topic Cannot use SRKH blowing command to secureboot. in Layerscape

Cannot use SRKH blowing command to secureboot.

pomepome11 — Thu, 22 Aug 2019 11:10:02 GMT

I'm trying secure boot in develop mode on LS1046A-FRWY with its manual FRWY-LS1046ABSPUG v0.1, but it fails.
I used following steps.

1. Edit build_lsdk.cfg

   51c51
   < CONFIG_APP_OPTEE=n
   ---
   > CONFIG_APP_OPTEE=y
   58c58
   < CONFIG_FUSE_PROVISIONING=n
   ---
   > CONFIG_FUSE_PROVISIONING=y

2. build image
$ source setenv
$ flex-builder -m ls1046afrwy -a arm64 -b -s

3. deploy the image to SD card
$ source setenv
$ flex-installer -f firmware_ls1046afrwy_uboot_sdboot.img -d /dev/sde

4. blow OTPMK(described in 3.3.3.1 in FRWY-LS1046ABSPUG v0.1)

5. Boot the image
   - Change switch setting to SD boot
   - Insert SD to the board
   - boot the board

At this point, I have expected a prompt for SRK blowing as described in 3.3.3.2, but nothing is displayed.
Please give me some advice.
thanks.

Re: Cannot use SRKH blowing command to secureboot.

pomepome11 — Mon, 26 Aug 2019 09:26:51 GMT

I realized I should use code warrior.

Re: Cannot use SRKH blowing command to secureboot.

bpe — Wed, 04 Sep 2019 16:09:09 GMT

Two remarks to this:

1. The most recent LSDK does support LS1046A-FRWY. This package is
   newer than the one you are working with, consider moving to the LSDK.
   LSDK Fuse provisioning feature is described here.

2. You can use either Code Warrior or Fuse provisioning firmware, both
    are legal ways to blow fuses, but the firmware does not display any prompt.

It blows fuses as specified in the Fuse file which is generated by CST and

must be available at the firmware build time. Refer to the documentation

at the link above.

Hope this helps,

Platon

Re: Cannot use SRKH blowing command to secureboot.

pomepome11 — Mon, 09 Sep 2019 03:48:14 GMT

Thanks for reply.

From my understanding, POVDD should be enabled before blowing fuses.
On LS1046A-RDB, this is done by jumper setting before board booting.
But on FRWY, POVDD is enabled by uboot and is not enabled at the point of starting firmware so fuse cannot be blown.

Can provisioning firmware really be used on FRWY board ?