Secure Boot (Android Lollipop)


I got a github link from Nvidia ( to compile/flash Android Lollipop binaries on to Jetson-TK1 board. This uses Android boot instead of u-boot. And it works pretty well.

Now I am trying to implement “secure boot” with Android-L binaries. Nvidia release binaries ( has the support for “secure boot” for “Ubuntu” OS. This means signing u-boot.bin, fastboot.bin and config file. Internally the tools ‘mkpkc’ , ‘nvsecuretool’ are used to achieve this.

But Android uses boot.img instead of u-boot.bin. I did not get any leads on how to sign boot.img with the tools mentioned above.

Any inputs will be of great help!

Anyone please respond!!