Tool/software:
Hello,
we are using a HS-FS variant of the AM6234 CPU and want to use the Derived Key Encryption Key (DKEK) in U-Boot for Encyption. We tried to get the DKEK using TISCI_MSG_CRYPTO_GET_DKEK function from the
https://software-dl.ti.com/tisci/esd/latest/2_tisci_msgs/security/dkek_management.html DKEK Management documentation but we always are getting a NACK (Not Acknowledged) back.
We did not use the keywriter to write the required keys into the AM62 CPU. Since the documentation states the message type is "Secure Queue Only", we think we need to wirte the keys first before we are able to use the DKEK functions.
Can you please confirm our assumption that the keys must first be written to the AM62 HS-FS CPU using the keywriter before the DKEK management functions can be used?
Thank you and regards
Tim
