Hi,
I would like to use secureboot on Jetson Nano L4T 32.3.1.
I generated the RSA key pair with
$ openssl genrsa -out nano_priv.pem 2048
Then I tried to burn the fuses:
sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem
When I restarted the device I checked the fuses with sudo ./tegrafuse.sh (on the device):
arm_jtag_disable : 0x00000000
odm_lock : 0x00000000
odm_production_mode : 0x00000000
pkc_disable : 0x00000001
sec_boot_dev_cfg : 0x00000000
sec_boot_dev_sel : 0x00000000
As I see PKC is still disabled. What did I do wrong?
If I skip the device restart and try to flash the device right after burning the fuses I get the following error message:
sudo ./flash.sh -x 0x21 -y PKC -u ../nano_priv.pem jetson-nano-qspi-sd mmcblk0p1
#########
# L4T BSP Information:# R32 , REVISION: 3.1
#########
Error: probing the target board failed.
Make sure the target board is connected through
USB port and is in recovery mode.
If I reset the device in recovery mode between burning the fuses and flashing the device I get the following error message:
#########
# L4T BSP Information:# R32 , REVISION: 3.1
#########
# Target Board Information:
# Name: jetson-nano-qspi-sd, Board Family: t210ref, SoC: Tegra 210,
# OpMode: production, Boot Authentication: ,
#########
Error: The RSA key file is provided for non-PKC protected target board.
Could you help please what should I try?
Kind regards,
Adam