AnsweredAssumed Answered

Issue in Booting After Enabling Secure Boot

Question asked by Pranav Madhu on Feb 18, 2016
Latest reply on Feb 19, 2016 by Adrian Stoica

Hi,

I'm working on LS1021AIOT rev 2 board. I'm trying to enable secure boot feature in our board. I did the following steps.

1. Enabled SB_EN bit on rcw, and byte swapped the obtained pbl. (Make SCRATCHRW1=0x40090000 ie csf hearder location on NOR Flash).

2. Generated public and private keys.

3. generated CSF header and key hash for u-boot. (using uni_sign utility in cst directory).

4. Placed jumpers on j14, j19, & j20.

5. Generated OTPMK0 - OTPMK7, and written to OTPMK registers of ls1 (0x01e80234).

6. Programmed SRKH register in big endian mode with value obtained from hash key (0x01e0254).

7. Write content of mirror register to fuse array by programming SFP_INGR register (0x01e80020).

8. Check the status of fuse array programming by reading the status of SFP_INGR register. the value obtained was 0x0, programmed successfully.

9. Switch of the board and removed jumpers j19, & j20 and booted board from SD card.

10. Flashed the byte swapped rcw (SB_EN=1) to NOR addr 0x0, u-boot to addr 0x10000 and CSF header for u-boot to addr 0x90000.

11. Reboot the board

But now we  are not getting any console prints on booting from QSPI NOR with secure boot enabled, also unable to boot from SD card in non secured mode (in rcw SB_EN = 0 for SD card).

The RCW  in QSPI NOR is detected by the board, as the red LED(D6) indicator has turned off. But while booting from SD card, the rcw is not detecting as the red LED(D6) is blinking, but it is possible to boot another LS1021aiot board using the same SD card (in Non secure mode).

Is that a chip errata of ls1021aiot silicon revision 2?

 

Can anybody help me in solving these issue?

Thanking you in advance,

Pranav

Outcomes