This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CC2745R10-Q1: Secure boot key update process

Part Number: CC2745R10-Q1
Other Parts Discussed in Thread: UNIFLASH

I'm trying to perform a key update using the following steps: 

1. Generating keys using the ./imgtool keygen commands.

2. Generating the key update image signed with the default TI key using ./sbtool init --key-update-key command.

3. Flash the application image signed by the test keys (from SDK) in the primary slot.

4. Use the generated app_kui.bin and flash it via Uniflash at an unused address in the main flash region (Eg. 0xE0000).

5. Call the following code from the current application:

HapiSbSetUpdateImageAddress( 0xE0000 );
HapiSbSetId( 3 );
 
6. Reset
 
However, when I read the status of the operation using HapiSbGetStatus(), it returns 3 (Image rejected). 

Is there something missing in the steps or that should be done differently?
Should the security counter of the key update image be increased? If yes, how can it be done from the command?
And should the version of the key update image be higher than the application? If yes, how can it be done from the command?