Massflash with disk encryption on Xavier NX eMMC

Hi @JerryChang,
We followed your last approach but no help. Let me share details work through:

#1. custom eks.img for our custom ekb.key
cd ~/nvidia/4.6.1/trusty/app/nvidia-sample/hwkey-agent/CA_sample/tool/gen_ekb                             
python3 gen_ekb.py -kek2_key $XKEYS/kek2_unfused.key \
  -fv $XKEYS/fv_ekb.key \
  -in_sym_key $XKEYS/usr_ekb.key \
  -in_sym_key2 $XKEYS/ekb.key \
  -out eks.img

cp eks.img ~/nvidia/4.6.1/Linux_for_Tegra/bootloader/
cd ~/nvidia/4.6.1/Linux_for_Tegra

#2. Put one device into RCM mode

#3. Populate internal flash image (Successful)
sudo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh --no-flash \                                   
  -p "-i $XKEYS/ekb.key" \
  jetson-xavier-nx-devkit-emmc internal

#4. Put the device RCM mode again

#5. Populate external flash image
udo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh --no-flash \                                   
  -p "-i $XKEYS/ekb.key" \
  --external-device nvme0n1p1 \
  -S 220GiB \
  -c ./tools/kernel_flash/flash_l4t_nvme_rootfs_enc.xml \
  --external-only \
  -- massflash 2 \
  --append \
  jetson-xavier-nx-devkit-emmc external

#6. Put two devices into RCM mode

#7. Massflash 2 devices concurrently
sudo ./tools/kernel_flash/l4t_initrd_flash.sh --showlogs --flash-only -p "-i $XKEYS/ekb.key" --massflash 2

There are two logs file generated.

  1. initrdlog/flash_1-1_0_20220722-115932.log (Looks flashing successful but device didn’t boot)
  2. initrdlog/flash_1-4_1_20220722-115932.log (Flashing failed)
➜  cat initrdlog/flash_1-1_0_20220722-115932.log
**********************************************
*                                            *
*  Step 1: Build the flashing environment    *
*                                            *
**********************************************
Create flash environment 0
~/nvidia/4.6.1/Linux_for_Tegra/bootloader ~/nvidia/4.6.1/Linux_for_Tegra
~/nvidia/4.6.1/Linux_for_Tegra
Finish creating flash environment 0.
****************************************************
*                                                  *
*  Step 2: Boot the device with flash initrd image *
*                                                  *
****************************************************
~/nvidia/4.6.1/Linux_for_Tegra/temp_initrdflash/bootloader0 ~/nvidia/4.6.1/Linux_for_Tegra
./tegraflash.py --bl nvtboot_recovery_cpu_t194_sigheader.bin.encrypt --bct br_bct_BR.bct --securedev  --applet rcm_2_encrypt.rcm --applet_softfuse rcm_1_encrypt.rcm --cmd "rcmboot"  --cfg secureflash.xml --chip 0x19 --mb1_bct mb1_bct_MB1_sigheader.bct.encrypt --mem_bct mem_rcm_sigheader.bct.encrypt --mb1_cold_boot_bct mb1_cold_boot_bct_MB1_sigheader.bct.encrypt --mem_bct_cold_boot mem_coldboot_sigheader.bct.encrypt  --bins "mb2_bootloader nvtboot_recovery_t194_sigheader.bin.encrypt; mts_preboot preboot_c10_prod_cr_sigheader.bin.encrypt; mts_mce mce_c10_prod_cr_sigheader.bin.encrypt; mts_proper mts_c10_prod_cr_sigheader.bin.encrypt; bpmp_fw bpmp_t194_sigheader.bin.encrypt; bpmp_fw_dtb tegra194-a02-bpmp-p3668-a00_sigheader.dtb.encrypt; spe_fw spe_t194_sigheader.bin.encrypt; tlk tos-trusty_t194_sigheader.img.encrypt; eks eks_sigheader.img.encrypt; kernel boot0.img; kernel_dtb kernel_tegra194-p3668-all-p3509-0000.dtb; bootloader_dtb tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt"    --instance 1-1
Welcome to Tegra Flash
version 1.0.0
Type ? or help for help and q or quit to exit
Use ! to execute system commands
 

 Entering RCM boot

[   0.0000 ] rcm boot with presigned binaries
[   0.0000 ] Boot Rom communication
[   0.0023 ] tegrarcm_v2 --instance 1-1 --chip 0x19 0 --rcm rcm_1_encrypt.rcm --rcm rcm_2_encrypt.rcm
[   0.0033 ] BR_CID: 0x880219116401d240240000000e008280
[   0.0145 ] Boot Rom communication completed
[   1.0410 ] 
[   2.0469 ] tegrarcm_v2 --instance 1-1 --isapplet
[   2.0494 ] Applet version 01.00.0000
[   2.0750 ] 
[   2.0751 ] Sending BCTs
[   2.0774 ] tegrarcm_v2 --instance 1-1 --download bct_bootrom br_bct_BR.bct --download bct_mb1 mb1_bct_MB1_sigheader.bct.encrypt --download bct_mem mem_rcm_sigheader.bct.encrypt
[   2.0783 ] Applet version 01.00.0000
[   2.0988 ] Sending bct_bootrom
[   2.0989 ] [................................................] 100%
[   2.1002 ] Sending bct_mb1
[   2.1054 ] [................................................] 100%
[   2.1091 ] Sending bct_mem
[   2.1597 ] [................................................] 100%
[   2.2344 ] 
[   2.2345 ] Generating blob
[   2.2403 ] tegrahost_v2 --chip 0x19 --generateblob blob.xml blob.bin
[   2.2413 ] number of images in blob are 13
[   2.2417 ] blobsize is 55868616
[   2.2418 ] Added binary blob_nvtboot_recovery_cpu_t194_sigheader.bin.encrypt of size 264064
[   2.2667 ] Added binary blob_nvtboot_recovery_t194_sigheader.bin.encrypt of size 181152
[   2.2671 ] Added binary blob_preboot_c10_prod_cr_sigheader.bin.encrypt of size 24016
[   2.2675 ] Added binary blob_mce_c10_prod_cr_sigheader.bin.encrypt of size 143200
[   2.2678 ] Added binary blob_mts_c10_prod_cr_sigheader.bin.encrypt of size 3430416
[   2.2691 ] Added binary blob_bpmp_t194_sigheader.bin.encrypt of size 856352
[   2.2703 ] Added binary blob_tegra194-a02-bpmp-p3668-a00_sigheader.dtb.encrypt of size 391408
[   2.2707 ] Added binary blob_spe_t194_sigheader.bin.encrypt of size 94960
[   2.2710 ] Added binary blob_tos-trusty_t194_sigheader.img.encrypt of size 410560
[   2.2713 ] Added binary blob_eks_sigheader.img.encrypt of size 5136
[   2.2716 ] Added binary blob_boot0.img of size 49653760
[   2.3040 ] Added binary blob_kernel_tegra194-p3668-all-p3509-0000.dtb of size 204640
[   2.3158 ] Added binary blob_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt of size 208736
[   2.3544 ] 
[   2.3544 ] Sending bootloader and pre-requisite binaries
[   2.3569 ] tegrarcm_v2 --instance 1-1 --download blob blob.bin
[   2.3578 ] Applet version 01.00.0000
[   2.3781 ] Sending blob
[   2.3781 ] [................................................] 100%
[  10.6334 ] 
[  10.6377 ] tegrarcm_v2 --instance 1-1 --boot rcm
[  10.6401 ] Applet version 01.00.0000
[  10.6664 ] 
[  10.6664 ] RCM-boot started

~/nvidia/4.6.1/Linux_for_Tegra
***************************************
*                                     *
*  Step 3: Start the flashing process *
*                                     *
***************************************
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for device to expose ssh ......RTNETLINK answers: File exists
RTNETLINK answers: File exists
...RTNETLINK answers: File exists
RTNETLINK answers: File exists
Run command: if [ -f /qspi/l4t_flash_from_kernel.sh ]; then USER=root /qspi/l4t_flash_from_kernel.sh --no-reboot --qspi-only ; fi on root@fe80::1%enp0s20f0u1
4194304
[ 0]: l4t_flash_from_kernel: Starting to create gpt for external device
Active index file is /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/flash.idx
Number of lines is 15
max_index=14
writing item=1, 9:0:primary_gpt, 512, 19968, gpt_primary_9_0.bin, 16896, fixed-<reserved>-0, eddae1f16db1485192a1403364525e8c90a68968
Writing primary_gpt partition with gpt_primary_9_0.bin
Offset is not aligned to K Bytes, no optimization is applied
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/gpt_primary_9_0.bin of=/dev/sdd bs=1 skip=0  seek=512 count=16896
16896+0 records in
16896+0 records out
16896 bytes (17 kB, 16 KiB) copied, 0,0723086 s, 234 kB/s
Writing primary_gpt partition done
Writing secondary_gpt partition with gpt_secondary_9_0.bin
Offset is not aligned to K Bytes, no optimization is applied
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/gpt_secondary_9_0.bin of=/dev/sdd bs=1 skip=0  seek=250059333120 count=16896
16896+0 records in
16896+0 records out
16896 bytes (17 kB, 16 KiB) copied, 0,0359728 s, 470 kB/s
Writing secondary_gpt partition done
[ 2]: l4t_flash_from_kernel: Successfully create gpt for external device
Run command: partprobe on root@fe80::1%enp0s20f0u1
Warning: Error fsyncing/closing /dev/mmcblk0rpmb: Input/output error
Warning: Error fsyncing/closing /dev/mmcblk0rpmb: Input/output error
[ 3]: l4t_flash_from_kernel: Starting to flash to external device
Active index file is /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/flash.idx
Number of lines is 15
max_index=14
writing item=0, 9:0:master_boot_record, 0, 512, mbr_9_0.bin, 512, fixed-<reserved>-0, 694898d1c345bdb31b377790ed7fc0b0db184bf7
writing item=1, 9:0:primary_gpt, 512, 19968, gpt_primary_9_0.bin, 16896, fixed-<reserved>-0, eddae1f16db1485192a1403364525e8c90a68968
writing item=2, 9:0:APP, 20480, 419430400, , , fixed-<reserved>-1, 
Formatting APP partition /dev/sdd1 ...
mke2fs 1.44.1 (24-Mar-2018)
Creating filesystem with 409600 1k blocks and 102400 inodes
Filesystem UUID: 181a0f34-def4-4f8a-b30f-4b13911dc6b3
Superblock backups stored on blocks: 
        8193, 24577, 40961, 57345, 73729, 204801, 221185, 401409

Allocating group tables: done                            
Writing inode tables: done                            
Creating journal (8192 blocks): done
Writing superblocks and filesystem accounting information: done 

Formatting APP parition done
Formatting APP partition /dev/sdd1 ...
tar --xattrs -xpf /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/system_boot.img  --checkpoint=10000 --warning=no-timestamp --numeric-owner  -C  /tmp/ci-7ENgubQ8jH
writing item=3, 9:0:APP_ENC, 419450880, 235803770880, system_root_encrypted.img_ext, 6601117856, fixed-<reserved>-2, 
Writing APP_ENC partition with system_root_encrypted.img_ext
Get size of partition through connection.
Run command: if ! blkdiscard /dev/nvme0n1p2; then
                echo Cannot erase before writing sparse image. Write zero to partition /dev/nvme0n1p2;
                dd if=/dev/zero of=/dev/nvme0n1p2 status=progress oflag=direct; fi on root@fe80::1%enp0s20f0u1
nvsimg2img /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/system_root_encrypted.img_ext /dev/sdd2
Writing APP_ENC partition done
writing item=4, 9:0:recovery, 236223221760, 66060288, recovery_sigheader.img.encrypt, 49483776, fixed-<reserved>-3, a59c80ac0ab03dcd155ff96b53828901b39d5ee9
Writing recovery partition with recovery_sigheader.img.encrypt
Get size of partition through connection.
49483776 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/recovery_sigheader.img.encrypt to /dev/sdd: 1KB block=48324 remainder=0
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/recovery_sigheader.img.encrypt of=/dev/sdd bs=1K skip=0  seek=230686740 count=48324
48324+0 records in
48324+0 records out
49483776 bytes (49 MB, 47 MiB) copied, 4,32001 s, 11,5 MB/s
Writing recovery partition done
writing item=5, 9:0:recovery-dtb, 236289282048, 524288, tegra194-p3668-all-p3509-0000.dtb_sigheader.rec.encrypt, 208736, fixed-<reserved>-4, a2725542c394a7f2f3bfcf195c761e620b2597cd
Writing recovery-dtb partition with tegra194-p3668-all-p3509-0000.dtb_sigheader.rec.encrypt
Get size of partition through connection.
208736 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/tegra194-p3668-all-p3509-0000.dtb_sigheader.rec.encrypt to /dev/sdd: 1KB block=203 remainder=864
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/tegra194-p3668-all-p3509-0000.dtb_sigheader.rec.encrypt of=/dev/sdd bs=1K skip=0  seek=230751252 count=203
203+0 records in
203+0 records out
207872 bytes (208 kB, 203 KiB) copied, 0,114987 s, 1,8 MB/s
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/tegra194-p3668-all-p3509-0000.dtb_sigheader.rec.encrypt of=/dev/sdd bs=1 skip=207872  seek=236289489920 count=864
864+0 records in
864+0 records out
864 bytes copied, 0,00204506 s, 422 kB/s
Writing recovery-dtb partition done
writing item=6, 9:0:kernel-bootctrl, 236289806336, 65536, kernel_bootctrl.bin, 20, fixed-<reserved>-5, 6768033e216468247bd031a0a2d9876d79818f8f
Writing kernel-bootctrl partition with kernel_bootctrl.bin
Get size of partition through connection.
20 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_bootctrl.bin to /dev/sdd: 1KB block=0 remainder=20
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_bootctrl.bin of=/dev/sdd bs=1 skip=0  seek=236289806336 count=20
20+0 records in
20+0 records out
20 bytes copied, 0,000392602 s, 50,9 kB/s
Writing kernel-bootctrl partition done
writing item=7, 9:0:kernel-bootctrl_b, 236289871872, 65536, kernel_bootctrl.bin, 20, fixed-<reserved>-6, 6768033e216468247bd031a0a2d9876d79818f8f
Writing kernel-bootctrl_b partition with kernel_bootctrl.bin
Get size of partition through connection.
20 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_bootctrl.bin to /dev/sdd: 1KB block=0 remainder=20
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_bootctrl.bin of=/dev/sdd bs=1 skip=0  seek=236289871872 count=20
20+0 records in
20+0 records out
20 bytes copied, 0,000364291 s, 54,9 kB/s
Writing kernel-bootctrl_b partition done
writing item=8, 9:0:kernel, 236289937408, 83886080, boot_sigheader.img.encrypt, 45850624, fixed-<reserved>-7, fb2192fe1824169974211f2b90b53fcf46f1c8dd
Writing kernel partition with boot_sigheader.img.encrypt
Get size of partition through connection.
45850624 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/boot_sigheader.img.encrypt to /dev/sdd: 1KB block=44776 remainder=0
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/boot_sigheader.img.encrypt of=/dev/sdd bs=1K skip=0  seek=230751892 count=44776
44776+0 records in
44776+0 records out
45850624 bytes (46 MB, 44 MiB) copied, 4,75086 s, 9,7 MB/s
Writing kernel partition done
writing item=9, 9:0:kernel_b, 236373823488, 83886080, boot_sigheader.img.encrypt, 45850624, fixed-<reserved>-8, fb2192fe1824169974211f2b90b53fcf46f1c8dd
Writing kernel_b partition with boot_sigheader.img.encrypt
Get size of partition through connection.
45850624 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/boot_sigheader.img.encrypt to /dev/sdd: 1KB block=44776 remainder=0
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/boot_sigheader.img.encrypt of=/dev/sdd bs=1K skip=0  seek=230833812 count=44776
44776+0 records in
44776+0 records out
45850624 bytes (46 MB, 44 MiB) copied, 4,35238 s, 10,5 MB/s
Writing kernel_b partition done
writing item=10, 9:0:kernel-dtb, 236457709568, 524288, kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt, 208736, fixed-<reserved>-9, a2725542c394a7f2f3bfcf195c761e620b2597cd
Writing kernel-dtb partition with kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt
Get size of partition through connection.
208736 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt to /dev/sdd: 1KB block=203 remainder=864
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt of=/dev/sdd bs=1K skip=0  seek=230915732 count=203
203+0 records in
203+0 records out
207872 bytes (208 kB, 203 KiB) copied, 0,0607029 s, 3,4 MB/s
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt of=/dev/sdd bs=1 skip=207872  seek=236457917440 count=864
864+0 records in
864+0 records out
864 bytes copied, 0,0257983 s, 33,5 kB/s
Writing kernel-dtb partition done
writing item=11, 9:0:kernel-dtb_b, 236458233856, 524288, kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt, 208736, fixed-<reserved>-10, a2725542c394a7f2f3bfcf195c761e620b2597cd
Writing kernel-dtb_b partition with kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt
Get size of partition through connection.
208736 bytes from /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt to /dev/sdd: 1KB block=203 remainder=864
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt of=/dev/sdd bs=1K skip=0  seek=230916244 count=203
203+0 records in
203+0 records out
207872 bytes (208 kB, 203 KiB) copied, 0,0179895 s, 11,6 MB/s
dd if=/home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/kernel_tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt of=/dev/sdd bs=1 skip=207872  seek=236458441728 count=864
864+0 records in
864+0 records out
864 bytes copied, 0,00186345 s, 464 kB/s
Writing kernel-dtb_b partition done
writing item=12, 9:0:RECROOTFS, 236458758144, 314572800, , , fixed-<reserved>-11, 
[ 254]: l4t_flash_from_kernel: Warning: skip writing RECROOTFS partition as no image is specified
writing item=13, 9:0:UDA, 236773330944, 13286002176, system_uda_encrypted.img_ext, 11514280, expand-<reserved>-12, bb623e2b53d976ca22f4ac75ac1cfe41796fda1e
Writing UDA partition with system_uda_encrypted.img_ext
Get size of partition through connection.
Run command: if ! blkdiscard /dev/nvme0n1p12; then
                echo Cannot erase before writing sparse image. Write zero to partition /dev/nvme0n1p12;
                dd if=/dev/zero of=/dev/nvme0n1p12 status=progress oflag=direct; fi on root@fe80::1%enp0s20f0u1
nvsimg2img /home/akter/nvidia/4.6.1/Linux_for_Tegra/tools/kernel_flash/images/external/system_uda_encrypted.img_ext /dev/sdd12
Writing UDA partition done
writing item=14, 9:0:secondary_gpt, 250059333120, 16896, gpt_secondary_9_0.bin, 16896, fixed-<reserved>-0, 692c35fe0ac87cbd5c38efabff759def8ed9333e
[ 255]: l4t_flash_from_kernel: Successfully flash the external device
[ 255]: l4t_flash_from_kernel: Flashing success

Reboot target
Run command: sync; { sleep 1; reboot; } >/dev/null & on root@fe80::1%enp0s20f0u1
Success
Cleaning up...
cat initrdlog/flash_1-4_1_20220722-115932.log 
**********************************************
*                                            *
*  Step 1: Build the flashing environment    *
*                                            *
**********************************************
Create flash environment 1
~/nvidia/4.6.1/Linux_for_Tegra/bootloader ~/nvidia/4.6.1/Linux_for_Tegra
~/nvidia/4.6.1/Linux_for_Tegra
Finish creating flash environment 1.
****************************************************
*                                                  *
*  Step 2: Boot the device with flash initrd image *
*                                                  *
****************************************************
~/nvidia/4.6.1/Linux_for_Tegra/temp_initrdflash/bootloader1 ~/nvidia/4.6.1/Linux_for_Tegra
./tegraflash.py --bl nvtboot_recovery_cpu_t194_sigheader.bin.encrypt --bct br_bct_BR.bct --securedev  --applet rcm_2_encrypt.rcm --applet_softfuse rcm_1_encrypt.rcm --cmd "rcmboot"  --cfg secureflash.xml --chip 0x19 --mb1_bct mb1_bct_MB1_sigheader.bct.encrypt --mem_bct mem_rcm_sigheader.bct.encrypt --mb1_cold_boot_bct mb1_cold_boot_bct_MB1_sigheader.bct.encrypt --mem_bct_cold_boot mem_coldboot_sigheader.bct.encrypt  --bins "mb2_bootloader nvtboot_recovery_t194_sigheader.bin.encrypt; mts_preboot preboot_c10_prod_cr_sigheader.bin.encrypt; mts_mce mce_c10_prod_cr_sigheader.bin.encrypt; mts_proper mts_c10_prod_cr_sigheader.bin.encrypt; bpmp_fw bpmp_t194_sigheader.bin.encrypt; bpmp_fw_dtb tegra194-a02-bpmp-p3668-a00_sigheader.dtb.encrypt; spe_fw spe_t194_sigheader.bin.encrypt; tlk tos-trusty_t194_sigheader.img.encrypt; eks eks_sigheader.img.encrypt; kernel ; kernel_dtb kernel_tegra194-p3668-all-p3509-0000.dtb; bootloader_dtb tegra194-p3668-all-p3509-0000_sigheader.dtb.encrypt"    --instance 1-4
Welcome to Tegra Flash
version 1.0.0
Type ? or help for help and q or quit to exit
Use ! to execute system commands
 

 Entering RCM boot

[   0.0000 ] rcm boot with presigned binaries
[   0.0000 ] Boot Rom communication
[   0.0024 ] tegrarcm_v2 --instance 1-4 --chip 0x19 0 --rcm rcm_1_encrypt.rcm --rcm rcm_2_encrypt.rcm
[   0.0032 ] BR_CID: 0x880219116404c0831800000009038240
[   0.0151 ] Boot Rom communication completed
[   1.0414 ] 
[   2.0469 ] tegrarcm_v2 --instance 1-4 --isapplet
[   2.0494 ] Applet version 01.00.0000
[   2.0757 ] 
[   2.0757 ] Sending BCTs
[   2.0778 ] tegrarcm_v2 --instance 1-4 --download bct_bootrom br_bct_BR.bct --download bct_mb1 mb1_bct_MB1_sigheader.bct.encrypt --download bct_mem mem_rcm_sigheader.bct.encrypt
[   2.0786 ] Applet version 01.00.0000
[   2.0997 ] Sending bct_bootrom
[   2.0998 ] [................................................] 100%
[   2.1009 ] Sending bct_mb1
[   2.1059 ] [................................................] 100%
[   2.1095 ] Sending bct_mem
[   2.1601 ] [................................................] 100%
[   2.2344 ] 
[   2.2345 ] Generating blob
Error: invalid format kernel
Cleaning up...