AnsweredAssumed Answered

secure boot failed on P4080DS

Question asked by Yi Li on Jun 17, 2016

Hello,

  I have been working on getting secure boot working with a p4080ds and U-Boot, I seem to be having issues with the validation of my image.Steps like this:

1.Use SDK2.0 cst generate keys.

./gen_keys 2048

generate srk.pub and srk.pri.

2.generate csf header file by input_uboot_secure

copy <SDK folder>/build_p4080ds/tmp/deploy/images/p4080ds/u-boot-secure-boot-2016.01+fslgit-r0.bin to cst folder.

ln -sf  u-boot-secure-boot-2016.01+fslgit-r0.bin u-boot.bin

./uni_sign input_files/uni_sign/p3_p4_p5/input_uboot_secure

generate hdr_uboot.out and key hash 034d229fc108433e5e2da56d1842a39eb42bf90add643f7a7219e546698c67a7

3.generate otpmk

./gen_otpmk_drbg 1

OTPMK[255:0] is:

f26e5dbcea6d99fcdbf6d81caed1a720180c342c7ccf1acfc93b4fa24922dbb4

NAME      |     BITS               |    VALUE

_________|______________|____________

OTPMKR 0 |  31-  0      |   4922dbb4

OTPMKR 1 |  63- 32      |   c93b4fa2

OTPMKR 2 |  95- 64      |   7ccf1acf

OTPMKR 3 | 127- 96      |   180c342c

OTPMKR 4 | 159-128      |   aed1a720

OTPMKR 5 | 191-160      |   dbf6d81c

OTPMKR 6 | 223-192      |   ea6d99fc

OTPMKR 7 | 255-224      |   f26e5dbc

4.load the u-boot-secure-boot-2016.01+fslgit-r0.bin and rcw_13g_sben_1500mhz_rev2.bin to board.

u-boot-secure-boot-2016.01+fslgit-r0.bin in folder <SDK folder>/build_p4080ds/tmp/deploy/images/p4080ds/

rcw_13g_sben_1500mhz_rev2.bin in folder

<SDK folder>/build_p4080ds/tmp/deploy/images/p4080ds/rcw/p4080ds/R_PPSXN_0x10

commands like this:

        load u-boot:

        tftp 100000 u-boot.bin

        erase ebf40000 +c0000

        cp.b 100000 ebf40000 c0000

        load csf_header:

        tftp 100000 hdr_uboot.out

        erase ebf20000 +500

        cp.b 100000 ebf20000 500

        load rcw:

        tftp 1000000 rcw_13g_sben_1500mhz_rev2.bin

        erase ec000000 +150

        cp.b 1000000 ec000000 150

5.Write public key hash in address fe0e807c

 

        mm fe0e807c

        SFP SRKHR0 = 034d229f

        SFP SRKHR1 = c108433e

        SFP SRKHR2 = 5e2da56d

        SFP SRKHR3 = 1842a39e

        SFP SRKHR4 = b42bf90a

        SFP SRKHR5 = dd643f7a

        SFP SRKHR6 = 7219e546

        SFP SRKHR7 = 698c67a7

6.Write otpmk

       mm fe0e807c

        OTPMKR 0 |  31-  0      |   4922dbb4

        OTPMKR 1 |  63- 32      |   c93b4fa2

        OTPMKR 2 |  95- 64      |   7ccf1acf

        OTPMKR 3 | 127- 96      |   180c342c

        OTPMKR 4 | 159-128      |   aed1a720

        OTPMKR 5 | 191-160      |   dbf6d81c

        OTPMKR 6 | 223-192      |   ea6d99fc

        OTPMKR 7 | 255-224      |   f26e5dbc

This operation is failed, md fe0e807c all value is 0.

7.set SW7[2],boot this u-boot.

        Nothing output.

 

Attachments are my rcw configure and input_uboot_secure.

Please tell me,what is wrong with this,thank you very much.

 

Best Regards.

Original Attachment has been moved to: rcw_13g_sben_1500mhz_rev2.rcw.zip

Original Attachment has been moved to: input_uboot_secure.zip

Outcomes