topic Re: Clarification on Secure Boot Flow for LX2160A in Layerscape

Clarification on Secure Boot Flow for LX2160A

harisankar2001 — Mon, 19 Aug 2024 05:51:30 GMT

Dear NXP Team,

I am writing to seek clarification regarding the secure boot process for the LX2160A. Based on my understanding, I have outlined the secure boot flow in the attached diagram. I would like to confirm if my interpretation aligns with the expected procedure.

I have attached the flowchart for your reference. Could you please review this flowchart and confirm if this is the correct process for implementing secure boot on the LX2160A?

Additionally, if there are any steps or details that I might have missed or misinterpreted, I would greatly appreciate your guidance.

Thank you for your support and assistance.

Re: Clarification on Secure Boot Flow for LX2160A

yipingwang — Tue, 20 Aug 2024 09:36:49 GMT

During development stage, we recommend customer use CCS provided in CodeWarrior to connect to the target to write values to SRKH shadow registers.

The user needs to program image to the target board before writing SRKH.

Re: Clarification on Secure Boot Flow for LX2160A

harisankar2001 — Wed, 21 Aug 2024 05:32:04 GMT

Hi yipingwang,

Thank you for your prompt response. We are currently working on a custom board based on the LX2160A.

I have one additional question regarding the secure boot process. In my previous message, I attached a flowchart detailing the process. Could you please clarify whether the fusing process for the public and private keys follows the same procedure, or if there are different steps involved for fusing the private key? If they differ, I would greatly appreciate it if you could share the specific steps required for private key fusing.

Thank you for your support.

Re: Clarification on Secure Boot Flow for LX2160A

yipingwang — Thu, 22 Aug 2024 02:14:10 GMT

Do you mean fuse OPTMK?

For development stage, please do secure boot with the following process.

Enabling POVDD and only blow OTPMK to fuse array following below_OTPMK.txt.
Build secure boot firmware image and deploy it to the target board.
Use CCS to put the LX2160A in RSP and write SRKH in SFP mirror registers following ccs_secureboot.txt.

Re: Clarification on Secure Boot Flow for LX2160A

harisankar2001 — Wed, 22 Jan 2025 12:40:00 GMT

Hi yipingwang,

Thank you for your response.

We are currently conducting a demo on the LA1224RDB board. Could you please clarify whether it is feasible to implement secure boot on the LA1224RDB board? Alternatively, if full secure boot implementation is not supported on this board, would it be possible to only boot the secure boot process?

Looking forward to your guidance.