fTPM Implementation and Provisioning

Robotics & Edge Computing Jetson & Embedded Systems Jetson Orin NX
1

Hello there,

I have two questions regarding Jetson fTPM installation.

First, we are using a preconfigured Jetson Linux version based on R36.4.3, along with a custom carrier board rather than the original one used for Orin NX. I was unable to find the optee directory within our image files. As suggested in the official guidelines, I retrieved the optee directory by downloading a fresh BSP package. I understand that compatibility depends on our specific configuration, but I would like to know if you believe this approach could cause any conflicts.

My second question is about the FSKP package. According to the documentation, it is a partner release package. Is there any way to test the fTPM provisioning process without burning fuses or making permanent hardware changes? I would like to avoid risking any damage to our devices during initial testing.

Thank you for your time.

3

Hi mehmetyusuf1414,

Please download them from Driver Package (BSP) Sources.

It should be also working on your custom carrier board. fTPM is SW implementation.

I think burning fuse is necessary in this use case.

May I know what’s your use case and requirement?

1 Like
4

Hello Kevin,
Thank you for your reply.

We are developing security solutions using various camera systems and sensors, with a focus on ALPR systems. We require fTPM to secure our custom image installations on Orin NX modules.

I’m still exploring the full capabilities of fTPM, so I may be referring to some use cases incorrectly. However, I’m confident that we will need to utilize fTPM in our project.

Thank you again for your time.

5

For fTPM feature on Jetson, you can refer to Firmware TPM — NVIDIA Jetson Linux Developer Guide for details.

1 Like
6

Kevin, thank you for referring me to the guideline.

I have been following it to learn more about fTPM, but I assume that testing fTPM is not possible without burning the fuses—is that correct?

Thank you once again.

7

Correct, burning the fuse is required to verify fTPM.

1 Like
8

I have one more small question,

The Official TPM 2.0 Reference Implementation (link) can be used to simulate fTPM Provisioning, right? This allows us to test the process safely I assume.

9

We’ve not verified that locally, but it seems worth to try if you want to simulate TPM2.0.

1 Like