Could recovery mode be disabled?

Our product is to enable secure boot feature of TK1, so basically sign uboot by device secure boot key (SBK), I am wondering if SBK could be read out in recovery mode, if it could be read out, then, my device is naked and uboot could be replaced by application be replaced too.

Our product is regulated to have that happen, so I want to know how to solve this issue?

hello sxiang,

we cannot prevent recovery mode.
suggest you also refer to similar issue, Topic 1038950.