Jetson nano reflashing

Autonomous Machines Jetson & Embedded Systems Jetson Nano
1

I am using jetson nano in my product. If i flash it once, I don’t want anybody to remove it from my product and flash it again. Is these can be achieved using secure boot? or some other provision is there? Nano didn’t wired the JTAG out, so if I keep jtag enabled while doing secure boot, will there be some security threat?

3

hello Shine.d,

you may enable Secure Boot, Secure Boot prevents execution of unauthorized boot codes through chain of trust.

4

So, does that mean somebody else cannot flash it again, right? and can you suggest something about JTAG? will it be okay if i don’t disable it as it is not wired out on jetson nano?

5

hello Shine.d,

here’re replies for couple of your questions.

  1. assume you’ve Jetson Nano fused with a PKC key, only the owner who contain the same PKC key file able to re-flash the target.
  2. it depends-on your use-case. JTAG is enabled by default, it’s for debug purpose, and it needs HW rework on test point.
6

Thank you for the reply.

7

Let’s say, I flashed jetson nano with secure boot enabled. Only, I have the keys used in the fuse burning process. and somebody is trying to flash it without my knowledge. so where the issue will arise?

  1. Will they not be able to put jetson nano into force recovery mode?
  2. Flashing process will give error in sdkmanager/command line?
    And if they are not able to flash it, will it get booted as second time flashing is failed?
    Thank you.
8

hello Shine.d,

>> Q1
since it’s hardware key combination. they’ll able to put Nano into forced-recovery mode.

>> Q2
flashing process will abort since a correct key has not assigned.
IIRC, device should stay-on forced-recovery mode. user may press the hardware reset button to reboot the target.

10

I fused the PKC key on jetson nano and flashed it. It booted properly. Secure boot was enabled, I checked the public_key value. Everything went well. But to check if secure boot is working properly, I created new OS image using sdkmanager. When I am trying to flash it again without using PKC key, it is getting flashed. What can I do now to prohibit somebody else from reflashing my jetson nano?