• State Resolved
  • Locked Locked
  • Replies 2 replies
  • Subscribers 98 subscribers
  • Views 173 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

AM625: sbl_keywriter questions

Magnus Lövdahl
Intellectual 600 points

Part Number: AM625

I have a few questions regarding sbl_keywriter and the -ovrd flag passed to the gen_keywr_cert.sh script.

I have generated and built a tiboot3.bin file, downloaded it to my board, and received a positive response. The certificate was generated using the following gen_keywr_cert.sh command:

 
./gen_keywr_cert.sh --msv 0xC0FFE --msv-ovrd -t tifek/ti_fek_public.pem -s-def -s-ovrd --smek-def --smek-ovrd 

At this point, I have not written KEYREV yet.

So far, everything works as expected.

Starting Keywriting

SYSFW Firmware Version 11.1.7-v11.01.07_am62x_keywrite
SYSFW Firmware revision 0xb
SYSFW ABI revision 4.0

keys Certificate found: 0x43c15e80 
Keywriter Debug Response:0x0
Success Programming Keys

 

I then switched from the default keys to custom keys, rebuilt the image, and downloaded it again. However, I now get an error, even though the -ovrd flag is still passed to gen_keywr_cert.sh:

 
./gen_keywr_cert.sh --msv 0xC0FFE --msv-ovrd -t tifek/ti_fek_public.pem -s keys_devel/bootSMPK.pem -s-ovrd --smek keys_devel/bootSMEK.key --smek-ovrd
 
Sarting Keywriting

SYSFW Firmware Version 11.1.7-v11.01.07_am62x_keywrite
SYSFW Firmware revision 0xb
SYSFW ABI revision 4.0

keys Certificate found: 0x43c15e80 
Keywriter Debug Response:0x10000 
Error occured....

This leads to the following questions:

  1. Should it be possible to download different PEM files to the same board before KEYREV is written?

  2. What exactly is the purpose of the -ovrd flag

 

I use otp_keywriter_am62x_v11.01.07

 

Regards

Magnus