Hi, everyone I’m having a problem with apt-get upgrade affecting secureboot and making it impossible to boot. After troubleshooting, I found that updating nvidia-l4t-bootloader causes the problem, I want to confirm it, if or not. Other than that, I wonder if apt-get upgrade updates to other packag…

hello zjfsharp, may I know which JetPack release you’re based-on, and, which version you’re moving to. in addition, what’s the Jetson security your NX platform enabled, is it PKC, PKC+SBK, or something else? thanks

Hi， JerryChang NX and agx platform all met. secureboot: PKC+SBK with R32.5.1 Thanks

hello zjfsharp, NVIDIA provides the basic functionality of updating the system through the OTA update process. You must modify the process and create a complete and secure OTA solution, for example, authenticating the OTA update server, encrypting /decrypting OTA payloads…etc. currently there’s …

Thanks By the way, when will JetPack-4.6 be released roughly?

Hi Jerry, We have noticed the same issue with Jetpack 4.5.1 that zjfsharp reports and waiting for Jetpack 4.6 is not an acceptible solution for us. Specifically, we would like to update to the latest version of bootloaders to mitigate the security issues identified in https://nvidia.custhelp.com/a…

hello 5121802, please refer to Topic 182123 , there’re changes inside the trusty and also some non-public sources. if you’re having cboot modification and would like to integrate the patches, suggest you please initial another new discussion thread for asking that. thanks

Hi Jerry, I should have made it clearer, we are using the bootloaders and trusty as released by Nivida. In other words, we are not modifying either C-Boot or trusty. As for Topic 182123 we are not requesting Nvidia to back port any changes. The security updates have already been made for Jetpack…

[image] 5121802: have enabled secure boot, hello 5121802, I see, it’ll need the binaries to generate the signed/encrypted for the fused device. however, that’s currently not supported. (cause you don’t have separate files/binaries of the MB1, MB2.. binaries) could you please initial anothe…

Hi Jerry, Thanks for looking into this. I’ve generated a new topic at: Security bulletin support for Xavier NX with secure boot enabled Thanks!

Apt upgrade will affect secureboot?

Robotics & Edge Computing Jetson Systems Jetson Xavier NX

JerryChang June 28, 2021, 7:18am 7

please refer to Jetson Software Roadmap for 2H-2021 and 2022, it’s scheduled for July 2021.

Topic		Replies	Views
Security bulletin support for Xavier NX with secure boot enabled Jetson Xavier NX security , nvbugs	4	1350	July 21, 2021
ERROR. Procedure for bootloader update FAILED. When executing sudo apt-get upgrade Jetson Nano boot , nvbugs , nano2gb	8	5064	September 13, 2021
Security update to L4T 32.7.4 Jetson Xavier NX security	5	679	July 5, 2023
Jetson security vulnearbilites Jetson TX2 security	5	2276	August 11, 2021
JetPack 5.0 Native from SSD Failed to Boot after Upgrade Jetson AGX Xavier boot , reflash , nvbugs	1	562	July 4, 2022
Problem with bootloader image while updating from Jetpack 5.0.1 to 5.0.2 Jetson Xavier NX boot	5	835	August 24, 2022
Broken nvidia-l4t-bootloader packge after upgrade? Jetson AGX Xavier ota	7	5247	March 15, 2021
Sudo apt-get upgrade returning with error Jetson Nano	8	2652	July 14, 2021
JP5-DP installed on NVME SSD - OTA upgrade failed (bl_only_payload) Jetson Xavier NX nvbugs , ota	11	1562	May 23, 2022
Apt-get upgrade fails in Xavier-Nx Jetson Xavier NX ota	9	2268	November 25, 2020

Apt upgrade will affect secureboot?

Related topics