NXP Semiconductors Layerscape LS1028A BSP, Руководство пользователя, Страница: 33 / 136

e. Blow the OTPMK to fuses if no parity error is found.
mw 1e80020 0x02
f. Reset and check that SNVS is in check state.
ccs::display_mem <sap chain position> 0x1e90014 4 0 4
80000900
2. Generate secure boot images.
a. Fetch the CST repository and checkout to ls1028-early-access branch.
b. Change directory as
cd cst
and run
make
command.
c. Generate RSA public and private keys with the following command:
./gen_keys <key_size>, key_size = 1024,
2048 or 4096
.
d. Copy all the binaries to
./cst directory.
i. Rcw.bin
ii. U-boot.bin
iii. ppa.itb
iv. kernel.itb
e. Use below commands to sign images:
i.
$./uni_pbi input_files/uni_pbi/ls1028/input_pbi_flexspi_nor_secure # pbi header
ii.
$./uni_sign input_files/uni_sign/ls1028/nor/input_uboot_secure #uboot header
iii.
$./uni_sign input_files/uni_sign/ls1028/nor/input_ppa_secure #ppa header
iv.
$./uni_sign input_files/uni_sign/ls1028/input_kernel_secure #kernel header
3. Flash address for headers and respective images.
Place all the images on the NOR flash at the specified offsets:
• rcw_sec.bin >> 0x000000
• hdr_ppa.out >> 0x600000
• hdr_uboot.out >> 0x6c0000
• hdr_kernel.out >> 0x800000
• u-boot-dtb.bin >> 0x100000
• ppa.itb >> 0x400000
• kernel.itb >> 0x1000000
4. Put the board into RSP (reset pause).
config_chain {ls1028a dap};
display ccs::get_config_chain;
# To enable RSP:
ccs::config_chain testcore;
jtag::lock;
jtag::state_move test_logic_reset;
jtag::scan_out ir 4 3;
jtag::scan_out dr 6 1;
Procedure to run secure boot
Layerscape LS1028A BSP User Guide, Rev. 0.3, 04/2019
NXP Semiconductors
33