topic SBC-S23V234: secure boot in Other NXP Products

SBC-S23V234: secure boot

songge_zhang — Thu, 07 Jul 2022 08:52:33 GMT

Hello,

I want to enable secure boot on sbc-s32v234. In document with S32V234_LinuxBSP_23.1_User_Manual.pdf, it said the EXPORT_CONTROL fuse need to be disabled. Also, Other mode than “No Secure Boot” need to be burned in the SECURE_BOOT_MODE
fuse on the chip.

But I don't know how to burn these fuse. Is there any documents I can use ? Or would you teach me how to burn these Fuse?

Another question, how can I burn FLASH_KEY on the chip.

Thanks.

Re: SBC-S23V234: secure boot

Bio_TICFSL — Fri, 08 Jul 2022 12:37:55 GMT

Hello Songge,

The fuses are providing by NXP at moment of sale. ROM keys are provisioned by NXP in the secure Fuse Box before delivery to customer, i.e., before the life cycle CUST_DEL. These ROM keys act as the root of trust of the silicon.

MRK (Master Root Key) and UID are device-specific.

For end user, usage of MRK is transparent, for example, when installing and updating the Blue-image or SYS_IMG. HSE offers specific security services to do that, and user just call for services to finish that.

Regards

Re: SBC-S23V234: secure boot

songge_zhang — Mon, 11 Jul 2022 02:44:57 GMT

Hello Bio_TICFSL,

Thank you for your reply.

But I have bought sbc-s32v234 without secure boot. Now I want to enable secure boot with the sbc-s32v234, how can I do? Do I need to contact the sales？

Thanks.