hello baard.krohg,
please access to jetson-linux-r3541 to download the [Driver Package (BSP) Sources].
as you can see… there’s t234 example to generate EKS image, it’s using a test key as FV key by default.
for example, $public_sources/r35.4.1/Linux_for_Tegra/source/public/atf_and_optee/optee/samples/hwkey-agent/host/tool/gen_ekb/example.sh.
you may refer to KDF of Fuse Keys section to replace that key with generated fixed vector (FV), or the user-defined key by running the openssl tool from the command line.
then,
you may running gen_ekb.py to create a new EKS image, and flashing to the target.
besides,
as you mentioned, please update the keys within fv_for_ekb to match the ‘fv’ vector used for EKB binary.
please see-also Topic 246326. thanks