Hi,
Finally found the way to sign the device tree and kernel Image from nvidia document
Enter these commands to generate signed, encrypted files:
•For boot.img:
sudo ./flash.sh --no-flash -k kernel jetson-xavier mmcblk0p1
•For the .dtb file:
sudo ./flash.sh --no-flash -k kernel-dtb jetson-xavier mmcblk0p1
The signed files will be generated in bootloader/tegra194-p2888-0001-p2822-0000.dtb.sig and kenerl/Image.sig