This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

AM625SIP: How to sign Zephyr.elf (for M4) with custMpk key

Part Number: AM625SIP

Tool/software:

I would like to sign my Zephyr.elf application (for M4 core) with custMpk key. I used script from u-boot source tree: k3_gen_x509_cert.sh

k3_gen_x509_cert.sh -c 0 -b zephyr.elf -o zephyr.signed -k ./arch/arm/mach-k3/keys/custMpk.key

But, when I try to boot it I get "Authentication failed!":

=> setenv rproc_id 0; setenv rproc_fw /lib/firmware/zephyr.signed; if test -e mmc 1:2 ${rproc_fw}; then run rproc_load_and_boot_one; fi
This will not be a case any time
403881 bytes read in 42 ms (9.2 MiB/s)
ti_sci system-controller@44043000: Message not acknowledged
Authentication failed!
### ERROR ### Please RESET the board ###

I checked x509 header and compared it with the tiboot3.bin header and it looks ok.

Could you guide me with some step-by-step instruction to do it right.