Tool/software:
Hi,
What are the use cases for switching a board from the SMPK to the BMPK?
Is it a given that this switch would be performed with physical access to the board? Or is it possible to perform the operation to set keyrev=2 in an unattended (i.e. Over-the-air deployment) manner?
Since the tiboot3 binary performing the keyrev=2 operation must be signed by the SMPK, and since after the change to BMPK the tiboot3 must be signed by the BMPK, that seems to rule out the possibility of performing the change unattended. Is this correct?