I am configuring encrypted boot for an i.MX8 ULP board. I'm using instructions from here:
https://raw.githubusercontent.com/nxp-imx/uboot-imx/refs/heads/lf_v2024.04/doc/imx/ahab/guides/mx8ul...
The CST tool generates a new Data Encryption Key (DEK) every time it is run, encrypts the container and saves the key in the file specified in the .csf file, overwriting any existing key. I want to be able to sign my containers using an existing DEK for which I have already generated the dek_blob.
How is that possible?
