Hello, I’m currently testing the secure boot on a Orin NX using Jetpack 6.1, while doing my tests, the signature of the following files seem to not be check: mb2rf_t234_sigheader.bin.signed psc_rf_t234_prod_sigheader.bin.signed sc7_t234_prod_sigheader.bin.signed tsec_t234_sigheader.bin.signed F…

hello AFR, it’s MB2 in charge of verifying the boot images it loads, such as ATF, OP-TEE, UEFI…etc. the signature of these components will be checked only when OmKeyValid and SecurityMode are burned.

Hello JerryChang, I burned OemKey but not SecurityMode yet. It will be weird that all the other binaries are check but not those 4 when SecurityMode is not burned. If you confirm that for those 4 binaries specifically SecurityMode need to be burn, I will finish my other tests and try again later w…

Hello JerryChang, Before burning the SecurityMode, I would like to confirm something. We will burn the fuses related to disable debug capability, does those fuses have an impact on the serial console showing the boot log? Best regards

yes.. those MB1,MB2 (i.e. bootloader stage) logs will be disabled after you burn odm production fuse.

Check secure boot

Robotics & Edge Computing Jetson Systems Jetson Orin NX

JerryChang July 10, 2025, 8:28am 3

hello AFR,

it should be follow-up of Topic 337248,
did you meant it doesn’t check those 4 binaries even with OemKeyValid and SecurityMode are burned.

Topic		Replies	Views
Does not burning security_mode keep secure boot disable Jetson Orin NX security	12	360	July 8, 2025
Jetson Orin Nx secure boot for JP 6.2.1 Jetson Orin NX boot , kernel , security	32	258	January 23, 2026
Failed to flash signed boot image Jetson Xavier NX security	9	1581	July 15, 2021
How to _verify_ secureboot is active? Jetson Orin Nano security	1	440	February 15, 2024
DTB not check secure boot Jetson Orin NX boot , security	11	319	April 7, 2025
Further documentation about Secure Boot Jetson Orin NX security	4	1075	April 18, 2023
Secure boot mode configuration Jetson AGX Orin security	7	284	September 14, 2025
Some images are not signed(as shown below). Can I add a signature or enable oem_sign in the flash_t194_sdmmc.xml Jetson AGX Xavier security , nvbugs	7	1133	October 7, 2020
L4T 32.7.2 sign kernel, kernel-dtb and initrd Jetson TX2 security	3	838	July 20, 2022
Boot signed UEFI bootloader on a system with no fuses burnt Jetson Orin NX security , uefi	8	308	February 7, 2025

Check secure boot

Related topics