Tegraflash.py error

Hi,

I’m trying to generate an encrypted DTB file but run into this error everytime

*** Signing kernel_tegra210-p3448-0000-p3449-0000-a00.dtb ***
./tegraflash.py --chip 0x21 --cmd “sign ./signed/kernel_tegra210-p3448-0000-p3449-0000-a00.dtb.encrypt”
Welcome to Tegra Flash
version 1.0.0
Type ? or help for help and q or quit to exit
Use ! to execute system commands

[ 0.0083 ] Generating signature
Error: Not supported
Failed to flash/read t210ref.

hello nguyenm151,

are you using this?
$ sudo ./flash.sh --no-flash -r -k DTB jetson-nano-emmc mmcblk0p1

please have a try as below to create sign files.
$ sudo ./tegraflash.py --bl cboot.bin --bct P3448_A00_4GB_Micron_4GB_lpddr4_204Mhz_P987.cfg --odmdata 0x94000 --bldtb tegra210-p3448-0000-p3449-0000-a00.dtb --applet nvtboot_recovery.bin --cmd "sign" --cfg flash.xml --chip 0x21 --bins "EBT cboot.bin; DTB tegra210-p3448-0000-p3449-0000-a00.dtb"

You are correct, I was using the line
$ sudo ./flash.sh --no-flash -k DTB jetson-nano-emmc mmcblk0p1
and i got the error.

The second line work but instead of
P3448_A00_4GB_Micron_4GB_lpddr4_204Mhz_P987.cfg
I had to use
P3448_A00_lpddr4_204Mhz_P987.cfg
which created the signed file.

thank you for the help

Follow up question,

I am trying to build a custom device tree and I am having issues encrypting the custom dtb file now.

Using the script above, the output is always output an tegra210-p3448-0000-p3449-0000-a00.dtb.encrypted file.

I am trying to encrypt my tegra210-p3448-0000-p3449-0000-a01.dtb file

the current script I am using is

sudo ./tegraflash.py --bl cboot.bin --bct P3448_A00_lpddr4_204Mhz_P987.cfg --odmdata 0x94000 --bldtb tegra210-p3448-0000-p3449-0000-a01.dtb --applet nvtboot_recovery.bin --cmd “sign” --cfg flash.xml --chip 0x21 --bins “ETB cboot.bin; DTB tegra210-p3448-0000-p3449-0000-a01.dtb”

hello nguyenm151,

the problem here is using --no-flash and adding -k DTB to create signed file did not works on Nano series.
so, it’s just an workarounds to call tegraflash.py to create sign files.
BTW,
it looks like you have another discussion thread, Topic 188176 for asking this. so, instead of using sign/encrypt file and writes into DTB partition, you may use the FDT entry in the /boot/extlinux/extlinux.conf to load the binary via file system.