run on the board. You should see logs like "Authentication passed" if the authentication of the different blobs passes.

0 KONG XIANGXU 3 months ago in reply to Prashant Shivhare

Expert 1986 points

I flashed "tiboot3-am62px-hs-fs-evm.bin" into board with ti official key and it's working.

I wonder when I use my personal key ,what should I do to make the tiboot3-am62px-hs-fs-evm.bin is using my personal keys.

0 KONG XIANGXU 3 months ago in reply to Prashant Shivhare

Expert 1986 points

# For Secure Boot The Image needs to be signed and Header must also
# be included. So The image has to be built explicitly

Also,I see this line in SDK makefile. Do I really don't need to do anything?

+1 Prashant Shivhare 3 months ago in reply to KONG XIANGXU

TI__Guru 69181 points

KONG XIANGXU said:
I wonder when I use my personal key ,what should I do to make the tiboot3-am62px-hs-fs-evm.bin is using my personal keys.

For HSFS, the keys don't matter. If you have converted the device to HSSE and programmed your own keys then you would need to sign the images with your custom keys.

https://e2e.ti.com/support/processors-group/processors/f/processors-forum/1519255/am623-secure-boot-enablement-using-u-boot-ti-staging-build

0 KONG XIANGXU 3 months ago in reply to Prashant Shivhare

Expert 1986 points

Thank you for your helpful advice !

I can boot from my personal keys now!

Processors

Processors forum

AM62P: am62p secure boot & spl at the same time