Massflash with a generic key and replace by unique key : OEM_K1 fuse to create eks image

Robotics & Edge Computing Jetson & Embedded Systems Jetson Orin NX
,
4

hello cleng,

>> Q1, Q2, Q4
yes, EKS is related with the disk encryption.
as you can see… there’re keys included in the EKS image.
it has two keys, one is the kernel encryption key (sym_t234.key), and another one is the LUKS key (sym2_t234.key) for disk encryption support.
for instance,

$ python3 gen_ekb.py -chip t234 -oem_k1_key oem_k1.key \
        -fv fv_ekb_t234 \
        -in_sym_key sym_t234.key \
        -in_sym_key2 sym2_t234.key \
        -in_auth_key auth_t234.key \
        -out eks_t234.img

>> Q3
the real problem should be… you must enable generic passphrase for the massflash scenario. otherwise, you’ll have unique ECID to enable disk encryption per device.

besides,
please see-also some similar discussion threads for reference,
such as… Topic 309032, Topic 284400, and Topic 271974.