Hi, I would like to use secureboot on Jetson Nano L4T 32.3.1. I generated the RSA key pair with $ openssl genrsa -out nano_priv.pem 2048 Then I tried to burn the fuses: sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem When I restarted the device I checked the fuses with sudo ./tegrafuse.sh…

Hi, So you execute the two commands on the second board: sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem -p In the first command, pkc_disable is programmed to 0x1 already. It cannot be reverted by the second command. And we only support t…

Hi, Without -p option, pkc_disable fuse is programmed to 0x1 and the module is in NS mode. Please check [image] What is the correct value of pkc_disable for PKC? Jetson Nano Hi, We have clarified it and here is the correct value: | 1| pkc_disable | PKC …

Dear @DaneLLL , I put the -p switch so my single command was (I did not deal with odm_reserved because it remains programmable after the production bit is set): sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem -p It ran without error, the output was: *** The fuse configuration is saved in boo…

Hi, The fuse bit is irreversible. The following is from README_secureboot.txt: Tegra devices contain multiple fuses that control different items for security and boot. Programming a fuse, such as changing a value of a fuse bit from 0 to 1, is non-reversible. Once a fuse bit is programmed by settin…

Dear @DaneLLL Yes, I know that it is irreversible, but could you tell me what was my mistake? If I try the same command on a different board the outcome will be the same. Before I ran the command odm_production_mode was 0x0 (the dev board was right out of the box). Then I ran the command (with th…

Hi, The command looks fine but I would need to confirm with teams. Please attach bootloader/odmfuse_pkc.xml for reference.

Dear @DaneLLL , Thank you for your answer, the content of bootloader/odmfuse_pkc.xml: <genericfuse MagicId="0x46555345" version="1.0.0"> <fuse name="JtagDisable" size="4" value="0x1" /> <fuse name="PublicKeyHash" size="32" value="0xd64e......." /> <fuse name="SecurityMode" size="4" value="0x1" /> </…

Hi, Would like to confirm the status. So you have two clean Nanos(not fused yet), One is fused with sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem The other is fused with sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem -p By executing sudo ./tegrafuse.sh, you can see pkc_disable =0x…

I had two clean Nanos (Dev kit A02 version). One the first I tried lots of odmfuse commands but did not set the production flag. On the second board my first command was (right out of the box) sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem then after a reboot my second command was: sudo ./…

It is pitty to hear lack of SB support for the rest of Jetson Nano boards! What is the difference between jetson-nano-emmc and the rest of the nano variants? Is the CPU not the same? → Same fuses, same functionalities?

Hi, Please check information in module data sheet: https://developer.nvidia.com/embedded/dlc/jetson-nano-system-module-datasheet

Jetson Nano secureboot

Robotics & Edge Computing Jetson Systems Jetson Nano

DaneLLL April 23, 2020, 12:13am 3

Hi,
Without -p option, pkc_disable fuse is programmed to 0x1 and the module is in NS mode. Please check

In production line, please program all fuses in single command.

Topic		Replies	Views
Odmfuse.sh always burns pkc_disable Jetson Nano security	5	1060	June 17, 2020
Still fail to enable secureboot Jetson Nano security , nvbugs	25	4065	April 9, 2021
Secure Boot confirmation Jetson Nano security , nvbugs	6	1083	June 17, 2020
Jetson Nano (4gb ) production kit issues after successfully fuse burning with PKC i am unable to flash the jetson with PKC key Jetson Nano security	1	494	October 27, 2022
Secureboot on Nano Jetson Nano	35	5737	April 3, 2020
How to prevent efuse/no efuse flash and update problem Jetson Nano security	21	2656	April 1, 2021
How to recover brick Jetson nano after secure boot enable? Jetson Nano boot , security	27	1533	April 8, 2024
Jetson nano secure boot enabling Jetson Nano security	14	258	December 8, 2025
Jetson Nano Developer Kit issues after fuse burning with SB/PKC; fuse_bypass options and samples needed Jetson Nano security	14	1874	February 24, 2021
Burn PKC Disable accidently problem Jetson Nano boot , security	2	912	July 19, 2021

Jetson Nano secureboot

Related topics