Hi NV pals,
I had burn fuse using PKC and SBK.
So I want to sign images in a Factory Environment using following command:
$ sudo BOARDID=3310 FAB=C04 ./flash.sh --no-flash -u rsa_priv.pem -v sbk.xml jetson-tx2 mmcblk0p1
but finally something wrong , please check the following log:
===============================================================================================
/home/ykei/nvidia/nvidia_sdk/jonestest/JetPack_4.2.1_Linux_GA_P3310/Linux_for_Tegra/sbk.xml
Welcome to Tegra Flash
version 1.0.0
Type ? or help for help and q or quit to exit
Use ! to execute system commands
[ 0.0369 ] tegrasign_v2 --key /home/ykei/nvidia/nvidia_sdk/jonestest/JetPack_4.2.1_Linux_GA_P3310/Linux_for_Tegra/rsa_priv.pem --getmode mode.txt
[ 0.0385 ] PKC key in Open SSL format
[ 0.0401 ] Key size is 256 bytes
[ 0.0441 ] Valid PKC key
[ 0.0567 ]
[ 0.0622 ] Generating RCM messages
[ 0.0693 ] tegrarcm_v2 --listrcm rcm_list.xm
[ 0.0742 ] RCM 0 is saved as rcm_0.rcm
[ 0.0761 ] RCM 1 is saved as rcm_1.rcm
[ 0.0792 ] List of rcm files are saved in rcm_list.xml
[ 0.0924 ]
[ 0.0924 ] Signing RCM messages
[ 0.0942 ] tegrasign_v2 --key /home/ykei/nvidia/nvidia_sdk/jonestest/JetPack_4.2.1_Linux_GA_P3310/Linux_for_Tegra/sbk.xml --list rcm_list.xml --pubkeyhash pub_key.key
[ 0.0956 ] Not a valid EC key format
[ 0.1150 ] Not a valid eddsa key format
[ 0.1154 ] Invalid key format
[ 0.1236 ]
Error: Return value 11
Command tegrasign_v2 --key /home/ykei/nvidia/nvidia_sdk/jonestest/JetPack_4.2.1_Linux_GA_P3310/Linux_for_Tegra/sbk.xml --list rcm_list.xml --pubkeyhash pub_key.key
cp: 無法 stat ‘encrypted_signed/*’: 沒有此一檔案或目錄
cp: 無法 stat ‘encrypted_signed/flash.xml.tmp’: 沒有此一檔案或目錄
sed: 無法讀取 flash.xml.tmp: 沒有此一檔案或目錄
./tegraflash.py --bl nvtboot_recovery_cpu_sigheader.bin.encrypt.signed --bct br_bct_BR.bct --applet rcm_1_signed.rcm --cmd “secureflash;reboot” --cfg secureflash.xml --chip 0x18 --mb1_bct mb1_cold_boot_bct_MB1_sigheader.bct.encrypt.signed --bins “mb2_bootloader nvtboot_recovery_sigheader.bin.encrypt.signed; mts_preboot preboot_d15_prod_cr_sigheader.bin.encrypt.signed; mts_bootpack mce_mts_d15_prod_cr_sigheader.bin.encrypt.signed; bpmp_fw bpmp_sigheader.bin.encrypt.signed; bpmp_fw_dtb tegra186-a02-bpmp-quill-p3310-1000-c04-00-te770d-ucm2_sigheader.dtb.encrypt.signed; tlk tos-trusty_sigheader.img.encrypt.signed; eks eks_sigheader.img.encrypt.signed; bootloader_dtb tegra186-quill-p3310-1000-c03-00-base_sigheader.dtb.encrypt.signed” --skipuid
saving flash command in flashcmd.txt
*** no-flash flag enabled. Exiting now… ***
User can run above saved command in factory environment without
providing pkc and sbk keys to flash a device
Example:
$ cd bootloader
$ sudo bash ./flashcmd.txt
====================================================================================================
and then I flash the device show error message
$ cd bootloader
$ sudo bash ./flashcmd.txt
====================================================================================================
sudo bash ./flashcmd.txt
Traceback (most recent call last):
File “./tegraflash.py”, line 1274, in
exports[‘–cfg’] = tegraflash_update_img_path(exports[‘–cfg’])
File “/home/ykei/nvidia/nvidia_sdk/jonestest/JetPack_4.2.1_Linux_GA_P3310/Linux_for_Tegra/bootloader/tegraflash_internal.py”, line 3521, in tegraflash_update_img_path
xml_tree = ElementTree.parse(file)
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1182, in parse
tree.parse(source, parser)
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 657, in parse
self._root = parser.close()
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1665, in close
self._raiseerror(v)
File “/usr/lib/python2.7/xml/etree/ElementTree.py”, line 1517, in _raiseerror
raise err
xml.etree.ElementTree.ParseError: no element found: line 1, column 0