Part Number: AM6442
Other Parts Discussed in Thread: TMDS64EVM
Hi,
What I have done so far:
- from the page www.ti.com/.../PROCESSOR-SDK-AM64X I installed the "Processor SDK Linux for the AM64x" 11.02.08.02
- got access to the AM64X-HS restricted software - keywriter installer and documentation
- using the "Processor SDK" I built the tiboot3.bin, tispl.bin and u-boot.img. I see that the built tiboot3.bin is the same as built tiboot3-am64x_sr2-hs-fs-evm.bin so I presume that default TI certificate/key were used for signing
- above three binaries boot OK. As I understand I have HS FS secure boot up and running. Correct, please clarify? And everything is ready to switch from HS FS to HS SE, after OTP key write. Correct, please clarify?
Now some questions:
- I want to enable the SE secure boot but keep everything as simple as possible. Do I need to install also the "MCU+ SDK for AM64x – RTOS, No-RTOS" and "Processor SDK Linux for AM64 HS" from the page www.ti.com/.../PROCESSOR-SDK-AM64X Tiboot3.bin was already built, so do I need "MCU+ SDK"? Do I need to install it when I will start to work with the OTP keywriter?
And "Processor SDK Linux for AM64 HS" is version 8 from 2022, but that HS in the title might indicate that it might have something to do with the high security. Do I need to install it?
- "AM64x Secure SDK" slides in the pdf document refers to the "Install SecDev:" on page 6. Do I need to install it from git or from where? Also instructions in "AM64x Secure SDK" slides are hard to follow and understand, do you have some other "how to" document with clear and concise instructions. It is not clear to me what was done automatically when I used the SDK make all, or make u-boot commands, and what I need to do in addition to get the secure boot
- How to start using the OTP keywriter. Again, I would ask for clear and concise "how to" instructions
