hello jsabzk6o,
how you update the TOS image? did you perform image flashing for updating A_secure-os partition?
here’re verification steps we’ve done.
please refer to below…
Build environment setup
$ export CROSS_COMPILE_AARCH64_PATH=$TOP/Toolchain_gcc_9.3/
$ export CROSS_COMPILE_AARCH64=$TOP/Toolchain_gcc_9.3/bin/aarch64-buildroot-linux-gnu-
$ export UEFI_STMM_PATH=$TOP/JetPack-5.1.2_AGX-Orin/Linux_for_Tegra/bootloader/standalonemm_optee_t234.bin
Steps to build trusted OS image based on ATF and OP-TEE
$ tar xpvf nvidia-jetson-optee-source.tbz2
$ ./optee_src_build.sh -p t234
$ dtc -I dts -O dtb -o ./optee/tegra234-optee.dtb ./optee/tegra234-optee.dts
$ mkdir atf_build
$ tar -I lbzip2 -C atf_build -xpf atf_src.tbz2
$ cd atf_build/arm-trusted-firmware
$ make BUILD_BASE=./build CROSS_COMPILE="${CROSS_COMPILE_AARCH64}" DEBUG=0 LOG_LEVEL=20 PLAT=tegra SPD=opteed TARGET_SOC=t234 V=0
$ cd ../../
$ ./gen_tos_part_img.py --monitor ./atf_build/arm-trusted-firmware/build/tegra/t234/release/bl31.bin --os ./optee/build/t234/core/tee-raw.bin --dtb ./optee/tegra234-optee.dtb --tostype optee ./tos.img
Copy the generated TOS image to updating the secure-os partition
$ cp tos.img $OUT/JetPack/JetPack-5.1.2_AGX-Orin/Linux_for_Tegra/bootloader/tos-optee_t234.img
$ sudo ./flash.sh -k A_secure-os jetson-agx-orin-devkit mmcblk0p1