Burn SRK fuses in production environment to enable SecureBoot

[pratik_manvar]

Hello All,

I want to burn the SRK fuses in i.MX8MQ devices to enable SecureBoot.
What is the best way to burn SRK fuses in production environment?

Thank You,
Pratik Manvar

[igorpadykov · Accepted solution]

Hi pratik_manvar

one can use uboot for fuse programming

https://imxdev.gitlab.io/tutorial/Burning_eFuses_on_i.MX8_and_i.MX8x_families/

https://community.nxp.com/t5/i-MX-Processors-Knowledge-Base/Q-A-How-to-program-i-MX6-eFUSE/ta-p/1121...

Best regards
igor

[pratik_manvar]

Hi @igorpadykov,

Thanks for your answer.

I am able to burn fuses using "uuu_imx_android_flash.sh".

So, there are two ways to burn secure-boot fuses

1. Using "uuu_imx_android_flash.sh" flash script (This is flash script used to flash images from serial downloader mode). 

2. Using below sysfs nodes (user script needs to be created which will run on host machine and require adb access).

/sys/fsl_otp/HW_OCOTP_SRK0

/sys/fsl_otp/HW_OCOTP_SRK1
/sys/fsl_otp/HW_OCOTP_SRK2
/sys/fsl_otp/HW_OCOTP_SRK3
/sys/fsl_otp/HW_OCOTP_SRK4
/sys/fsl_otp/HW_OCOTP_SRK5
/sys/fsl_otp/HW_OCOTP_SRK6
/sys/fsl_otp/HW_OCOTP_SRK7
/sys/fsl_otp/HW_OCOTP_BOOT_CFG0

Which one would be better way to burn fuses in production environment?

Thanks,

Pratik Manvar