Orin NX 16GB Disk Encrpytion On Custom Board

[kemalcelikel]

Hi,

I have a custom board that I could setup using the SDK manager and provided BSP by the board manufacturer. I was able to install and setup a JP 5.1.1 ubuntu 20.04 without any problems. Now I want to add disk encryption to the flashing process but I couldn’t make it work.

I have followed the docs’ security section to generate a eks.img through OP-TEE source package using the ekb.key “f0e0d0c0b0a001020304050607080900”. eks.img was actually named eks_t234.img but the docs only said eks.img so I created a copy to have them both under /Linux_For_Tegra/bootloader just to make sure.

I have also seen this thread that suggests the disk encryption is not available yet. I also would like a confirmation that it is indeed possible and we’re note barking up the wrong tree here.

The command I tried for flashing;

sudo ROOTFS_ENC=1 ./tools/kernel_flash/l4t_initrd_flash.sh --external-device nvme0n1p1 -c tools/kernel_flash/flash_l4t_nvme_rootfs_enc.xml -p "-i ekb.key" -p "-c bootloader/t186ref/cfg/flash_t234_qspi.xml" --showlogs --network usb0 jetson-orin-nano-devkit internal

To reiterate I can set the device up without using the encryption bits in the command above.

I am attaching the full log for the command: encrypted-flash.log (169.7 KB)

Any help at this point would be much appreciated.

Thanks,
Kemal

[JerryChang]

hello kemalcelikel,

Jetson Orin NX only support SecureBoot.
you may refer to r35.3.1 developer guide, Security — Jetson Linux Developer Guide documentation

[kemalcelikel]

Hi Jerry,

Thanks for your comment. So just to confirm, the disk encryption on OrinNX 16GB module is not possible as of yet. Is that correct?

Is it on the road map or is there a hardware limitation that makes it impossible?

I am asking this to decide whether to completely rule out encryption or not

Thanks,
Kemal

[JerryChang]

here show the disk encryption support as for now… for r35.3.1 release version

Applies to the Jetson AGX Xavier series, the Jetson Xavier NX series, and the Jetson AGX Orin.