It cannot burn eFuse KEK

samet-san — Wed, 04 Dec 2024 08:17:11 GMT

Hello

I want to burn eFuse. I use Secure Provisioning Tool. I activated OTFAD ve Authentication.

sametsan_0-1733300037534.png

Tool burns SRK efuses.

sametsan_1-1733300090882.png

But it cannot burn KEK efuse. I see it is burned. But when i try to read with JTAG, they are 0x00000000 value. Also OTFAD cannot run. Only, Authentication image runs. Encrypted image cannot run.

sametsan_2-1733300140470.png

Re: It cannot burn eFuse KEK

diego_charles — Mon, 23 Dec 2024 20:15:33 GMT

Hi @samet-san

My apologies for the delayed response.

I tested OTFAD on my end using SPTv10 and i.MX RT1170.

I can run an encrypted image ( I took evkbmimxrt1170_mcuboot_opensource.s19 from SPT sample images) If I do not pull-up SW2 as stated in the below table the decryption of the image will not be done.

diego_charles_0-1734984810553.png

Are you not missing pulling the related boot_cfg pin on your board?

Below my OTFAD test settings.

diego_charles_1-1734984878377.png

Thank you!

Diego

topic It cannot burn eFuse KEK in i.MX RT Crossover MCUs

It cannot burn eFuse KEK

Re: It cannot burn eFuse KEK