NOTICE: BL31: v2.6(release):cec9a2bc3
NOTICE: BL31: Built : 20:19:41, Feb 19 2024
I/TC: Physical secure memory base 0x27c040000 size 0x3fc0000
I/TC:
I/TC: Non-secure external DT found
I/TC: OP-TEE version: 3.22 (gcc version 9.3.0 (Buildroot 2020.08)) #2 Tue Feb 20 04:28:56 UTC 2024 aarch64
I/TC: WARNING: This OP-TEE configuration might be insecure!
I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.html
I/TC: Primary CPU initializing
I/TC: Primary CPU switching to normal world boot
Jetson UEFI firmware (version 5.0-35550185 built on 2024-02-20T04:21:22+00:00)
I/TC: Reserved shared memory is disabled
I/TC: Dynamic shared memory is enabled
I/TC: Normal World virtualization support is disabled
I/TC: Asynchronous notifications are disabled
E/TC:?? 00 get_rpc_alloc_res:645 RPC allocation failed. Non-secure world result: ret=0xffff0000 ret_origin=0
E/LD: init_elf:486 sys_open_ta_bin(bc50d971-d4c9-42c4-82cb-343fb7f37896)
E/TC:?? 00 ldelf_init_with_ldelf:131 ldelf failed with res: 0xffff000c
e[2Je[04De[=3he[2Je[09D
Jetson UEFI firmware (version 5.0-35550185 built on 2024-02-20T04:21:22+00:00)
ESC to enter Setup.
F11 to enter Boot Manager Menu.
Enter to continue boot.
** WARNING: Test Key is used. **
.
.
.
.
.
.
L4TLauncher: Attempting Direct Boot
EFI stub: Booting Linux Kernel...
EFI stub: Using DTB from configuration table
EFI stub: Loaded initrd from LINUX_EFI_INITRD_MEDIA_GUID device path
EFI stub: Exiting boot services and installing virtual address map...
my env:
jetson nano orin devkit nvme board & a pcie nvme ssd
you must given PKC and SBK keys to the command-line for image flashing since it’s a fused device.
besides, it’s EKB (Encrypted Binary Blob) stores two keys, one is the kernel encryption key (sym_key_file), and another one is the LUKS key (sym2_key_file) for disk encryption support. since you’ve using customize sym_t234.key, please refer to Enable UEFI Payload Encryption During the Flashing Process to specify --uefi-enc sym_t234.key to the command-line as well.
ha1 checksum matched for /mnt/internal/bct_backup.img
Writing /mnt/internal/bct_backup.img (32768 bytes) into /dev/mtd0:66715648
Copied 32768 bytes from /mnt/internal/bct_backup.img to address 0x03fa0000 in flash
[ 236]: l4t_flash_from_kernel: Warning: skip writing reserved_partition partition as no image is specified
Writing gpt_secondary_3_0.bin (parittion: secondary_gpt_backup) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/gpt_secondary_3_0.bin
Writing /mnt/internal/gpt_secondary_3_0.bin (16896 bytes) into /dev/mtd0:66846720
Copied 16896 bytes from /mnt/internal/gpt_secondary_3_0.bin to address 0x03fc0000 in flash
Writing qspi_bootblob_ver.txt (parittion: B_VER) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/qspi_bootblob_ver.txt
Writing /mnt/internal/qspi_bootblob_ver.txt (98 bytes) into /dev/mtd0:66912256
Copied 98 bytes from /mnt/internal/qspi_bootblob_ver.txt to address 0x03fd0000 in flash
Writing qspi_bootblob_ver.txt (parittion: A_VER) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/qspi_bootblob_ver.txt
Writing /mnt/internal/qspi_bootblob_ver.txt (98 bytes) into /dev/mtd0:66977792
Copied 98 bytes from /mnt/internal/qspi_bootblob_ver.txt to address 0x03fe0000 in flash
Writing gpt_secondary_3_0.bin (parittion: secondary_gpt) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/gpt_secondary_3_0.bin
Writing /mnt/internal/gpt_secondary_3_0.bin (16896 bytes) into /dev/mtd0:67091968
Copied 16896 bytes from /mnt/internal/gpt_secondary_3_0.bin to address 0x03ffbe00 in flash
[ 236]: l4t_flash_from_kernel: Successfully flash the qspi
[ 236]: l4t_flash_from_kernel: Flashing success
Flash is successful
Reboot device
Cleaning up...
Log is saved to Linux_for_Tegra/initrdlog/flash_1-10_0_20240807-201448.log
you may try revise 1st steps as jetson-agx-orin-devkit,
Orin series they’re sharing the same EKS binary file, it’s a trick for calling flash script to create sign/encrypt EKS image. you don’t need to provide such PKC/SBK keys for EKS image generation.
for instance, $ ./flash.sh --no-flash -k A_eks jetson-agx-orin-devkit internal
besides, please also confirm there’s no error reported, and you’ve eks_t234_sigheader.img.encrypt created correctly before copying it to kernel_flash/ for Orin Nano.
because of ./flash.sh --no-flash -k A_eks jetson-orin-nano-devkit-nvme internal generate result is eks_t234_sigheader_encrypt.img.signed not eks_t234_sigheader.img.encrypt, but I don’t think it errors
i follow the sudo SKIP_EEPROM_CHECK=1 BOARDID="3701" FAB="300" BOARDSKU="0004" BOARDREV="C.2" CHIP_SKU=00:00:00:D2 ./flash.sh --no-flash -k A_eks jetson-agx-orin-devkit internal
here is the log of my flash script ./tools/kernel_flash/l4t_initrd_flash.sh --external-device nvme0n1p1 -u ecp521.pem -v SBK.key --uefi-enc gen_ekb/sym_t234.key -p "-c ./bootloader/t186ref/cfg/flash_t234_qspi.xml" -c ./tools/kernel_flash/flash_l4t_t234_nvme.xml --showlogs --network usb0 jetson-orin-nano-devkit-nvme external
**********************************************
* *
* Step 1: Build the flashing environment *
* *
**********************************************
Create flash environment 0
/home/caster/Linux_for_Tegra.35.5/bootloader /home/caster/Linux_for_Tegra.35.5
/home/caster/Linux_for_Tegra.35.5
Finish creating flash environment 0.
****************************************************
* *
* Step 2: Boot the device with flash initrd image *
* *
****************************************************
/home/caster/Linux_for_Tegra.35.5/temp_initrdflash/bootloader0 /home/caster/Linux_for_Tegra.35.5
./tegraflash.py --bl uefi_jetson_with_dtb_sigheader_encrypt.bin.signed --bct br_bct_BR.bct --securedev --bldtb tegra234-p3767-0003-p3768-0000-a0.dtb --applet rcm_2_signed.rcm --applet_softfuse rcm_1_signed.rcm --cmd "rcmboot" --cfg secureflash.xml --chip 0x23 --mb1_bct mb1_bct_MB1_sigheader_encrypt.bct.signed --mem_bct mem_rcm_sigheader_encrypt.bct.signed --mb1_cold_boot_bct mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed --mb1_bin mb1_t234_prod_aligned_sigheader_encrypt.bin.signed --psc_bl1_bin psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed --mem_bct_cold_boot mem_coldboot_aligned_sigheader_encrypt.bct.signed --bins "psc_fw pscfw_t234_prod_sigheader_encrypt.bin.signed; mts_mce mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed; mb2_applet applet_t234_sigheader_encrypt.bin.signed; mb2_bootloader mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed; xusb_fw xusb_t234_prod_sigheader_encrypt.bin.signed; dce_fw display-t234-dce_sigheader_encrypt.bin.signed; nvdec nvdec_t234_prod_sigheader_encrypt.fw.signed; bpmp_fw bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed; bpmp_fw_dtb tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed; sce_fw camera-rtcpu-sce_sigheader_encrypt.img.signed; rce_fw camera-rtcpu-t234-rce_sigheader_encrypt.img.signed; ape_fw adsp-fw_sigheader_encrypt.bin.signed; spe_fw spe_t234_sigheader_encrypt.bin.signed; tos tos-optee_t234_sigheader_encrypt.img.signed; eks eks_t234_sigheader_encrypt.img.signed; kernel boot0.img; kernel_dtb tegra234-p3767-0003-p3768-0000-a0.dtb" --secondary_gpt_backup --bct_backup --instance 1-10
Welcome to Tegra Flash
version 1.0.0
Type ? or help for help and q or quit to exit
Use ! to execute system commands
Entering RCM boot
[ 0.0197 ] mb1_t234_prod_aligned_sigheader_encrypt.bin.signed filename is from --mb1_bin
[ 0.0197 ] psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed filename is from --psc_bl1_bin
[ 0.0197 ] rcm boot with presigned binaries
[ 0.0203 ] tegrarcm_v2 --instance 1-10 --new_session --chip 0x23 0 --uid --download bct_br br_bct_BR.bct --download mb1 mb1_t234_prod_aligned_sigheader_encrypt.bin.signed --download psc_bl1 psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed --download bct_mb1 mb1_bct_MB1_sigheader_encrypt.bct.signed
[ 0.0209 ] BR_CID: 0xEB012344705DD5046C000000010381C0
[ 0.0260 ] Sending bct_br
[ 0.0303 ] Sending mb1
[ 0.0308 ] Sending psc_bl1
[ 0.0459 ] Sending bct_mb1
[ 0.0517 ] Generating blob for T23x
[ 0.0526 ] tegrahost_v2 --chip 0x23 0 --generateblob blob.xml blob.bin
[ 0.0530 ] The number of images in blob is 18
[ 0.0532 ] blobsize is 75436826
[ 0.0532 ] Added binary blob_uefi_jetson_with_dtb_sigheader_encrypt.bin.signed of size 2924608
[ 0.0711 ] Added binary blob_pscfw_t234_prod_sigheader_encrypt.bin.signed of size 375168
[ 0.0714 ] Added binary blob_mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed of size 190592
[ 0.0715 ] Added binary blob_applet_t234_sigheader_encrypt.bin.signed of size 277312
[ 0.0716 ] Not supported type: mb2_applet
[ 0.0716 ] Added binary blob_mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed of size 438768
[ 0.0717 ] Added binary blob_xusb_t234_prod_sigheader_encrypt.bin.signed of size 164864
[ 0.0718 ] Added binary blob_display-t234-dce_sigheader_encrypt.bin.signed of size 9097216
[ 0.0746 ] Added binary blob_nvdec_t234_prod_sigheader_encrypt.fw.signed of size 294912
[ 0.0754 ] Added binary blob_bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed of size 1051136
[ 0.0757 ] Added binary blob_tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed of size 110080
[ 0.0758 ] Added binary blob_camera-rtcpu-sce_sigheader_encrypt.img.signed of size 166304
[ 0.0759 ] Added binary blob_camera-rtcpu-t234-rce_sigheader_encrypt.img.signed of size 537952
[ 0.0760 ] Added binary blob_adsp-fw_sigheader_encrypt.bin.signed of size 400864
[ 0.0761 ] Added binary blob_spe_t234_sigheader_encrypt.bin.signed of size 270336
[ 0.0761 ] Added binary blob_tos-optee_t234_sigheader_encrypt.img.signed of size 1127568
[ 0.0765 ] Added binary blob_eks_t234_sigheader_encrypt.img.signed of size 9232
[ 0.0765 ] Added binary blob_boot0.img of size 57651200
[ 0.0950 ] Added binary blob_tegra234-p3767-0003-p3768-0000-a0.dtb of size 347610
[ 0.1258 ] tegrarcm_v2 --instance 1-10 --chip 0x23 0 --pollbl --download bct_mem mem_rcm_sigheader_encrypt.bct.signed --download blob blob.bin
[ 0.1263 ] BL: version 1.2.0.0-t234-54845784-562369e5 last_boot_error: 0
[ 0.3031 ] Sending bct_mem
[ 0.3076 ] Sending blob
[ 2.8993 ] RCM-boot started
/home/caster/Linux_for_Tegra.35.5
***************************************
* *
* Step 3: Start the flashing process *
* *
***************************************
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for target to boot-up...
Waiting for device to expose ssh ......RTNETLINK answers: File exists
RTNETLINK answers: File exists
Waiting for device to expose ssh ...Run command: flash on fc00:1:1:0::2
SSH ready
blockdev: cannot open /dev/mmcblk0boot0: No such file or directory
[ 0]: l4t_flash_from_kernel: Starting to create gpt for emmc
Active index file is /mnt/internal/flash.idx
Number of lines is 76
max_index=75
[ 2]: l4t_flash_from_kernel: Successfully create gpt for emmc
[ 2]: l4t_flash_from_kernel: Starting to create gpt for external device
Active index file is /mnt/external/flash.idx
Number of lines is 76
max_index=75
[ 4]: l4t_flash_from_kernel: Successfully create gpt for external device
[ 4]: l4t_flash_from_kernel: Starting to flash to emmc
[ 4]: l4t_flash_from_kernel: Starting to flash to external device
Active index file is /mnt/internal/flash.idx
Active index file is /mnt/external/flash.idx
Flash index file is /mnt/internal/flash.idx
Number of lines is 76
max_index=75
Number of lines is 76
max_index=75
Number of lines is 76
max_index=75
[ 4]: l4t_flash_from_kernel: Starting to flash to qspi
QSPI storage size: 67108864 bytes.
[ 6]: l4t_flash_from_kernel: Successfully flash the emmc
[ 6]: l4t_flash_from_kernel: Successfully flash the external device
Erased 67108864 bytes from address 0x00000000 in flash
Flash index file is /mnt/internal/flash.idx
Number of lines is 76
max_index=75
Writing br_bct_BR.bct (parittion: BCT) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/br_bct_BR.bct
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:0
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00000000 in flash
[ 197]: l4t_flash_from_kernel: QSPI erase block size is 65536
[ 197]: l4t_flash_from_kernel: Writing 16 copies of /mnt/internal/br_bct_BR.bct
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:65536
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00010000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:131072
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00020000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:196608
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00030000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:262144
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00040000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:327680
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00050000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:393216
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00060000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:458752
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00070000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:524288
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00080000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:589824
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x00090000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:655360
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x000a0000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:720896
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x000b0000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:786432
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x000c0000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:851968
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x000d0000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:917504
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x000e0000 in flash
Writing /mnt/internal/br_bct_BR.bct (8192 bytes) into /dev/mtd0:983040
Copied 8192 bytes from /mnt/internal/br_bct_BR.bct to address 0x000f0000 in flash
Writing mb1_t234_prod_aligned_sigheader_encrypt.bin.signed (parittion: A_mb1) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb1_t234_prod_aligned_sigheader_encrypt.bin.signed
Writing /mnt/internal/mb1_t234_prod_aligned_sigheader_encrypt.bin.signed (280976 bytes) into /dev/mtd0:1048576
Copied 280976 bytes from /mnt/internal/mb1_t234_prod_aligned_sigheader_encrypt.bin.signed to address 0x00100000 in flash
Writing psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed (parittion: A_psc_bl1) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed
Writing /mnt/internal/psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed (122864 bytes) into /dev/mtd0:1572864
Copied 122864 bytes from /mnt/internal/psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed to address 0x00180000 in flash
Writing mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed (parittion: A_MB1_BCT) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed
Writing /mnt/internal/mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed (17328 bytes) into /dev/mtd0:1835008
Copied 17328 bytes from /mnt/internal/mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed to address 0x001c0000 in flash
Writing mem_coldboot_aligned_sigheader_encrypt.bct.signed (parittion: A_MEM_BCT) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mem_coldboot_aligned_sigheader_encrypt.bct.signed
Writing /mnt/internal/mem_coldboot_aligned_sigheader_encrypt.bct.signed (243712 bytes) into /dev/mtd0:1966080
Copied 243712 bytes from /mnt/internal/mem_coldboot_aligned_sigheader_encrypt.bct.signed to address 0x001e0000 in flash
[ 198]: l4t_flash_from_kernel: Warning: skip writing A_tsec-fw partition as no image is specified
Writing nvdec_t234_prod_sigheader_encrypt.fw.signed (parittion: A_nvdec) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/nvdec_t234_prod_sigheader_encrypt.fw.signed
Writing /mnt/internal/nvdec_t234_prod_sigheader_encrypt.fw.signed (294912 bytes) into /dev/mtd0:3276800
Copied 294912 bytes from /mnt/internal/nvdec_t234_prod_sigheader_encrypt.fw.signed to address 0x00320000 in flash
Writing mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed (parittion: A_mb2) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed
Writing /mnt/internal/mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed (438768 bytes) into /dev/mtd0:4325376
Copied 438768 bytes from /mnt/internal/mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed to address 0x00420000 in flash
Writing xusb_t234_prod_sigheader_encrypt.bin.signed (parittion: A_xusb-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/xusb_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/xusb_t234_prod_sigheader_encrypt.bin.signed (164864 bytes) into /dev/mtd0:4849664
Copied 164864 bytes from /mnt/internal/xusb_t234_prod_sigheader_encrypt.bin.signed to address 0x004a0000 in flash
Writing bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed (parittion: A_bpmp-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed (1051136 bytes) into /dev/mtd0:5111808
Copied 1051136 bytes from /mnt/internal/bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed to address 0x004e0000 in flash
Writing tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed (parittion: A_bpmp-fw-dtb) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed
Writing /mnt/internal/tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed (110080 bytes) into /dev/mtd0:6684672
Copied 110080 bytes from /mnt/internal/tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed to address 0x00660000 in flash
Writing pscfw_t234_prod_sigheader_encrypt.bin.signed (parittion: A_psc-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/pscfw_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/pscfw_t234_prod_sigheader_encrypt.bin.signed (375168 bytes) into /dev/mtd0:10878976
Copied 375168 bytes from /mnt/internal/pscfw_t234_prod_sigheader_encrypt.bin.signed to address 0x00a60000 in flash
Writing mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed (parittion: A_mts-mce) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed (190592 bytes) into /dev/mtd0:11665408
Copied 190592 bytes from /mnt/internal/mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed to address 0x00b20000 in flash
Writing sc7_t234_prod_sigheader_encrypt.bin.signed (parittion: A_sc7) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/sc7_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/sc7_t234_prod_sigheader_encrypt.bin.signed (184544 bytes) into /dev/mtd0:12189696
Copied 184544 bytes from /mnt/internal/sc7_t234_prod_sigheader_encrypt.bin.signed to address 0x00ba0000 in flash
Writing psc_rf_t234_prod_sigheader_encrypt.bin.signed (parittion: A_pscrf) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/psc_rf_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/psc_rf_t234_prod_sigheader_encrypt.bin.signed (122320 bytes) into /dev/mtd0:12386304
Copied 122320 bytes from /mnt/internal/psc_rf_t234_prod_sigheader_encrypt.bin.signed to address 0x00bd0000 in flash
Writing mb2rf_t234_sigheader_encrypt.bin.signed (parittion: A_mb2rf) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb2rf_t234_sigheader_encrypt.bin.signed
Writing /mnt/internal/mb2rf_t234_sigheader_encrypt.bin.signed (122752 bytes) into /dev/mtd0:12582912
Copied 122752 bytes from /mnt/internal/mb2rf_t234_sigheader_encrypt.bin.signed to address 0x00c00000 in flash
Writing uefi_jetson_with_dtb_sigheader_encrypt.bin.signed (parittion: A_cpu-bootloader) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/uefi_jetson_with_dtb_sigheader_encrypt.bin.signed
Writing /mnt/internal/uefi_jetson_with_dtb_sigheader_encrypt.bin.signed (2924608 bytes) into /dev/mtd0:12713984
Copied 2924608 bytes from /mnt/internal/uefi_jetson_with_dtb_sigheader_encrypt.bin.signed to address 0x00c20000 in flash
Writing tos-optee_t234_sigheader_encrypt.img.signed (parittion: A_secure-os) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/tos-optee_t234_sigheader_encrypt.img.signed
Writing /mnt/internal/tos-optee_t234_sigheader_encrypt.img.signed (1127568 bytes) into /dev/mtd0:16384000
Copied 1127568 bytes from /mnt/internal/tos-optee_t234_sigheader_encrypt.img.signed to address 0x00fa0000 in flash
[ 212]: l4t_flash_from_kernel: Warning: skip writing A_smm-fw partition as no image is specified
Writing eks_t234_sigheader_encrypt.img.signed (parittion: A_eks) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/eks_t234_sigheader_encrypt.img.signed
Writing /mnt/internal/eks_t234_sigheader_encrypt.img.signed (9232 bytes) into /dev/mtd0:22675456
Copied 9232 bytes from /mnt/internal/eks_t234_sigheader_encrypt.img.signed to address 0x015a0000 in flash
Writing display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed (parittion: A_dce-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed
Writing /mnt/internal/display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed (736656 bytes) into /dev/mtd0:22937600
Copied 736656 bytes from /mnt/internal/display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed to address 0x015e0000 in flash
Writing spe_t234_sigheader_encrypt.bin.signed (parittion: A_spe-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/spe_t234_sigheader_encrypt.bin.signed
Writing /mnt/internal/spe_t234_sigheader_encrypt.bin.signed (270336 bytes) into /dev/mtd0:28180480
Copied 270336 bytes from /mnt/internal/spe_t234_sigheader_encrypt.bin.signed to address 0x01ae0000 in flash
Writing camera-rtcpu-t234-rce_sigheader_encrypt.img.signed (parittion: A_rce-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/camera-rtcpu-t234-rce_sigheader_encrypt.img.signed
Writing /mnt/internal/camera-rtcpu-t234-rce_sigheader_encrypt.img.signed (537952 bytes) into /dev/mtd0:28770304
Copied 537952 bytes from /mnt/internal/camera-rtcpu-t234-rce_sigheader_encrypt.img.signed to address 0x01b70000 in flash
Writing adsp-fw_sigheader_encrypt.bin.signed (parittion: A_adsp-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/adsp-fw_sigheader_encrypt.bin.signed
Writing /mnt/internal/adsp-fw_sigheader_encrypt.bin.signed (400864 bytes) into /dev/mtd0:29818880
Copied 400864 bytes from /mnt/internal/adsp-fw_sigheader_encrypt.bin.signed to address 0x01c70000 in flash
[ 215]: l4t_flash_from_kernel: Warning: skip writing A_reserved_on_boot partition as no image is specified
Writing mb1_t234_prod_aligned_sigheader_encrypt.bin.signed (parittion: B_mb1) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb1_t234_prod_aligned_sigheader_encrypt.bin.signed
Writing /mnt/internal/mb1_t234_prod_aligned_sigheader_encrypt.bin.signed (280976 bytes) into /dev/mtd0:33292288
Copied 280976 bytes from /mnt/internal/mb1_t234_prod_aligned_sigheader_encrypt.bin.signed to address 0x01fc0000 in flash
Writing psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed (parittion: B_psc_bl1) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed
Writing /mnt/internal/psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed (122864 bytes) into /dev/mtd0:33816576
Copied 122864 bytes from /mnt/internal/psc_bl1_t234_prod_aligned_sigheader_encrypt.bin.signed to address 0x02040000 in flash
Writing mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed (parittion: B_MB1_BCT) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed
Writing /mnt/internal/mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed (17328 bytes) into /dev/mtd0:34078720
Copied 17328 bytes from /mnt/internal/mb1_cold_boot_bct_MB1_sigheader_encrypt.bct.signed to address 0x02080000 in flash
Writing mem_coldboot_aligned_sigheader_encrypt.bct.signed (parittion: B_MEM_BCT) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mem_coldboot_aligned_sigheader_encrypt.bct.signed
Writing /mnt/internal/mem_coldboot_aligned_sigheader_encrypt.bct.signed (243712 bytes) into /dev/mtd0:34209792
Copied 243712 bytes from /mnt/internal/mem_coldboot_aligned_sigheader_encrypt.bct.signed to address 0x020a0000 in flash
[ 217]: l4t_flash_from_kernel: Warning: skip writing B_tsec-fw partition as no image is specified
Writing nvdec_t234_prod_sigheader_encrypt.fw.signed (parittion: B_nvdec) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/nvdec_t234_prod_sigheader_encrypt.fw.signed
Writing /mnt/internal/nvdec_t234_prod_sigheader_encrypt.fw.signed (294912 bytes) into /dev/mtd0:35520512
Copied 294912 bytes from /mnt/internal/nvdec_t234_prod_sigheader_encrypt.fw.signed to address 0x021e0000 in flash
Writing mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed (parittion: B_mb2) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed
Writing /mnt/internal/mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed (438768 bytes) into /dev/mtd0:36569088
Copied 438768 bytes from /mnt/internal/mb2_t234_with_mb2_cold_boot_bct_MB2_sigheader_encrypt.bin.signed to address 0x022e0000 in flash
Writing xusb_t234_prod_sigheader_encrypt.bin.signed (parittion: B_xusb-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/xusb_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/xusb_t234_prod_sigheader_encrypt.bin.signed (164864 bytes) into /dev/mtd0:37093376
Copied 164864 bytes from /mnt/internal/xusb_t234_prod_sigheader_encrypt.bin.signed to address 0x02360000 in flash
Writing bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed (parittion: B_bpmp-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed (1051136 bytes) into /dev/mtd0:37355520
Copied 1051136 bytes from /mnt/internal/bpmp_t234-TE950M-A1_prod_sigheader_encrypt.bin.signed to address 0x023a0000 in flash
Writing tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed (parittion: B_bpmp-fw-dtb) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed
Writing /mnt/internal/tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed (110080 bytes) into /dev/mtd0:38928384
Copied 110080 bytes from /mnt/internal/tegra234-bpmp-3767-0003-3509-a02_with_odm_sigheader_encrypt.dtb.signed to address 0x02520000 in flash
Writing pscfw_t234_prod_sigheader_encrypt.bin.signed (parittion: B_psc-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/pscfw_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/pscfw_t234_prod_sigheader_encrypt.bin.signed (375168 bytes) into /dev/mtd0:43122688
Copied 375168 bytes from /mnt/internal/pscfw_t234_prod_sigheader_encrypt.bin.signed to address 0x02920000 in flash
Writing mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed (parittion: B_mts-mce) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed (190592 bytes) into /dev/mtd0:43909120
Copied 190592 bytes from /mnt/internal/mce_flash_o10_cr_prod_sigheader_encrypt.bin.signed to address 0x029e0000 in flash
Writing sc7_t234_prod_sigheader_encrypt.bin.signed (parittion: B_sc7) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/sc7_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/sc7_t234_prod_sigheader_encrypt.bin.signed (184544 bytes) into /dev/mtd0:44433408
Copied 184544 bytes from /mnt/internal/sc7_t234_prod_sigheader_encrypt.bin.signed to address 0x02a60000 in flash
Writing psc_rf_t234_prod_sigheader_encrypt.bin.signed (parittion: B_pscrf) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/psc_rf_t234_prod_sigheader_encrypt.bin.signed
Writing /mnt/internal/psc_rf_t234_prod_sigheader_encrypt.bin.signed (122320 bytes) into /dev/mtd0:44630016
Copied 122320 bytes from /mnt/internal/psc_rf_t234_prod_sigheader_encrypt.bin.signed to address 0x02a90000 in flash
Writing mb2rf_t234_sigheader_encrypt.bin.signed (parittion: B_mb2rf) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/mb2rf_t234_sigheader_encrypt.bin.signed
Writing /mnt/internal/mb2rf_t234_sigheader_encrypt.bin.signed (122752 bytes) into /dev/mtd0:44826624
Copied 122752 bytes from /mnt/internal/mb2rf_t234_sigheader_encrypt.bin.signed to address 0x02ac0000 in flash
Writing uefi_jetson_with_dtb_sigheader_encrypt.bin.signed (parittion: B_cpu-bootloader) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/uefi_jetson_with_dtb_sigheader_encrypt.bin.signed
Writing /mnt/internal/uefi_jetson_with_dtb_sigheader_encrypt.bin.signed (2924608 bytes) into /dev/mtd0:44957696
Copied 2924608 bytes from /mnt/internal/uefi_jetson_with_dtb_sigheader_encrypt.bin.signed to address 0x02ae0000 in flash
Writing tos-optee_t234_sigheader_encrypt.img.signed (parittion: B_secure-os) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/tos-optee_t234_sigheader_encrypt.img.signed
Writing /mnt/internal/tos-optee_t234_sigheader_encrypt.img.signed (1127568 bytes) into /dev/mtd0:48627712
Copied 1127568 bytes from /mnt/internal/tos-optee_t234_sigheader_encrypt.img.signed to address 0x02e60000 in flash
[ 230]: l4t_flash_from_kernel: Warning: skip writing B_smm-fw partition as no image is specified
Writing eks_t234_sigheader_encrypt.img.signed (parittion: B_eks) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/eks_t234_sigheader_encrypt.img.signed
Writing /mnt/internal/eks_t234_sigheader_encrypt.img.signed (9232 bytes) into /dev/mtd0:54919168
Copied 9232 bytes from /mnt/internal/eks_t234_sigheader_encrypt.img.signed to address 0x03460000 in flash
Writing display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed (parittion: B_dce-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed
Writing /mnt/internal/display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed (736656 bytes) into /dev/mtd0:55181312
Copied 736656 bytes from /mnt/internal/display-t234-dce_with_kernel_tegra234-p3767-0003-p3768-0000-a0_aligned_blob_w_bin_sigheader_encrypt.bin.signed to address 0x034a0000 in flash
Writing spe_t234_sigheader_encrypt.bin.signed (parittion: B_spe-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/spe_t234_sigheader_encrypt.bin.signed
Writing /mnt/internal/spe_t234_sigheader_encrypt.bin.signed (270336 bytes) into /dev/mtd0:60424192
Copied 270336 bytes from /mnt/internal/spe_t234_sigheader_encrypt.bin.signed to address 0x039a0000 in flash
Writing camera-rtcpu-t234-rce_sigheader_encrypt.img.signed (parittion: B_rce-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/camera-rtcpu-t234-rce_sigheader_encrypt.img.signed
Writing /mnt/internal/camera-rtcpu-t234-rce_sigheader_encrypt.img.signed (537952 bytes) into /dev/mtd0:61014016
Copied 537952 bytes from /mnt/internal/camera-rtcpu-t234-rce_sigheader_encrypt.img.signed to address 0x03a30000 in flash
Writing adsp-fw_sigheader_encrypt.bin.signed (parittion: B_adsp-fw) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/adsp-fw_sigheader_encrypt.bin.signed
Writing /mnt/internal/adsp-fw_sigheader_encrypt.bin.signed (400864 bytes) into /dev/mtd0:62062592
Copied 400864 bytes from /mnt/internal/adsp-fw_sigheader_encrypt.bin.signed to address 0x03b30000 in flash
[ 233]: l4t_flash_from_kernel: Warning: skip writing B_reserved_on_boot partition as no image is specified
[ 233]: l4t_flash_from_kernel: Warning: skip writing uefi_variables partition as no image is specified
[ 233]: l4t_flash_from_kernel: Warning: skip writing uefi_ftw partition as no image is specified
[ 233]: l4t_flash_from_kernel: Warning: skip writing worm partition as no image is specified
Writing bct_backup.img (parittion: BCT-boot-chain_backup) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/bct_backup.img
Writing /mnt/internal/bct_backup.img (32768 bytes) into /dev/mtd0:66715648
Copied 32768 bytes from /mnt/internal/bct_backup.img to address 0x03fa0000 in flash
[ 233]: l4t_flash_from_kernel: Warning: skip writing reserved_partition partition as no image is specified
Writing gpt_secondary_3_0.bin (parittion: secondary_gpt_backup) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/gpt_secondary_3_0.bin
Writing /mnt/internal/gpt_secondary_3_0.bin (16896 bytes) into /dev/mtd0:66846720
Copied 16896 bytes from /mnt/internal/gpt_secondary_3_0.bin to address 0x03fc0000 in flash
Writing qspi_bootblob_ver.txt (parittion: B_VER) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/qspi_bootblob_ver.txt
Writing /mnt/internal/qspi_bootblob_ver.txt (109 bytes) into /dev/mtd0:66912256
Copied 109 bytes from /mnt/internal/qspi_bootblob_ver.txt to address 0x03fd0000 in flash
Writing qspi_bootblob_ver.txt (parittion: A_VER) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/qspi_bootblob_ver.txt
Writing /mnt/internal/qspi_bootblob_ver.txt (109 bytes) into /dev/mtd0:66977792
Copied 109 bytes from /mnt/internal/qspi_bootblob_ver.txt to address 0x03fe0000 in flash
Writing gpt_secondary_3_0.bin (parittion: secondary_gpt) into /dev/mtd0
Sha1 checksum matched for /mnt/internal/gpt_secondary_3_0.bin
Writing /mnt/internal/gpt_secondary_3_0.bin (16896 bytes) into /dev/mtd0:67091968
Copied 16896 bytes from /mnt/internal/gpt_secondary_3_0.bin to address 0x03ffbe00 in flash
[ 234]: l4t_flash_from_kernel: Successfully flash the qspi
[ 234]: l4t_flash_from_kernel: Flashing success
Flash is successful
Reboot device
Cleaning up...
when the machine reboot, i got these log from uart
NOTICE: BL31: v2.6(release):346877e39
NOTICE: BL31: Built : 12:32:40, Aug 1 2023
I/TC: Physical secure memory base 0x27c040000 size 0x3fc0000
I/TC:
I/TC: Non-secure external DT found
I/TC: OP-TEE version: 3.21 (gcc version 9.3.0 (Buildroot 2020.08)) #2 Tue Aug 1 19:39:55 UTC 2023 aarch64
I/TC: WARNING: This OP-TEE configuration might be insecure!
I/TC: WARNING: Please check https://optee.readthedocs.io/en/latest/architecture/porting_guidelines.html
I/TC: Primary CPU initializing
I/TC: Primary CPU switching to normal world boot
Jetson UEFI firmware (version 4.1-33958178 built on 2023-08-01T19:34:02+00:00)
I/TC: Reserved shared memory is disabled
I/TC: Dynamic shared memory is enabled
I/TC: Normal World virtualization support is disabled
I/TC: Asynchronous notifications are disabled
E/TC:?? 00 get_rpc_alloc_res:645 RPC allocation failed. Non-secure world result: ret=0xffff0000 ret_origin=0
E/LD: init_elf:486 sys_open_ta_bin(bc50d971-d4c9-42c4-82cb-343fb7f37896)
E/TC:?? 00 ldelf_init_with_ldelf:131 ldelf failed with res: 0xffff000c
e[2Je[04De[=3he[2Je[09D
after flash, system not flash into the board
optee report configuration be insecure,Is it related with fuse config?
what does the UEFI fails mean, it’s there a wrong key in the eks image?
those were failure due to you did not given dTPM for EKS image creation.
it’s UEFI needs to talk with the fTPM TA at least once to check whether the TA exists.
since there’re some default keys,
please try running with example.sh again with those default keys.
i’m not found any fTPM documents from nvidia Jetson dev guide and default keys from public_sources.tbz2.
according to other posts, i copy the device_id.cert and generate ftpm files
but problem still exist. i still can’t flash the luks encrypt rootfs to the board.
after the script says sucessful, devkit board boot into old system without any encrypt
since the UEFI variable protection feature is always enabled. you should provide UEFI variable authentication key in EKS image, otherwise UEFI will block the booting.
could you please refer to OP-TEE source files of EKS image creation, for example, $public_sources/atf_and_optee/optee/samples/hwkey-agent/host/tool/gen_ekb
you need to use the same release version sample.sh to build a new eks.img which will include an auth key.
did you access jetson-linux-r3550 for downloading [Driver Package (BSP) Sources] package?
you may further narrow down the issue,
for instance, please also check flash without disk encryption for verification.
hello JerryChang
I’m sure the example.sh and gen_ekb.py copied from right package souce,and i use sudo ./tools/kernel_flash/l4t_initrd_flash.sh -u ecp521.pem -v SBK.key --network usb0 --showlogs -p "-c bootloader/t186ref/cfg/flash_t234_qspi.xml" jetson-orin-nano-devkit-nvme internal to flash the internal storage after signed the eks_t234.img.
as you may know…
l4t_initrd_flash it took binary files under $OUT/Linux_for_Tegra/tools/kernel_flash/images/ to flash onto your Orin Nano target.
however, it’s flash script to perform sign/encrypt to convert eks_t234.img as eks_t234_sigheader.img.encrypt format
in order to confirm you’ve update EKS image correctly, please see-also Topic 270934 for steps to re-flash the target.