Hi, I would like to use secure boot features on Jetson Nano. If I use odmfuse with PKC only it runs without error: sudo ./odmfuse.sh -i 0x21 -c PKC -k ../nano_priv.pem *** Calculating HASH from keyfile /home/balazad/nano/nano_priv.pem ... done PKC HASH: 0x791c44563ad7ef6de799843b2a7166d97b13411edb…

Hi, [image] broothy: So from the point of view of an end user both DK and SBK are completely useless on Jetson Nano, we should ignore them, they have absolutely no function? The hardware design is there and fixed. New design can be applied to next TX2 or Xavier, but cannot be applied backwar…

Hi, DK+SBK=SSK is the strict rule. Since SBK is not supported on Jetson Nano, DK is not supported also.

Dear @DaneLLL , The following document explicitly mentions DK as a Jetson Nano supported fuse (while KEK0, KEK1, KEK2 and KEK256 are unsupported): L4T Secureboot : DK Applies to: Jetson Nano and Jetson TX1 A 32-bit number stored in a file in big-endian HEX format. For example: 0xddccbbaa Are …

Hi, Please check https://developer.nvidia.com/jetson-nano-fuse-specification-application-note DK has to be paired with SBK. On TX1/Nano, we suggest users use PKC only and the steps are described in document. If you would like to enable SBK on Nano, I need to check this with internal team.

Dear @DaneLLL , Thank you for your response. It is possible that I have misconceptions… In my understanding: -PKC: If PKC is set the device will refuse booting if the image is not signed with the corresponding key (protects against unwanted modifications) -DK + SBK: SSK is generated from them -SB…

Hi, For having SBK, we would suggest use TX2 or Xavier.

Hi, Please also refer to [image] Secureboot on Nano Jetson Nano Hi TakenoriSato, A few notes, . For DK, what’s the main purpose of using it in your product? Keep in mind, once ODM Production Bit is burned, all the fuses are not readable, including DK. Reserved ODM fuse …

Dear @DaneLLL , Jetson Nano Fuse Sepcification explicitly mentions both DK and SBK on Nano and TX1. You mean the document is incorrect? As far as I know TX2 and Xavier don’t even contain DK, they have KEK0, KEK1, KEK2, KEK256 instead. Only TX1 and Nano have DK, and I haven’t found its exact purpose…

Hi, Probably I don’t give determined information about this. We have DK and SBK in hardware design and Nano , but we don’t support to enable it on Nano. We support to enable PKC on Nano. We have verified enabling PKC on Nano. If you need SBK, please use TX2 or Xavier.

Dear @DaneLLL , I see. So from the point of view of an end user both DK and SBK are completely useless on Jetson Nano, we should ignore them, they have absolutely no function? Kind regards, Adam

Dear @DaneLLL Thank you for the clear answer! Kind regards, Adam

Odmfuse.sh fails when I use DK

Robotics & Edge Computing Jetson Systems Jetson Nano

DaneLLL April 14, 2020, 3:58am 8

Hi,
Please also refer to

On Jeetson Nano, if you need to have keys for your own purpose, please utilize reserved ODM fuse.

A reference of burning ODM fuse:

Topic		Replies	Views
Secureboot on Nano Jetson Nano	35	5738	April 3, 2020
How to recover brick Jetson nano after secure boot enable? Jetson Nano boot , security	27	1536	April 8, 2024
Still fail to enable secureboot Jetson Nano security , nvbugs	25	4066	April 9, 2021
Flashing with SBK keyfile failed @ unburn fuse of Orin Nano @ Jetpack 6.2 Jetson Nano boot , security	11	168	February 4, 2026
Jetson Nano secureboot Jetson Nano security	11	1838	February 22, 2021
Jetson Nano Developer Kit issues after fuse burning with SB/PKC; fuse_bypass options and samples needed Jetson Nano security	14	1874	February 24, 2021
Jetson nano secure boot enabling Jetson Nano security	14	266	December 8, 2025
Odmfuse.sh always burns pkc_disable Jetson Nano security	5	1061	June 17, 2020
Odmefuse.sh not burning SBK key Jetson TX2 security , nvbugs	40	1958	April 16, 2024
How to prevent efuse/no efuse flash and update problem Jetson Nano security	21	2656	April 1, 2021

Odmfuse.sh fails when I use DK

Related topics