Hello I’ve been trying to flash orin nano and agx orin, with nvme encrypted. I’ve followed the guide and the forums. I’ve ended up using this code for creating folders: tar xvf Jetson_Linux_R35.5.0_aarch64.tbz2 sudo tar xvf Tegra_Linux_Sample-Root-Filesystem_R35.5.0_aarch64.tbz2 -C Linux_for_Tegr…

[image] masip85: So I guess num_sectors will solve the partition size issue. APP size by default it defined as 57GB in the flash configuration file. since it’s APP_ENC partition for encryption part. The EXT_NUM_SECTORS size need smaller than your NVMe actual size and bigger than APP size. p…

hello masip85, this is due to below.. [image] masip85: E/TC:?? 00 jetson_user_key_pta_uefi_vars_auth:861 Auth key is not set in EKB. E/TC:?? 00 stmm_handle_variable_authentication:910 Failed to get signed CMAC ffff0008 according to Topic 284400 , we’ve reproduced this on developer kit, and …

[image] masip85: E/TC:?? 00 jetson_user_key_pta_uefi_vars_auth:861 Auth key is not set in EKB. I notice there is new lines in this version of example.sh, lines I didn’t know what to do with them. As you can see, I commented them, following in that way what I’ve read as solution here at the fo…

Already tried with orin nano. I’ve used example.sh default auth_t234. echo “d9f7b49e3b6264985f1326f541bb43c9” > auth_t234.key Then uncommented this at example.sh -in_auth_key auth_t234.key Then I’ve followed same steps referenced at first post: After executing example, then: cp Linux_for_T…

[image] masip85: Then uncommented this at example.sh umm.. you’re now using r35.5.0, right? the uefi variable protection feature is always enabled. you cannot create EKS image without auth_t234.key.

Yes. r35.5.0. Uefi variable protection is always enabled, but does it mean I have to follow Secure Boot procedure? I’ve read many times that is not the case here at the forum, that I can use disk encryption by it’s own without I have created eks_image with it. Copied to Linux_for_Tegra/bootloade…

hello masip85, could you please have below command execute to examine that generated EKS image. for example, $ hexdump -C -n 4 -s 0x24 eks_t234.img

00000024 45 45 4b 42 |EEKB| 00000028

By the way, now the error (switching to agx orin for debugging with serial) is: �DCE: FW Boot Done ��NOTICE: BL31: v2.6(release):cec9a2bc3 NOTICE: BL31: Built : 20:19:41, Feb 19 2024 I/TC: Physical secure memory base 0x103c040000 size 0x3fc0000 I/TC: I/TC: Non-secure external DT found I/TC:…

[image] masip85: E/TC:00 00 ekb_extraction_process:321 Tried all EKB_RKs but still can’t extract the EKB image. E/TC:00 00 jetson_user_key_pta_init:974 jetson_user_key_pta_init: Failed (ffff000f). hello masip85, may I double confirm.. did you using a customize key? (i.e. sym2_t234.key) if …

Disk encryption not working (2) . AGX Orin but also Orin Nano - r35.5.0

Robotics & Edge Computing Jetson Systems Jetson Orin Nano

JerryChang March 7, 2024, 1:52am 6

hello masip85,

could you please follow Topic 284400, comment #8 by using r35.5.0 gen_ekb script file to re-create a new EKS image, and updating it accordingly.

Topic		Replies	Views
Custom keys for Orin NX disk encryption Jetson Orin NX security	11	2305	September 25, 2023
Failing with custom keys for encrypting NVME on Jetson Orin Nano Jetson Orin Nano boot , security , nvbugs	29	3560	November 13, 2023
Disk Encryption on Orin NX NVMe Not working Jetson Orin NX reflash , security , nvbugs	24	3767	September 25, 2023
Orin AGX NVMe disk encryption Jetson AGX Orin security	7	1457	September 11, 2023
Unable to boot fused Jetson Orin Nano despite flashing process appearing to succeed Jetson Orin Nano security	27	579	July 21, 2025
Orin Nano 8GB Encrypted SSD flashing FAILS on prod-module - devboard is OK Jetson Orin Nano boot , reflash , security , nvme , qspi	18	648	July 30, 2024
UEFI secureboot and disk encryption in 36.4 Jetson AGX Orin security	11	490	October 28, 2024
Secure boot failed with jetson nano orin Jetson Orin Nano security	18	472	August 16, 2024
Jetson Orin Nano Encrypted RootFs Black Screen Jetson Orin Nano security	8	1024	November 20, 2023
Orin Nano 8Gb dev-board issues with flashing encrypted root_fs of Jetpack 5.1.2 Jetson Orin Nano reflash , security	6	426	July 30, 2024

Disk encryption not working (2) . AGX Orin but also Orin Nano - r35.5.0

Related topics