AM6442: Secure boot

ganesh d

Part Number: AM6442

My understanding is that secure boot requires programming the public key hash into the device eFuses. I would like to clarify the eFuse programming procedure and the required hardware interfaces.

Specifically, I would like to know:

1. Is a UART terminal connection mandatory for eFuse programming and secure boot key provisioning?
2. Can eFuse programming be performed without a UART interface?
3. My current setup is running RT Linux and booting from both SD Card and OSPI flash. Are there any recommended methods or tools for provisioning the eFuses in this configuration?
4. Are there any prerequisites or limitations when performing eFuse programming on the AM6442 HS-FS device while booting from SD Card or OSPI?

Any guidance or relevant documentation would be appreciated.

Thank you for your support.

Best Regards,

Ganesh D

2 months ago

0 Hong Guan64 2 months ago

TI__Guru* 78480 points

We've AM64x security resource download portals, where the security collaterals, tools etc... are hosted. User need to send the request to get access to the portal via the link
https://www.ti.com/drr/opn/AM64X-HS-RESTRICTED-SW

The latest AM64x OTP keywriter package 11.2.9 is downloadable here once you've access to the portal, and refer to AM64x OTP keywriter user guide on how to program the customer key.
https://dr-download.ti.com/authenticated/secure/software-development/application-software-framework/MD-eXxuDVGAHl/11.02.00/otp_keywriter_am64x_11_02_09-linux-installer.run?executeSecureDownload=true

OTP keywriter binary work on all boot modes supported by AM64x SoC ROM, i.e. SD, UART...

Best,
-Hong

0 ganesh d 2 months ago

Prodigy 100 points

Hi Hong,

Thanks for the quick response.

You suggested using SDK 11 for the OTP keywriter. However, our current development is based on SDK 9.

Could you please confirm whether the Secure Boot feature, specifically the OTP keywriter method, is supported or adaptable in SDK 9?

If not, are there any recommended approaches to enable this functionality without migrating fully to SDK 11?

Thanks,

Gnaesh D

0 Hong Guan64 2 months ago in reply to ganesh d

TI__Guru* 78480 points

OTP key programming binary is a standalone tool, and needs to be built with
1/. AM64x OTP key programming add-on package (downloadable from AM64x security resource portal)
2/. AM64x MCU+SDK package

I'd recommend get access to AM64x secure resource portal, and review AM64x OTP user guide on details to to build & use OTP key programming binary.

Best,
-Hong

Processors

Processors forum

AM6442: Secure boot