How can I perform batch copying after enabling and flashing the encrypted root file system (Encrypted RootFS) on NVIDIA Jetson Orin?

Robotics & Edge Computing Jetson Systems Jetson Orin Nano
, ,
1

I use the tools provided by OP-TEE to generate a test EKS image and then use $ sudo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh -i “./disk_enc.key” to flash the Orin Nano NVMe SSD. The flashing is successful and disk encryption is achieved. My question is: how should I quickly and efficiently replicate this in mass production? My current method is to first use dd to copy the NVMe SSD and then perform QSPI internal flashing on the Orin Nano module, but this approach causes errors during device startup, as shown in the attachment. Could you please give me some advice? Thank you!

[com COM4] (2025-11-21_104431) COM4 (Prolific USB-to-Serial Comm Port (COM4)).log (109.9 KB)

5

hello andorno,

it’s by default to have unique ECID (per devices) to enable disk encryption.
for the mass production scenario, you may see-also Topic 291335 to create encrypted images with a generic key (i.e. --generic-passphrase)

7

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.