How to correctly copy OP-TEE install files to Jetson AGX Orin target

Hi everyone,

I copied the files from /optee/install/t234 from host to target which is an jetson_agx_orin_devkit , but the tee-supplicant file is not copied, it says text file busy when i am copying it to the /usr/sbin/* . I want to know what should be the exact command for copying these files from /optee/install/t234 to the target, which destination in the target. Kindly help me.

Regards

hello Chlorophantom,

please see-also Topic 294046 for reference.

Hi JerryChang,
I have read through the comments. I have generated the tos, flashed it successfully, sudo xtest also passes, but tee-supplicant -d is not passing. I think because I am not following step 3 of the veryfying the image whi
ch is

  1. Copy all the files under ./optee/install/t to the target.

Please help.

hello Chlorophantom,

you may using ssh to copy those files to your target.

Hi JerryChang,

I did ssh, then also I have gone through this discussion :

My problem seems the same. I am attaching the sudo xtest and sudo tee-supplicant logs.

Regards
output.txt (87.8 KB)
output_tee-supplicant.txt (809 Bytes)

hello Chlorophantom,

may I also know which Jetpack release version you’re using?
you may check release tag, $ cat /etc/nv_tegra_release for confirmation.

hello Chlorophantom,

BTW, you may also setup serial console to gather the complete UART logs for reference.

Hi JerryChang,

I have build a kernel as specified in the documentation - kernel customization. Then build optee. I have attached the output of the $ cat /etc/nv_tegra_release .

Regards.
output_cat.txt (1.1 KB)

hello Chlorophantom,

it looks you’re using JetPack 6.2.1/r36.4.4.
the logs you shared before seems truncated. please also share the the complete UART logs of sudo tee-supplicant for reference.

Hi JerryChang,
I have attached the serial logs from the booting of the target device. Kindly check.

Regards.

logs_serial.txt (397.0 KB)

Hi JerryChang,
I have build the kernel from the BSP sources and drivers, and generating the whole os image as instructed in the developer guide for l4T36.4.4 . After flashing the whole os to the target I am unable to connect to the network or wifi or lan in the target, hence I used a pendrive to copy the files in the /optee/install/t234 making it a tar file, then extracted in the target and tried to copy, So now in the target I have files in ’ /home/agxorin/Desktop/t234 ’ location and I copied with the following commands.
’ sudo rsync -a bin/ /bin/
sudo rsync -a lib/ /lib/
sudo rsync -a usr/ /usr/ ’

after that i ran sudo xtest. It says segmentation fault.
output_after_copying.txt (11.8 KB)

Hence I was asking you how to copy ?

kindly help.

Regards.

hello Chlorophantom,

I’ve checked with Jetson AGX Orin/JP-6.2.1

$ cat /etc/nv_tegra_release 
# R36 (release), REVISION: 4.4, GCID: 41062509, BOARD: generic, EABI: aarch64, DATE: Mon Jun 16 16:07:13 UTC 2025
$ sudo xtest
...
+-----------------------------------------------------
35134 subtests of which 0 failed
137 test cases of which 0 failed
0 test cases were skipped
TEE test application done!

you may also gather the logs with.. journalctl -u nv-tee-supplicant.service

this is not expected, did you flashing with native JetPack 6.2.1/r36.4.4 public release version?

Hi JerryChang,
I ran journalctl -u nv-tee-supplicant.service and got the below as output.

agxorin@agxorin-desktop:~$ journalctl -u nv-tee-supplicant.service
Feb 20 18:54:03 agxorin-desktop systemd[1]: Starting OP-TEE Client Supplicant...
Feb 20 18:54:03 agxorin-desktop nv-tee-supplicant.sh[390]: tee-supplicant start>
Feb 20 18:54:03 agxorin-desktop systemd[1]: Started OP-TEE Client Supplicant.

To confirm, yes, I am flashing with native JetPack 6.2.1/r36.4.4 public release version.

Regards.

hello Chlorophantom,

may I know your complete steps for flashing the whole os to the target, and it shows unable to connect to the network. we would like to reproduce this locally.

Hi JerryChang,
I have build the kernel, then compiled successfully, after that followed the README.txt file in the atf and optee folder and followed all the steps (generated tos succesfully), then flashed the os by following code :

sudo ./flash.sh jetson-agx-orin-devkit mmcblk0p1

to the target board. If you need some further details like flashing logs, let me know.

Now my main concerns are as follows:

  1. How to copy the optee/install/t234 files successfully to the target and to run the tee-supplicant. and
  2. If the commandsudo tee-supplicant gives error, then how sudo xtestpasses before copying the files to the target?
  3. If sudo xtest passes, does this suffice that tos is working properly?
  4. After copying the files optee\install\t234to the target, why after running sudo xtest it says segment fault as error (serials logs are attached above named as output_after_copying.txt).

Hi,

I encountered the same error when running sudo xtest after installing the files from <optee_src>/optee/install/t234 that I had rebuilt.

The error message indicates that it cannot open the ee90d523-90ad-46a0-859d-8eea0b150086.ta TA file. I’ve verified that there is indeed no such file in /lib/optee_armtz ."

* regression_1024 Test PTA_SYSTEM_GET_TPM_EVENT_LOG Service
覟/LD:   init_elf:493 sys_open_ta_bin(ee90d523-90ad-46a0-859d-8eea0b150086)
E/TC:?? 00 ldelf_init_with_ldelf:152 ldelf failed with res: 0xffff0008
嫪 regression_1024.1 TPM test service invocation
Segmentation fault
1 Like

hello Chlorophantom, brian.wu,

please ignore the regression_1024 test failure.
this is known issue, the xtest crashes when trying to run regression_1024 test case.
that’s due to it always assume the PCR index 0 with a default value, this test would be always fail as we enabled measured boot. (i.e. the PCR 0 is not a fixed value).
for instance, optee_test/ta/tpm_log_test/ta_entry.c at master · OP-TEE/optee_test · GitHub

Hi JerryChang,
Thank you for confirming this. It helped me a lot.

So why tee-supplicant is giving error?

Should I build the tos again or how to fix this error?

Regards

hello Chlorophantom,

as mentioned..

you’ll only see such failure with the generated TOS image (i.e. re-build the TOS image and all optee userspace programs and libraries following the atf_and_optee_README.txt)
or.. you may try to disable CFG_CORE_TPM_EVENT_LOG to re-built optee to avoid regression_1024 test-case.

1 Like

Hi JerryChang,
Thank you so much for your help.