I got a github link from Nvidia (https://github.com/NVIDIA/android-manifest) to compile/flash Android Lollipop binaries on to Jetson-TK1 board. This uses Android boot instead of u-boot. And it works pretty well.
Now I am trying to implement “secure boot” with Android-L binaries. Nvidia release binaries (https://developer.nvidia.com/linux-tegra-r214) has the support for “secure boot” for “Ubuntu” OS. This means signing u-boot.bin, fastboot.bin and config file. Internally the tools ‘mkpkc’ , ‘nvsecuretool’ are used to achieve this.
But Android uses boot.img instead of u-boot.bin. I did not get any leads on how to sign boot.img with the tools mentioned above.
Any inputs will be of great help!