I’m working on Secureboot Orin Nano 4GB with our customboard in L4T R35.4.1. I burned SBK and PKC. <genericfuse MagicId="0x45535546" version="1.0.0"> <fuse name="PublicKeyHash" size="64" value="0x7..."/> <fuse name="SecureBootKey" size="32" value="0x31..."/> <fuse name="BootSecurityInf…

hello S.Harumoto, please replace those binary files with Topic266849_Oct30.7z only. besides, please also give it a try to revise tegrasign_v3_internal.py for adding one line as following. diff --git a/tegrasign_v3/tegrasign_v3_internal.py b/tegrasign_v3/tegrasign_v3_internal.py @@ -1512,6 +1512,7…

is this target has fused before with PKC key? Yes, it is. are you able to perform odmfuseread.sh to examine the fuse values. No, it fails. the same err appeared. odmfuseread.log (20.6 KB) Linux_for_Tegra$ sudo ./odmfuseread.sh -i 0x23 -k uefi_keys/keys/pkc_rsa3k.pem -S uefi_keys/keys/sbk.k…

hello S.Harumoto, I doubt SBK has not fused, please try given only PKC key for reading fuse values. for example, $ sudo ./odmfuseread.sh -i 0x23 -k uefi_keys/keys/pkc_rsa3k.pem jetson-orin-nano-devkit

It dosen’t works. SBK is required. $ sudo ./odmfuseread.sh -i 0x23 -k uefi_keys/keys/pkc_rsa3k.pem jetson-orin-nano-devkit Error: Either PKC or SBK key is not provided for SBK+PKC protected target board. I suspect other factors. Is BootSecurityInfo 0x209 correct? I use rsa 3k key for PKC.

it looks odmfuse has recognize this target as PKC+SBK fused device. please check Jetson AGX Orin Fuse Specification for fuse name, FUSE_BOOT_SECURITY_INFO_0 for more details.

I think I burned SBK and PKC. <genericfuse MagicId="0x45535546" version="1.0.0"> <fuse name="PublicKeyHash" size="64" value="0x7..."/> <fuse name="SecureBootKey" size="32" value="0x31..."/> <fuse name="BootSecurityInfo" size="4" value="0x209"/> </genericfuse> So, it is natural that odm…

My xml is most likely correct. Why doesn’t it work? Does SBK only work if SecurityMode is 1?

hello S.Harumoto, could you please test on Orin Nano developer kit. we normally burning all fuse values at once. so, we’ve also burn SecurityMode as 0x1 as ERROR: might be timeout in USB write after Fuse burning - #8 by JerryChang

I add SecurityMode to the non-working orin 4GB with orin nano dev kit. But it’s not still working. I’m also planning to burn fuse to a new OrinNano module. But, I afraid of the same result. Could you please test enabling only SBK+PKC(RSA3k) with Jetson Xavier devkit in your environment? And I’d…

we’ve already tested and verified with Orin-NX-8GB / l4t-r35.4.1

Fail to boot with SBK

Robotics & Edge Computing Jetson Systems Jetson Orin Nano

JerryChang September 25, 2023, 2:49am 21

you may check this forum topic, Topic 266387 for more details of BootSecurityInfo.

Topic		Replies	Views
Flashing with SBK keyfile failed @ unburn fuse of Orin Nano @ Jetpack 6.2 Jetson Nano boot , security	12	80	February 18, 2026
Flash from command line is failing with Secure Boot Jetson Orin Nano security	18	503	April 28, 2025
Jetson Orin NX - board can't flash after partial fuse burn Jetson Orin NX security , nvbugs	55	1355	March 18, 2026
Problem with fuse burning Jetson Orin Nano security	25	238	April 13, 2026
ERROR: might be timeout in USB write after Fuse burning Jetson Orin NX boot , reflash , security	6	2046	August 25, 2023
Secure boot failed with jetson nano orin Jetson Orin Nano security	18	472	August 16, 2024
Orin-Nano cannot flashing stuch at RCM Jetson Orin NX boot	21	957	April 24, 2024
Unable to boot fused Jetson Orin Nano despite flashing process appearing to succeed Jetson Orin Nano security	27	579	July 21, 2025
[R35.4.1] [Jetson Orin Nano devkit 8Gb] Error log showing after enable secure boot Jetson Orin Nano security	22	730	June 4, 2024
Secure Boot for Orin NX Jetson Orin NX boot , security	30	4060	October 13, 2023

Fail to boot with SBK

Related topics