Secure Boot emulation with SB_EN

[pb3]

Based on the documentation for LS1028 if we set SB_EN in RCW then we can emulate Secure Boot for the development phase. However, how can I provide a development Root of Trust key to test my Secure Boot without burning any fuse? I've read somewhere that it's possible using Code Warrior, but how about the solution without CW?

[yipingwang]

Please build XSPI secure boot image with the following command.

$ flex-builder -i mkfw -m ls1028ardb -b xspi -s

1. Please generate OTPMK and blow it to fuse.

$ git clone https://github.com/nxp-qoriq/cst.git

$ cd cst/

$ make

$ ./gen_otpmk_drbg -b 2 

Then refer to the attached document note_OTPMK.txt to program OTPMK and blow it to fuse on the target board.

Please make sure the following SNVS state before blow OTPMK to fuses with command “mw 1e80020 0x02”.

md 1e90014

       NOTE: 80000900

       (1) 8(0)000900 -> bits in () should be 0

       (2) 80(000)900 -> bits in () would be all 0's

2. Please deploy FlexSPI NOR secure boot with the following command.

=>tftp 80000000 firmware_ls1028ardb_xspiboot_secure.img

=>sf probe 0:0 && sf erase 0 +$filesize && sf write 80000000 0 $filesize

3. Please refer to document “LS1028A - FlexSPI NOR secure boot on LS1028ARDB.txt” to write SRKH in SFP mirror registers through CodeWarrior CCS.