LX2160ARDB dual boot with secure boot enable

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

LX2160ARDB dual boot with secure boot enable

Jump to solution
2,242 Views
jackho
Contributor III

Hi,

We want to implement dual boot on LX2160ARDB by using uboot env variables(devpart_boot and devpart_root) to switch different kernel and roofs, but we also need secure boot feature, does secure boot allow us to modify uboot environment to implement dual boot function?

Thank you.

Jack

0 Kudos
Reply
1 Solution
2,181 Views
yipingwang
NXP TechSupport
NXP TechSupport

Yes, you can modify u-boot environment with fw_setenv in Linux under secure boot mode.

View solution in original post

0 Kudos
Reply
6 Replies
2,235 Views
yipingwang
NXP TechSupport
NXP TechSupport

Under secure boot mode, the user isn't allowed to enter u-boot prompt to modify u-boot environment variables.

0 Kudos
Reply
2,230 Views
jackho
Contributor III

Hi,

Thank you for your reply,

If so, do you have any suggestion in this case, if we want to support both dual boot and secure boot function.

Thank you.

Jack

 

0 Kudos
Reply
2,208 Views
yipingwang
NXP TechSupport
NXP TechSupport

You could add u-boot environment variable in variable "CONFIG_EXTRA_ENV_SETTINGS" in include/configs/lx2160ardb.h in u-boot source code, then rebuild u-boot image.

0 Kudos
Reply
2,197 Views
jackho
Contributor III

Hi @yipingwang,

Thanks for the reply, 

Is that means I can use fw_setenv to dynamic change devpart_boot or depart_root value?

Thank you.

Jack 

 

0 Kudos
Reply
2,182 Views
yipingwang
NXP TechSupport
NXP TechSupport

Yes, you can modify u-boot environment with fw_setenv in Linux under secure boot mode.

0 Kudos
Reply
1,881 Views
jackho
Contributor III

Hi yipingwang,

We try to use fw_setenv to write uboot environment variable with secure boot mode, variable can be written and use fw_printenv read out correctly , but it seems uboot didn't eat the variable, like depart_boot and devpart_root, we need use fw_setenv modify this two parameters to runtime switch boot partition, but it seems not working on secure boot, do you have any suggestion?  

Thank you

Jack

0 Kudos
Reply