I've been looking through the LSDK 19.09 documentation, and I wanted to double-check my understanding of how to enable secure boot for development purposes, without permanently blowing any fuses.
My target platform is LS1088ARDB_PB, and I would like to include both secure boot and OP-TEE and boot from SD card. In build_lsdk.cfg, I've set CONFIG_APP_OPTEE=y and CONFIG_APP_SECURE_OBJ=y.
Looking at section 22.214.171.124 and 6.4.3 of the LSDK, I see that there's a Fuse Provisioning Utility that takes input_fuse_file if CONFIG_FUSE_PROVISIONING=y in build_lsdk.cfg. In input_file_file, I followed the comments and set OTPMK_FLAGS=1111, as I do not want to blow the OTPMK fuse. After that, I built the LSDK bootpartition, firmware, and rootfs using the automatic builder:
flex-builder -i clean
flex-builder -m ls1088ardb_pb
After that, I'm not sure about the rest of section 6.4.5:
Hello Rita Fang,
Put J10 to enable PWR_PROG_SFP means shorting jumper J10, no need this step when you are in the design stage.
You could refer to "6.4.4 Steps to build fuse provisioning firmware image" to use flexbuilder to build fuse provisioning firmware image, then refer to "126.96.36.199 Deploy firmware image on board" to use u-boot command to deploy provisioning firmware image, at last refer to "188.8.131.52 Run firmware image on board" to check any error code in DCFG scratch 4 register, if no error, then fuse provisioning is successful.