We have a Orin AGX that has a nvme ssd attached to it. We enabled rootfs a/b and disk encryption. We can flash the orin with the regular flash.sh w/o problems and can see that the expected emmc partitions are encrypted via luks etc. We also would like to a) format b) encrypt c) decrypt and mou…

hello brootux, you’re correct, it’s ROOTFS_ENC variable to enable disk encryption support. >> the stuff of a “regular” flash (boot/rootfs a/b/etc) on the internal storage it’s done with ROOTFS_ENC=1 in flash.sh command line. >> a data partition that gets decrypted on boot on external nvme-storag…

we were able to flash the device with export ROOTFS_AB=1 export ROOTFS_ENC=1 echo "[key]" > ./ekb.key ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs --network usb0 --no-flash -i ./ekb.key --uefi-keys uefi_keys/uefi_keys.conf jetson-agx-orin-devkit internal ./flash.sh --no-flash -i ./ekb.key --…

hello brootux, you’ve specify this to flash external NVMe. [image] brootux: --external-device nvme0n1p1 …external you can use flash.sh to flash AGX Orin directly, it’ll flash onto internal eMMC by default .

Okay im trying to make it more clear what we try to accieve, we need the stuff of a “regular” flash (boot/rootfs a/b/etc) on the internal storage a data partition that gets decrypted on boot on external nvme-storage to have decryption of the external storage on boot, i think the luks passphrase …

hello brootux, you should set environment ROOTFS_ENC=1 in flash.sh command line to generate and flash disk encryption enabled rootfs/UDA partition images, please refer to How to Create an Encrypted Rootfs on the Host for details.

We are already setting ROOTFS_ENC whats the difference to ENC_ROOTFS? My guess is that there is a typo in the docs since ROOTFS_ENC works for us (when we flash the rootfs only).

How to flash OS etc to encrypted emmc but also setup encrypted nvme ssd?

Robotics & Edge Computing Jetson Systems Jetson AGX Orin

JerryChang August 28, 2024, 5:54am 3

hello brootux,

you may refer to Topic 270934 to enable disk encryption.

Topic		Replies	Views
Flashing and encrypting an external SSD alongside an internal eMMC Jetson AGX Orin security	10	148	December 11, 2025
Jetson Orin AGX Encryption nvme Jetson AGX Orin security	11	504	May 21, 2024
Flashing Issues with AGX Orin onto NVME Jetson AGX Orin reflash	12	1958	August 10, 2023
Data encryption on AGX Jetson Orin Jetson AGX Orin security , flash	15	425	October 8, 2024
Encrypted ssd nvme on Jetson Orin NX Jetson Orin NX security	15	362	December 12, 2025
Jetson Orin AGX / nvme emmc encryption Jetson AGX Orin security	10	448	April 16, 2024
Flash Disk encryption on external(NVME) not booting Jetson AGX Orin boot , security	3	448	March 26, 2024
`nvsdkmanager_flash` doesn't partition as expected Jetson AGX Orin reflash	7	419	May 21, 2024
NVME encrypted volume - Orix NX + JP6.2.1 + Secureboot / UEFI secure boot enabled Jetson Orin NX boot , security	9	177	November 4, 2025
Dynamic Nvme Disk encryption Jetson Orin NX security	10	164	January 5, 2026

How to flash OS etc to encrypted emmc but also setup encrypted nvme ssd?

Related topics