We are able to boot directly from NVMe since L4T 32.6.1.
We are using the eMMC modules and I’d like to understand if it is possible to set up Secure Boot while directly booting to the NVMe drive, or if we have to prepare and flash the eMMC with a complex process in order to implement security.
you’re asking for disk encryption for the external (i.e. NVME) storage.
according to Release Notes (r32.6.1), disk encryption has extended to support external media
hence,
you may enable ROOTFS_ENC to achieve this, please also check Disk Encryption chapter for reference,
thanks