Hi, According to documentation: openssl - OP-TEE: Open Portable Trusted Execution Environment — NVIDIA Jetson... The sample EKB layout is intended to help you design a sufficiently secure mechanism to protect private data in the EKB. It stores user-defined keys in the EKB. As the figu…

hello hen77, it should be documentation erroneous, please try gen_ekb.py with the -input option to load FV from EKS image, for instance, parser.add_argument('-input', nargs=1, required=False, help="input eks image")

Hi, Please have a look to this thread: Please put back the '-fv' option in gen_ekb.py - #3 by chad.mcquillen Behaviour was changed.

Hi, I saw that post, it says about EKBV2 requiring random FV. Problem is that when you need to reuse FV, you need to avoid regenerating it. That is what -reuse_fv option should do and what is described [at least] in L4T 36.4.4 documentation (see links in first post). But in 36.4.4 source package, g…

Hello JerryChang, I’ve read the post you linked and digged into gen_ekb.py, but I didn’t found anything that could point to a reading of FV from (existing?) EKS image, so I made a test. After generating required keys, I called gen_ekb.py multiple times, and this is the contents of the generated eks…

hello hen77, please refer to EKB Header , FV is a randomly generated value now.

Hello JerryChang, [image] So, does this excerpt of the official documentation still holds true then? Thanks

hello hen77, let me track this internally, I’ll update this thread after confirmation.

Hello JerryChang, Thanks for the -input ;-) Please note: there is no “-input” option on the L4T 36.4.4 version of gen_ekb.py. I found it on L4T 36.5.0 version, though. Handling of that option is the only change between the two revisions, so I think it should be safe to use the newer script also on…

No "-reuse_fv" option in L4T 36.4.4 gen_ekb.py

Robotics & Edge Computing Jetson Systems Jetson Orin NX

JerryChang May 6, 2026, 2:06am 6

hello hen77,

please see-also Topic 342201, it reads FV from the input EKS image at offset 16.

Topic		Replies	Views
Please put back the '-fv' option in gen_ekb.py Jetson Orin NX security	4	203	March 31, 2025
Modifying fv for ekb generation Jetson TX2 boot , security	1	423	November 9, 2023
Initialize OP-TEE with modified fixed vector Jetson AGX Orin security	5	1241	August 24, 2023
EKB Generation in L4T 32.4.4 Jetson AGX Xavier security	7	1308	January 31, 2021
How can multiple keys be added to an EKB Jetson TX2 security	9	639	February 23, 2024
Having issues with encryption Jetson AGX Xavier security , ai	11	1096	December 25, 2023
The structure of this file eks.img is inconsistent with the description Jetson TX2 boot , security	6	806	June 9, 2023
Disk Encryption - Custom EKB Jetson Xavier NX boot , reflash , security	5	1067	March 16, 2023
Jetpack 5.1.1 disk encryption with user-generated ekb.key Jetson Xavier NX boot , security	7	1118	July 26, 2023
L4T 35.5.0 EKB CMAC Failure on fused device Jetson Orin Nano security	12	610	May 7, 2024

No "-reuse_fv" option in L4T 36.4.4 gen_ekb.py

Related topics