Question about updating UEFI keys in QSPI

Robotics & Edge Computing Jetson & Embedded Systems Jetson Orin NX
,
1

Hi Nvidia,

We are in the process of migrating to new UEFI keys for image signing, with A/B slot switching enabled. When performing a capsule update to apply the new UEFI keys to QSPI, how can we target only the specific partition that contains the UEFI keys, rather than updating the entire QSPI?

We are using Orin NX with Jetson Linux 36.4.3, and both EKS and UEFI variable authentication are enabled. As a result, the QSPI contains a unique EKB per device, and we want to ensure it remains intact during the update process. We’re looking for an approach that allows selective updating of only the UEFI key-related partition.

Best regards,
Yanlin

4

hello yanlin.li,

it’s the partition A_cpu-bootloader and B_cpu-bootloader partition for UEFI.
you may see-also developer guide for the steps to update UEFI Secure Boot keys, Update the db/dbx Keys with a Capsule Update.