LS1021ATWR Fuse Provisioning Firmware

jiye — Mon, 02 Nov 2020 14:43:45 GMT

I am trying to implement Secure Boot + Chain of Trust w/Confidentiality. I am following the steps outlined in Section 6.1.4: Procedure to enable Secure Boot in the LSDK User Guide Rev 19.09_311219.

I have built the CST and generated keys and built the LSDK composite secure boot firmware. I am now on Step 4: Generate Fuse Provisioning Firmware. This links me to Section 6.4.4 in the user guide. In Step 3: Generate BL31 image with fuse provisioning support, it says to run the following command:

   flex-builder -c atf -m <machine> -b <boottype>

so I run:

   flex-builder -c atf -m ls1021atwr -b sd

and I get the following output:

root@538bbf29aa5d:/flexbuild# flex-builder -c atf -m ls1021atwr -b sd
COMPONENT: atf
MACHINE: ls1021atwr
BOOTTYPE: sd
make: Entering directory '/flexbuild'
make[1]: Entering directory '/flexbuild/packages/firmware'

Building ATF ...

Building dependent fuse_scr.bin ...

#----------------------------------------------------#
 #------- -------- -------- -------#
 #------- CST (Code Signing Tool) Version 2.0 -------#
 #------- -------- -------- -------#
 #----------------------------------------------------#

==========================================================
This tool includes software developed by OpenSSL Project
for use in the OpenSSL Toolkit (http://www.openssl.org/)
This product includes cryptographic software written by
Eric Young (eay@cryptsoft.com)
==========================================================

Input File is input_files/gen_fusescr/ls2088_1088/input_fuse_file
/flexbuild/packages/firmware
building dependent /flexbuild/build/firmware/u-boot/ls1021atwr/uboot_ls1021atwr_tfa.bin ...
 Please add the dependent /flexbuild/packages/firmware/u-boot/configs/ls1021atwr_tfa_defconfig
make[1]: Leaving directory '/flexbuild/packages/firmware'
make: Leaving directory '/flexbuild'

Inside of the directory: /flexbuild/packages/firmware/u-boot/configs/, I see the following *_tfa_defconfig files:

please advise

Re: LS1021ATWR Fuse Provisioning Firmware

bpe — Mon, 06 Jul 2020 07:05:18 GMT

Fuse provisioning firmware requires ATF which is not supported for your
platform/board:

https://docs.nxp.com/bundle/GUID-51EEFEDB-ABD5-40C0-BEBD-6527B3494D57/page/GUID-6FC46949-7E0C-47FE-AC8A-4334FD1C3746.html

Secure boot is supported, but you have to program all necessary fuses by hand,
using Code Warrior or u-Boot:

https://docs.nxp.com/bundle/GUID-51EEFEDB-ABD5-40C0-BEBD-6527B3494D57/page/GUID-27FC40AD-3321-4A82-B29E-7BB49EE94F23.html
https://docs.nxp.com/bundle/GUID-51EEFEDB-ABD5-40C0-BEBD-6527B3494D57/page/GUID-F54AA72B-FC4B-4F9A-85CA-622D221B9C6D.html

Have a great day,
Platon

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!

- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

LayerscapeのトピックRe: LS1021ATWR Fuse Provisioning Firmware

LS1021ATWR Fuse Provisioning Firmware

Re: LS1021ATWR Fuse Provisioning Firmware