Hello everyone!
I am enabling secure-boot to a Orin NX, following the Secure-Boot Documentation. I was able to create the PKC key pair, the SBK key and the KEK keys. My config file looks like this:
<genericfuse MagicId="0x45535546" version="1.0.0">
<fuse name="PublicKeyHash" size="64" value="XXXX"/>
<fuse name="SecureBootKey" size="32" value="XXXX"/>
<fuse name="OemK1" size="32" value="XXXX"/>
<fuse name="OemK2" size="32" value="XXXX"/>
<fuse name="BootSecurityInfo" size="4" value="0x209"/>
<fuse name="SecurityMode" size="4" value="0x1"/>
</genericfuse>
First question here, the BootSecurityInfo y set correctly? The next step would be to run the odmfuse.sh
script with this command:
sudo ./odmfuse.sh --test -i 0x23 -X ~/orin_nx.xml jetson-orin-nano-devkit
For this script i got the logs seen in the odm_logs.txt
.
odm_logs.txt (89.4 KB)
In the previous log, there are some errors that i want to know if they are normal, for example:
[ 0.0332 ] File rcm_state open failed
[ 0.0334 ] ERROR: failed to read rcm_state
Or:
[ 0.1607 ] MB1-BCT version: 0.10
[ 0.1609 ] ERROR: carveout /misc/carveout/aux_info@CARVEOUT_UNUSED1/ is not supported
[ 0.1613 ] ERROR: carveout /misc/carveout/aux_info@CARVEOUT_UNUSED1/ is not supported
[ 0.1617 ] ERROR: carveout /misc/carveout/aux_info@CARVEOUT_UNUSED1/ is not supported
[ 0.1620 ] ERROR: /misc/tsc_controls/tsc_locking_config is not supported
[ 0.1623 ] ERROR: /misc/tsc_controls/tsc_locking_diff_configuration is not supported
[ 0.1628 ] ERROR: /misc/tsc_controls/tsc_locking_ref_frequency_configuration is not supported
[ 0.1632 ] ERROR: /misc/tsc_controls/tsc_locking_control is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_locking_adjust_configuration is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_locking_fast_adjust_configuration is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_locking_adjust_delta_control is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_capture_control_ptx is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_capture_config_ptx is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_stscrsr is not supported
[ 0.1634 ] ERROR: /misc/tsc_controls/tsc_locking_adjust_num_control is not supported
Is my config file set up correctly or the logs of the odmfuse script normal? I want to be sure before running the script without the --test
flag. Also the configuration have all the keys that the documentation asks, but, i saw in this topic you added some others like the PscOdmStatic
, EndorseKey
or Kdk0
, are they needed?