Ekb_extraction_process:319 Tried all EKB_RKs but still can't extract the EKB image

Robotics & Edge Computing Jetson & Embedded Systems Jetson AGX Orin
,
1

jetson agx orin使用jetpack5.1.2，镜像属于A/B模式。默认是A区模式。目前有一台设备一直处于B区模式（人工未切换），手动通过nvbootctrl切换到A区后，设备尝试从A区启动失败后进入B区。我们的镜像只支持安全启动，无镜像加密。
报错信息：
I/TC: Primary CPU initializing
//正常从A区启动下面三行打印
E/TC:00 00 ekb_extraction_process:319 Tried all EKB_RKs but still can’t extract the EKB image.
E/TC:00 00 jetson_user_key_pta_init:898 jetson_user_key_pta_init: Failed (ffff000f).
E/TC:00 00 call_initcalls:43 Initcall __text_start + 0x000f2848 failed
I/TC: Primary CPU switching to normal world boot

image
image1920×1176 165 KB

image
image3096×1426 480 KB

详细启动日志如下：
MobaXterm_COM3USBSerialPortCOM3_20250326_125409.txt (183.3 KB)
请问该问题如何解决？

3

hello 1712127445,

please refer to Tool for EKB Generation.
did you re-generate EKS image, and updating secure-os partition (both A_secure-os and B_secure-os) correctly?

4

安全启动配置中没有生成EKS image，我们只是生成PKC密钥，由此生成 PublicKeyHash，完成fuse烧写。
EKS image是存储在64MB的spi flash中吗？如何读取进行MD5sum的校验？

5

hello 1712127445,

just an FYI,
PKC for sign, if PKC is burned, then the KEYFILE users provide is for signing the images.
SBK for encryption, if SBK is burned, then the SBKFILE users provide is for encrypting the images.

so..
did you meant you fuse a target with only PKC enabled?

6

Is this still an issue to support? Any result can be shared?

7

该问题没有解决，需要你们提供一些解决方法思路

8

There is no update from you for a period, assuming this is not an issue anymore.
Hence, we are closing this topic. If need further support, please open a new one.
Thanks ~0422

hello 1712127445,

did you update the EKS image correctly?
may I also have your complete steps to reproduce this failure.