Host required for secure on Jetson orin nano dev kit

Dear team,

I am confused to use host system with ubuntu 20.04LTS / Ubuntu 18.04LTS or Ubunutu 22.04LTS to flash my jetson orin nano dev kit with secure boot using jetpack 6.2.

to flash jetpack 6.2, host has to be ubuntu 22.04LTS
and in the secure boot documentation, host has to be ubuntu 18.04LTS or ubuntu 20.04LTS.

Please clarify what host has to be used.

hello SeetharamNS,

actually, I’m using Ubuntu-20.04 without issues.

Hey JerryChang,

Is it ok if i use ubuntu 22.04 LTS?

hello SeetharamNS,

may I know what’s the Jetapck installation you’ve seen?
it’s suggest to follow [Prerequisites Secure Boot] for using Ubuntu 20.04.

Hello JerryChang,

I am referring to jetpack 6.2(R36.4.3).

Following the same. But according to convention, L4T BSP R34.X.X needs Ubuntu 22.04LTS as host.

So If I use 20.04/18.04(as mentioned in the doc), I was wandering that flashing might fail when I run the flash script at the end.

as mentioned, I’m using Ubuntu-20.04 for flashing targets without issues.

Ok, as of now I have ubuntu 18.04LTS. I will try with that.

Also I wan to know how to generate auth_key (Which required in running gen_ekb.py file). In the documentation they have asked to HSM(Hardware Security module) which I don’t have. So can you help/suggest me some other options to generate the same?

hello SeetharamNS,

it’s 16-byte UEFI variable authentication key file in hex format.
you may refer to Prepare EKB to define auth_t234.key manually.

Ok. i got it.

Now I am above to flash with the below command.
sudo ./flash.sh -u <pkc_keyfile> [-v <sbk_keyfile>] <target_config> internal

In my case, i am using Orin Nano dev kit so there is no internal emmc available. so what do i have to mention in place of “internal” in the command?

hello SeetharamNS,

you may using l4t_initrd_flash.sh, please refer to developer guide, Flashing with initrd for details.

I am trying the burn the fuse file with odmfuse.sh script but getting error. below mentioned is my command and corresponding error. please help.

sudo ./odmfuse.sh -X ./bootloader/fuse_config_t234.xml -i 0x23 jetson-orin-nano-devkit-super

Error: Either PKC or SBK key is not provided for SBK+PKC protected target board.

hello SeetharamNS,

it looks you’ve fused this target before according to the logs.
please double check by referring to Read Fuses through the Linux kernel.

नमस्ते/Namaste Jerrychang,

Greetings!

I am unable to find the fuse script in the /usr/sbin/nv_fuse_read.sh
directory.

And also I tried to execute the following command:

sudo ./odmfuse.sh -X <fuse_config> -i 0x23 -k <pkc.pem> <target_config>

as I had previously burned the fuse config file with odmfuse script.
But I had done this on a host that had ubuntu22.04.

But now I am working with Ubuntu 18.04LTS as mentioned in the
documentation but landing with an error that was mentioned in my
previous mail/query box.

I even tried with both the PKC key values(old and new) but no luck.

please suggest to me how shall I proceed.

hello SeetharamNS,

are you going to fuse (partial fuse burning) the target to program other fuse variables?
according to developer guide, Burn Fuses with the Fuse Configuration file.

NVIDIA recommends burning all the fuses you need in a single operation.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.