AM6422: Run secured tiboot3.bin from the kernel.

Dharmik Vaghasana

Part Number: AM6422

Tool/software:

Hello Team,

In our custom board, we are using TI AM64x processor with the secure boot enable and we are using only eMMC as boot option(disable backup boot option).

Can we boot into the kernel (non-secure image), send tiboot3.bin to the R5/M4 core over RPC, and force it to run? We are checking to modify the tiboot3.bin(TI OTP tool) for changing the boot partition after the key burn. So when we boot next time from the second partition (under discussion).

Will it work? if yes, then provide the steps; if not, suggest an alternative strategy.

Thanks

Dharmik

2 months ago

0 Prashant Shivhare 2 months ago

TI__Guru 70231 points

Hello,

Dharmik Vaghasana said:
Can we boot into the kernel (non-secure image), send tiboot3.bin to the R5/M4 core over RPC, and force it to run?

This is not possible. The `tiboot3.bin` is booted by the ROM from a particular bootmedia depending on the bootmode settings.

0 Dharmik Vaghasana 2 months ago in reply to Prashant Shivhare

Prodigy 160 points

Hello Prashant,

We are not going to change the bootmode. Our goal is to make device secured or burn the key in the processor.

So, is there any way to make device secured after the device is booted (using kernal command prompt).

Thanks

Dharmik

0 Prashant Shivhare 2 months ago

TI__Guru 70231 points

Dharmik Vaghasana said:
we are using only eMMC as boot option

Flash the OTP Keywriter binary into the eMMC and let the ROM boot from it.

Am I missing something?

Processors

Processors forum

AM6422: Run secured tiboot3.bin from the kernel.