Unable to burn fuses (dev kit) / no more output (serial/hdmi) / bricked?

Hi,
Please follow the README and see if you can flash and boot successfully.

nvidia\nvidia_sdk\JetPack_4.3_Linux_P2888-0060\Linux_for_Tegra\README_Massflash.txt

No luck:

root@ubuntu:/storage/Linux_for_Tegra# ./nvmassflashgen.sh -x 0x19 -y SBKPKC -u /storage/keys/pkc.pem -v /storage/keys/sbk.txt jetson-xavier mmcblk0p1
================================================================================
|| Generate Massflash Image in the master host:                               ||
|| Requires the Jetson connected in RCM mode.                                 ||
================================================================================
1 Jetson devices in RCM mode. USB: 1-2
+-------------------------------------------------------------------------------
| Step 1: Generate Command File
+-------------------------------------------------------------------------------
###############################################################################
# L4T BSP Information:
# R32 , REVISION: 3.1
###############################################################################
copying soft_fuses(/storage/Linux_for_Tegra/bootloader/t186ref/BCT/tegra194-mb1-soft-fuses-l4t.cfg)... done.
./tegraflash.py --chip 0x19 --applet "/storage/Linux_for_Tegra/bootloader/mb1_t194_prod.bin" --skipuid --soft_fuses tegra194-mb1-soft-fuses-l4t.cfg --bins "mb2_applet nvtboot_applet_t194.bin" --cmd "dump eeprom boardinfo cvm.bin;reboot recovery" --key "/storage/keys/pkc.pem"
Welcome to Tegra Flash
version 1.0.0
Type ? or help for help and q or quit to exit
Use ! to execute system commands

[   0.0124 ] Generating RCM messages
[   0.0159 ] tegrahost_v2 --chip 0x19 0 --magicid MB1B --appendsigheader /storage/Linux_for_Tegra/bootloader/mb1_t194_prod.bin zerosbk
[   0.0177 ] Header already present for /storage/Linux_for_Tegra/bootloader/mb1_t194_prod.bin
[   0.0411 ]
[   0.0437 ] tegrasign_v2 --key /storage/keys/pkc.pem --getmode mode.txt
[   0.0455 ] PKC key in Open SSL format
[   0.0549 ] Key size is 256 bytes
[   0.0575 ] Valid PKC key
[   0.0653 ]
[   0.0668 ] tegrasign_v2 --key /storage/keys/pkc.pem --file /storage/Linux_for_Tegra/bootloader/mb1_t194_prod_sigheader.bin --offset 2960 --length 1136 --pubkeyhash pub_key.key --getmontgomeryvalues montgomery.bin
[   0.0683 ] PKC key in Open SSL format
[   0.0718 ] Key size is 256 bytes
[   0.0745 ] Valid PKC key
[   0.0783 ] Saving pkc public key  in pub_key.key
[   0.1691 ]
[   0.1704 ] tegrahost_v2 --chip 0x19 0 --pubkeyhash pub_key.key --setmontgomeryvalues montgomery.bin --updatesigheader /storage/Linux_for_Tegra/bootloader/mb1_t194_prod_sigheader.bin /storage/Linux_for_Tegra/bootloader/mb1_t194_prod_sigheader.sig oem-rsa
[   0.1827 ]
[   0.1863 ] tegrabct_v2 --chip 0x19 0 --sfuse tegra194-mb1-soft-fuses-l4t.cfg.pdf sfuse.bin
[   0.1972 ]
[   0.1989 ] tegrarcm_v2 --listrcm rcm_list.xml --chip 0x19 0 --sfuses sfuse.bin --download rcm /storage/Linux_for_Tegra/bootloader/mb1_t194_prod_sigheader.bin 0 0
[   0.2006 ] RCM 0 is saved as rcm_0.rcm
[   0.2078 ] RCM 1 is saved as rcm_1.rcm
[   0.2111 ] RCM 2 is saved as rcm_2.rcm
[   0.2152 ] List of rcm files are saved in rcm_list.xml
[   0.2160 ]
[   0.2163 ] Signing RCM messages
[   0.2177 ] tegrasign_v2 --key /storage/keys/pkc.pem --list rcm_list.xml --pubkeyhash pub_key.key --getmontgomeryvalues montgomery.bin
[   0.2191 ] PKC key in Open SSL format
[   0.2226 ] Key size is 256 bytes
[   0.2255 ] Valid PKC key
[   0.2293 ] Saving pkc public key  in pub_key.key
[   0.4812 ]
[   0.4813 ] Copying signature to RCM mesages
[   0.4830 ] tegrarcm_v2 --chip 0x19 0 --updatesig rcm_list_signed.xml --pubkeyhash pub_key.key
[   0.4891 ]
[   0.4893 ] Boot Rom communication
[   0.4906 ] tegrarcm_v2 --chip 0x19 0 --rcm rcm_list_signed.xml --skipuid
[   0.4922 ] RCM version 0X190001
[   0.4997 ] Bootrom returned error 22
[   0.5347 ] Boot Rom communication failed
[   0.5386 ]
Error: Return value 22
Command tegrarcm_v2 --chip 0x19 0 --rcm rcm_list_signed.xml --skipuid
Reading board information failed.
*

trying again with explicit environment variables…

managed to build mfi_* package, un-tarred and currently in the middle of ./nvmflash.sh

Start flashing device: 1-2, PID: 3633
Ongoing processes: 3633
Ongoing processes: 3633
....

I’ll update once finished…

finished but:

Ongoing processes: 3633

Ongoing processes:
Flash complete (WITH FAILURES)

it didn’t output logs like readme mentioned!

There’s also no output via hdmi, and no output via serial!

ran a 2nd time with --showlogs and serial output works and it flashed successfully this time:

Start flashing device: 1-2, PID: 4123
Flash complete (SUCCESS)

Serial output during flash:

[0009.779] W> RATCHET: MB1 binary ratchet value 4 is too large than ratchet level 2 from HW fuses.
[0009.787] I> MB1 (prd-version: 1.5.1.2-t194-41334769-9ec1833d)
[0009.793] I> Boot-mode: RCM
[0009.795] I> Chip revision : A02
[0009.798] I> Bootrom patch version : 15 (correctly patched)
[0009.803] I> ATE fuse revision : 0x200
[0009.807] I> Ram repair fuse : 0x0
[0009.810] I> Ram Code : 0x2
[0009.813] I> rst_source : 0x0
[0009.815] I> rst_level : 0x0
[0009.819] I> USB configuration success
[0010.809] I> bct_bootrom image downloaded
[0010.825] W> MB1_PLATFORM_CONFIG: device prod data is empty in MB1 BCT.
[0010.832] I> Temperature = 35000
[0010.836] W> Skipping boost for clk: BPMP_CPU_NIC
[0010.840] W> Skipping boost for clk: BPMP_APB
[0010.844] W> Skipping boost for clk: AXI_CBB
[0010.848] W> Skipping boost for clk: AON_CPU_NIC
[0010.852] W> Skipping boost for clk: CAN1
[0010.856] W> Skipping boost for clk: CAN2
[0010.860] I> Boot-device: eMMC
[0010.863] I> Boot-device: eMMC
[0010.866] I> bct_mb1 image downloaded
[0010.884] I> ECC region[0]: Start:0x0, End:0x0
[0010.888] I> ECC region[1]: Start:0x0, End:0x0
[0010.892] I> ECC region[2]: Start:0x0, End:0x0
[0010.896] I> ECC region[3]: Start:0x0, End:0x0
[0010.900] I> ECC region[4]: Start:0x0, End:0x0
[0010.904] I> Non-ECC region[0]: Start:0x80000000, End:0x100000000
[0010.910] I> Non-ECC region[1]: Start:0x0, End:0x0
[0010.915] I> Non-ECC region[2]: Start:0x0, End:0x0
[0010.919] I> Non-ECC region[3]: Start:0x0, End:0x0
[0010.924] I> Non-ECC region[4]: Start:0x0, End:0x0
[0010.930] E> FAILED: Thermal config
[0010.937] E> FAILED: MEMIO rail config
[0010.956] I> bct_mem image downloaded
[0011.898] I> blob image downloaded
[0011.933] I> Recovery boot mode 0
[0012.020] I> MB1 done

main enter
SPE VERSION #: R01.00.14 Created: Sep 19 2018 @ 11:03:21
HW Function test
Start Scheduler.
in late init

  [0012.029] I> Welcome to MB2(TBoot-BPMP) Recovery (version: 00.00.2018.32-mobile-fdcb35a7)
[0012.030] I> DMA Heap @ [0x526fa000 - 0x52ffa000]
[0012.030] I> Default Heap @ [0xd486400 - 0xd48a400]
[0012.031] E> DEVICE_PROD: Invalid value data = 70020000, size = 0.
[0012.037] W> device prod register failed
[0012.042] I> parsing oem signed section of bpmp-fw header done
[0012.050] I> bpmp-fw binary copied from blob
[0012.054] I> RSA PSS signature check: OK
[0012.055] I> oem authentication of bpmp-fw header done
[0012.060] I> bpmp-fw: Authentication init Done
[0012.064] I> parsing oem signed section of cpubl header done
[0012.070] I> cpubl binary copied from blob
[0012.077] I> bpmp-fw: Authentication Finalize Done
[0012.080] I> RSA PSS signature check: OK
[0012.082] I> oem authentication of cpubl header done
[0012.087] I> cpubl: Authentication init Done
[0012.091] I> parsing oem signed section of tos header done
[0012.097] I> tos binary copied from blob
[0012.100] I> Relocating BR-BCT
[0012.104] I> cpubl: Authentication Finalize Done
[0012.109] I> RSA PSS signature check: OK
[0012.111] I> oem authentication of tos header done
[0012.116] I> tos: Authentication init Done
[0012.120] I> parsing oem signed section of bpmp-fw-dtb header done
[0012.127] I> bpmp-fw-dtb binary copied from blob
[0012.131] I> tos: Authentication Finalize Done
[0012.137] I> RSA PSS signature check: OK
[0012.138] I> oem authentication of bpmp-fw-dtb header done
[0012.143] I> bpmp-fw-dtb: Authentication init Done
[0012.148] I> parsing oem signed section of cpubl-dtb header done
[0012.155] I> cpubl-dtb binary copied from blob
[0012.161] I> bpmp-fw-dtb: Authentication Finalize Done
[0012.300] I> RSA PSS signature check: OK
[0012.300] I> oem authentication of cpubl-dtb header done
[0012.301] I> cpubl-dtb: Authentication init Done
[0012.302] I> parsing oem signed section of eks header done
[0012.302] I> eks binary copied from blob
[0012.304] I> cpubl-dtb: Authentication Finalize Done
[0012.307] I> RSA PSS signature check: OK
[0012.307] I> oem authentication of eks header done
[0012.311] I> eks: Authentication init Done
[0012.315] I> eks: Authentication Finalize Done
[0012.319] I> EKB detected (length: 0x410) @ VA:0x526fb800
NOTICE:  BL31: v1.3(release):
NOTICE:  BL31: Built : 14:14:17, Mar 26 2020
keystore: 705: Starting
keystore: 121: ekb_ek_derivation_test: Device is not ODM Production fused yet EKB_EK was not derived fy
keystore: 744: main: EKB_EK derivation test failed (-1)
keystore: 753: main: EKB retrieved, size=1024
keystore: 269: Acquired DMCPP
keystore: 250: End of keystore
keystore: 428: Initializing keystore services
platform_bootstrap_epilog: trusty bootstrap complete


welcome to lk
calling constructors
initializing heap
creating bootstrap completion thread
top of bootstrap2()
initializing platform
bpmp: platform_init
tag is c1b4e372932429f2737cf722e1219e71
tag_show initialized
dt initialized
mail initialized
chipid initialized
fuse initialized
sku initialized
speedo initialized
ec_get_ec_list: found 45 ecs
ec initialized
ec_mrq initialized
vmon_populate_monitors: found 3 monitors
vmon initialized
adc initialized
fmon_populate_monitors: found 73 monitors
fmon initialized
fmon_mrq initialized
reset initialized
nvhs initialized
392 clocks registered
clk_mrq_init: mrq handler registered
clk initialized
nvlink initialized
io_dpd initialized
io_dpd initialized
thermal initialized
i2c5 controller initialized
initialized i2c mrq handling
i2c initialized
regulator initialized
avfs_clk_platform initialized
soctherm initialized
aotag initialized
powergate initialized
dvs initialized
pm initialized
pg_late initialized
strap initialized
tag initialized
emc initialized
clk_dt initialized
avfs_ccplex_platform initialized
tj_max: dt node not found
tj_init initialized
/uphy is not enabled status = disabled
uphy_dt initialized
uphy initialized
safereg initialized

  mrq initialized
[0012.728] I> Welcome to TBoot-CPU Recovery
fmon_post initialized
[0012.729] I> Heap: [0xa4000000 ... 0xaa000000
[0012.732] I> gpio framework initialized
[0012.743] I> tegrabl_gpio_driver_register: register 'nvidia,tegra194-gpio' driver
clk_dt_late initialized
machine_check initialized
[0012.749] I> tegrabl_gpio_driver_register: register 'nvidia,tegra194-gpio-aon' driver
pm_post initialized
dbells initialized
avfs_clk_platform_post initialized
dmce initialized
cvc initialized
ccplex_avfs_hw_init: nafll_cluster0: not monitored
ccplex_avfs_hw_init: nafll_cluster1: not monitored
ccplex_avfs_hw_init: nafll_cluster2: not monitored
ccplex_avfs_hw_init: nafll_cluster3: not monitored
avfs_clk_mach_post initialized
regulator_post initialized
rm initialized
sc7_diag initialized
thermal_test initialized
serial_late initialized
clk_post initialized
clk_dt_post initialized
mc_reg initialized
pg_post initialized
dyn_modules initialized
sku_debugfs initialized
speedo_debugfs initialized
adc_debugfs initialized
clk_debugfs initialized
[0012.755] I> tegrabl_tca9539_init: i2c bus: 1, slave addr: 0x46
emc_debugfs initialized
[0012.829] E> fetch_driver_phandle_from_dt: failed to get node with compatible ti,tca9539
dvs_debugfs initialized
fmon_debugfs initialized
vmon_debugfs initialized
pg_debugfs initialized
profile_fs initialized
debugfs_cons initialized
mail_fs initialized
profile initialized
cvc_debugfs initialized
dmce_debugfs initialized
ec_debugfs initialized
rm_debugfs initialized
soctherm_debug initialized
gr_reader initialized
mods initialized
dt_fs initialized
debugfs_mrq initialized
debug_mrq initialized
debug_safereg initialized
initializing target
calling apps_init()
starting app shell
entering main console loop
] [0012.837] E> fetch_driver_phandle_from_dt: failed to get node with compatible nxp,tca9539
[0012.888] W> tegrabl_tca9539_init: failed to fetch phandle from dt
[0012.894] I> tegrabl_tca9539_init: i2c bus: 1, slave addr: 0x44
[0012.905] E> fetch_driver_phandle_from_dt: failed to get node with compatible ti,tca9539
[0012.913] E> fetch_driver_phandle_from_dt: failed to get node with compatible nxp,tca9539
[0012.916] W> tegrabl_tca9539_init: failed to fetch phandle from dt
[0012.927] I> fixed regulator driver initialized
[0012.956] I> CPU: Nvidia Carmel
[0012.957] I> CPU: MIDR: 0x4e0f0040, MPIDR: 0x80000000
[0012.957] I> chip revision : A02
[0012.957] I> Boot-device: eMMC
[0012.958] I> Boot_device: SDMMC_BOOT instance: 3
[0013.450] I> sdmmc-3 params source = boot args
[0013.451] I> sdmmc bdev is already initialized
[0013.451] I> sdmmc-3 params source = boot args
[0013.478] I> Found 17 partitions in SDMMC_BOOT (instance 3)
[0013.490] I> Found 42 partitions in SDMMC_USER (instance 3)
[0013.491] I> Recovery boot_type: 0
[0013.491] I> Entering 3p server
[0013.491] I> USB configuration success
[0016.541] I> Populate storage info
[0016.570] I> Erasing device 0: 3
[0017.701] I> Writing device 0: 3.
[0017.737] I> Found 17 partitions in SDMMC_BOOT (instance 3)
[0017.742] I> Erasing device 1: 3
[0018.500] I> Writing device 1: 3.
[0018.515] I> Writing device 1: 3.
[0018.536] I> Found 42 partitions in SDMMC_USER (instance 3)
[0018.541] I> Writing device 1: 3.
[0018.563] I> Found 42 partitions in SDMMC_USER (instance 3)
[0018.568] I> Writing mb1 partition.
[0018.694] I> Writing mb1_b partition.
[0018.735] I> Writing spe-fw partition.
[0018.768] I> Writing spe-fw_b partition.
[0018.798] I> Writing mb2 partition.
[0018.834] I> Writing mb2_b partition.
[0018.870] I> Writing mts-preboot partition.
[0018.897] I> Writing mts-preboot_b partition.
[0018.923] I> Writing SMD partition.
[0018.942] I> Writing SMD_b partition.
[0018.961] I> Writing device 1: 3.
[0018.974] I> Writing APP partition.
[0266.237] I> Writing mts-mce partition.
[0266.270] I> Writing mts-mce_b partition.
[0266.302] I> Writing mts-proper partition.
[0266.501] I> Writing mts-proper_b partition.
[0266.709] I> Writing cpu-bootloader partition.
[0266.753] I> Writing cpu-bootloader_b partition.
[0266.794] I> Writing bootloader-dtb partition.
[0266.833] I> Writing bootloader-dtb_b partition.
[0266.869] I> Writing secure-os partition.
[0266.891] I> Writing secure-os_b partition.
[0266.912] I> Writing eks partition.
[0266.938] I> Writing eks_b partition.
[0266.964] I> Writing bpmp-fw partition.
[0267.026] I> Writing bpmp-fw_b partition.
[0267.085] I> Writing bpmp-fw-dtb partition.
[0267.134] I> Writing bpmp-fw-dtb_b partition.
[0267.178] I> Writing xusb-fw partition.
[0267.196] I> Writing xusb-fw_b partition.
[0267.214] I> Writing rce-fw partition.
[0267.251] I> Writing rce-fw_b partition.
[0267.285] I> Writing adsp-fw partition.
[0267.315] I> Writing adsp-fw_b partition.
[0267.344] I> Writing sc7 partition.
[0267.372] I> Writing sc7_b partition.
[0267.398] I> Writing BMP partition.
[0267.427] I> Writing BMP_b partition.
[0267.455] I> Writing kernel partition.
[0271.669] I> Writing kernel_b partition.
[0275.966] I> Writing kernel-dtb partition.
[0276.004] I> Writing kernel-dtb_b partition.
[0276.052] I> Writing BCT partition.
[0276.126] I> Writing MB1_BCT partition.
[0276.165] I> Writing MB1_BCT_b partition.
[0276.205] I> Writing MEM_BCT partition.
[0276.242] I> Writing MEM_BCT_b partition.
[0276.277] I> Rebooting : reset-coldboot


Shutdown state requested 1
Rebooting system ...

But it seems to be stuck restarting again:

[0276.205] I> Writing MEM_BCT partition.
[0276.242] I> Writing MEM_BCT_b partition.
[0276.277] I> Rebooting : reset-coldboot


Shutdown state requested 1
Rebooting system ...

Pulled the plug, plugged power back in and booted but no output again (serial and hdmi)

@DaneLLL - the mass flash commands, does that set production mode?

Hi,

No, it does not do any fuse. Just flashes the partitions.

It it a bit strange you don’t see uart log. If it cannot boot to kernel, it should boot bootloader at least. Somehow the condition looks like it does not start booting porcess.

In README_secureboot.txt, there is a section:
Signing and Flashing Boot Files in two steps
Could you try and see if the system can boot up? At least the bootloader is triggered.

I’ll give it a go…

though I suspect this step may of set production mode,
./nvmassflashgen.sh -x 0x19 -y SBKPKC -u /storage/keys/pkc.pem -v /storage/keys/sbk.txt jetson-xavier mmcblk0p1
hence why no serial output, that may mean there’s something wrong with the keys / fuse process if nothing boots (as I can’t ssh nor ping).

Those steps are what I did at the beginning, flash in 2 steps with --no-flash flag, see at the top, I’ll try again though…

2 steps:
https://gist.github.com/thirdeye-yusuf/29c4a76d1607f7c4a2a68db9281d8814

Serial output during flash:

[0062.035] W> RATCHET: MB1 binary ratchet value 4 is too large than ratchet level 2 from HW fuses.
[0062.044] I> MB1 (prd-version: 1.5.1.2-t194-41334769-9ec1833d)
[0062.049] I> Boot-mode: RCM
[0062.052] I> Chip revision : A02
[0062.055] I> Bootrom patch version : 15 (correctly patched)
[0062.060] I> ATE fuse revision : 0x200
[0062.063] I> Ram repair fuse : 0x0
[0062.066] I> Ram Code : 0x2
[0062.069] I> rst_source : 0x0
[0062.072] I> rst_level : 0x0
[0062.075] I> USB configuration success
[0064.117] I> bct_bootrom image downloaded
[0064.134] W> MB1_PLATFORM_CONFIG: device prod data is empty in MB1 BCT.
[0064.142] I> Temperature = 17000
[0064.145] W> Skipping boost for clk: BPMP_CPU_NIC
[0064.149] W> Skipping boost for clk: BPMP_APB
[0064.154] W> Skipping boost for clk: AXI_CBB
[0064.157] W> Skipping boost for clk: AON_CPU_NIC
[0064.162] W> Skipping boost for clk: CAN1
[0064.165] W> Skipping boost for clk: CAN2
[0064.170] I> Boot-device: eMMC
[0064.173] I> Boot-device: eMMC
[0064.175] I> bct_mb1 image downloaded
[0064.194] I> ECC region[0]: Start:0x0, End:0x0
[0064.198] I> ECC region[1]: Start:0x0, End:0x0
[0064.202] I> ECC region[2]: Start:0x0, End:0x0
[0064.206] I> ECC region[3]: Start:0x0, End:0x0
[0064.210] I> ECC region[4]: Start:0x0, End:0x0
[0064.214] I> Non-ECC region[0]: Start:0x80000000, End:0x100000000
[0064.220] I> Non-ECC region[1]: Start:0x0, End:0x0
[0064.224] I> Non-ECC region[2]: Start:0x0, End:0x0
[0064.229] I> Non-ECC region[3]: Start:0x0, End:0x0
[0064.233] I> Non-ECC region[4]: Start:0x0, End:0x0
[0064.240] E> FAILED: Thermal config
[0064.247] E> FAILED: MEMIO rail config
[0064.266] I> bct_mem image downloaded
[0065.272] I> blob image downloaded
[0065.315] I> Recovery boot mode 0
[0065.402] I> MB1 done

main enter
SPE VERSION #: R01.00.14 Created: Sep 19 2018 @ 11:03:21
HW Function test
Start Scheduler.
in late init

  [0065.411] I> Welcome to MB2(TBoot-BPMP) Recovery (version: 00.00.2018.32-mobile-fdcb35a7)
[0065.412] I> DMA Heap @ [0x526fa000 - 0x52ffa000]
[0065.412] I> Default Heap @ [0xd486400 - 0xd48a400]
[0065.413] E> DEVICE_PROD: Invalid value data = 70020000, size = 0.
[0065.419] W> device prod register failed
[0065.424] I> parsing oem signed section of bpmp-fw header done
[0065.432] I> bpmp-fw binary copied from blob
[0065.436] I> RSA PSS signature check: OK
[0065.437] I> oem authentication of bpmp-fw header done
[0065.442] I> bpmp-fw: Authentication init Done
[0065.446] I> parsing oem signed section of cpubl header done
[0065.452] I> cpubl binary copied from blob
[0065.459] I> bpmp-fw: Authentication Finalize Done
[0065.462] I> RSA PSS signature check: OK
[0065.464] I> oem authentication of cpubl header done
[0065.469] I> cpubl: Authentication init Done
[0065.473] I> parsing oem signed section of tos header done
[0065.479] I> tos binary copied from blob
[0065.482] I> Relocating BR-BCT
[0065.486] I> cpubl: Authentication Finalize Done
[0065.491] I> RSA PSS signature check: OK
[0065.493] I> oem authentication of tos header done
[0065.498] I> tos: Authentication init Done
[0065.502] I> parsing oem signed section of bpmp-fw-dtb header done
[0065.509] I> bpmp-fw-dtb binary copied from blob
[0065.513] I> tos: Authentication Finalize Done
[0065.519] I> RSA PSS signature check: OK
[0065.520] I> oem authentication of bpmp-fw-dtb header done
[0065.525] I> bpmp-fw-dtb: Authentication init Done
[0065.530] I> parsing oem signed section of cpubl-dtb header done
[0065.537] I> cpubl-dtb binary copied from blob
[0065.543] I> bpmp-fw-dtb: Authentication Finalize Done
[0065.682] I> RSA PSS signature check: OK
[0065.683] I> oem authentication of cpubl-dtb header done
[0065.683] I> cpubl-dtb: Authentication init Done
[0065.684] I> parsing oem signed section of eks header done
[0065.684] I> eks binary copied from blob
[0065.687] I> cpubl-dtb: Authentication Finalize Done
[0065.689] I> RSA PSS signature check: OK
[0065.690] I> oem authentication of eks header done
[0065.693] I> eks: Authentication init Done
[0065.697] I> eks: Authentication Finalize Done
[0065.701] I> EKB detected (length: 0x410) @ VA:0x526fb800
NOTICE:  BL31: v1.3(release):
NOTICE:  BL31: Built : 14:14:17, Mar 26 2020
keystore: 705: Starting
keystore: 121: ekb_ek_derivation_test: Device is not ODM Production fused yet EKB_EK was not derived fy
keystore: 744: main: EKB_EK derivation test failed (-1)
keystore: 753: main: EKB retrieved, size=1024
keystore: 269: Acquired DMCPP
keystore: 250: End of keystore
keystore: 428: Initializing keystore services
platform_bootstrap_epilog: trusty bootstrap complete


welcome to lk
calling constructors
initializing heap
creating bootstrap completion thread
top of bootstrap2()
initializing platform
bpmp: platform_init
tag is c1b4e372932429f2737cf722e1219e71
tag_show initialized
dt initialized
mail initialized
chipid initialized
fuse initialized
sku initialized
speedo initialized
ec_get_ec_list: found 45 ecs
ec initialized
ec_mrq initialized
vmon_populate_monitors: found 3 monitors
vmon initialized
adc initialized
fmon_populate_monitors: found 73 monitors
fmon initialized
fmon_mrq initialized
reset initialized
nvhs initialized
392 clocks registered
clk_mrq_init: mrq handler registered
clk initialized
nvlink initialized
io_dpd initialized
io_dpd initialized
thermal initialized
i2c5 controller initialized
initialized i2c mrq handling
i2c initialized
regulator initialized
avfs_clk_platform initialized
soctherm initialized
aotag initialized
powergate initialized
dvs initialized
pm initialized
pg_late initialized
strap initialized
tag initialized
emc initialized
clk_dt initialized
avfs_ccplex_platform initialized
tj_max: dt node not found
tj_init initialized
/uphy is not enabled status = disabled
uphy_dt initialized
uphy initialized
safereg initialized

  mrq initialized
[0066.110] I> Welcome to TBoot-CPU Recovery
fmon_post initialized
[0066.111] I> Heap: [0xa4000000 ... 0xaa000000
[0066.114] I> gpio framework initialized
[0066.124] I> tegrabl_gpio_driver_register: register 'nvidia,tegra194-gpio' driver
clk_dt_late initialized
machine_check initialized
[0066.130] I> tegrabl_gpio_driver_register: register 'nvidia,tegra194-gpio-aon' driverpm_post initi   d
dbells initialized
avfs_clk_platform_post initialized
dmce initialized
cvc initialized
ccplex_avfs_hw_init: nafll_cluster0: not monitored
ccplex_avfs_hw_init: nafll_cluster1: not monitored
ccplex_avfs_hw_init: nafll_cluster2: not monitored
ccplex_avfs_hw_init: nafll_cluster3: not monitored
avfs_clk_mach_post initialized
regulator_post initialized
rm initialized
sc7_diag initialized
thermal_test initialized
serial_late initialized
clk_post initialized
clk_dt_post initialized
mc_reg initialized
pg_post initialized
dyn_modules initialized
sku_debugfs initialized
speedo_debugfs initialized
adc_debugfs initialized
clk_debugfs initialized

[0066.198] I> tegrabl_tca9539_init: i2c bus: 1, slave addr: 0x46
emc_debugfs initialized
[0066.210] E> fetch_driver_phandle_from_dt: failed to get node with compatible ti,tca9539dvs_debugf   d
fmon_debugfs initialized
vmon_debugfs initialized
pg_debugfs initialized
profile_fs initialized
debugfs_cons initialized
mail_fs initialized
profile initialized
cvc_debugfs initialized
dmce_debugfs initialized
ec_debugfs initialized
rm_debugfs initialized
soctherm_debug initialized
gr_reader initialized
mods initialized
dt_fs initialized
debugfs_mrq initialized
debug_mrq initialized
debug_safereg initialized
initializing target
calling apps_init()
starting app shell
entering main console loop
]
[0066.267] E> fetch_driver_phandle_from_dt: failed to get node with compatible nxp,tca9539
[0066.270] W> tegrabl_tca9539_init: failed to fetch phandle from dt
[0066.276] I> tegrabl_tca9539_init: i2c bus: 1, slave addr: 0x44
[0066.286] E> fetch_driver_phandle_from_dt: failed to get node with compatible ti,tca9539
[0066.294] E> fetch_driver_phandle_from_dt: failed to get node with compatible nxp,tca9539
[0066.298] W> tegrabl_tca9539_init: failed to fetch phandle from dt
[0066.308] I> fixed regulator driver initialized
[0066.337] I> CPU: Nvidia Carmel
[0066.337] I> CPU: MIDR: 0x4e0f0040, MPIDR: 0x80000000
[0066.338] I> chip revision : A02
[0066.338] I> Boot-device: eMMC
[0066.338] I> Boot_device: SDMMC_BOOT instance: 3
[0066.839] I> sdmmc-3 params source = boot args
[0066.839] I> sdmmc bdev is already initialized
[0066.840] I> sdmmc-3 params source = boot args
[0066.866] I> Found 17 partitions in SDMMC_BOOT (instance 3)
[0066.879] I> Found 42 partitions in SDMMC_USER (instance 3)
[0066.879] I> Recovery boot_type: 0
[0066.880] I> Entering 3p server
[0066.880] I> USB configuration success
[0067.006] I> Populate storage info
[0067.049] I> Erasing device 0: 3
[0068.183] I> Writing device 0: 3.
[0068.218] I> Found 17 partitions in SDMMC_BOOT (instance 3)
[0068.224] I> Erasing device 1: 3
[0068.958] I> Writing device 1: 3.
[0068.975] I> Writing device 1: 3.
[0068.999] I> Found 42 partitions in SDMMC_USER (instance 3)
[0069.006] I> Writing device 1: 3.
[0069.030] I> Found 42 partitions in SDMMC_USER (instance 3)
[0069.036] I> Writing mb1 partition.
[0069.165] I> Writing mb1_b partition.
[0069.208] I> Writing spe-fw partition.
[0069.242] I> Writing spe-fw_b partition.
[0069.278] I> Writing mb2 partition.
[0069.316] I> Writing mb2_b partition.
[0069.357] I> Writing mts-preboot partition.
[0069.385] I> Writing mts-preboot_b partition.
[0069.413] I> Writing SMD partition.
[0069.435] I> Writing SMD_b partition.
[0069.455] I> Writing device 1: 3.
[0069.472] I> Writing APP partition.
[0336.899] I> Writing mts-mce partition.
[0336.938] I> Writing mts-mce_b partition.
[0336.984] I> Writing mts-proper partition.
[0337.202] I> Writing mts-proper_b partition.
[0337.426] I> Writing cpu-bootloader partition.
[0337.490] I> Writing cpu-bootloader_b partition.
[0337.555] I> Writing bootloader-dtb partition.
[0337.607] I> Writing bootloader-dtb_b partition.
[0337.652] I> Writing secure-os partition.
[0337.685] I> Writing secure-os_b partition.
[0337.722] I> Writing eks partition.
[0337.753] I> Writing eks_b partition.
[0337.786] I> Writing bpmp-fw partition.
[0337.858] I> Writing bpmp-fw_b partition.
[0337.928] I> Writing bpmp-fw-dtb partition.
[0337.990] I> Writing bpmp-fw-dtb_b partition.
[0338.040] I> Writing xusb-fw partition.
[0338.067] I> Writing xusb-fw_b partition.
[0338.093] I> Writing rce-fw partition.
[0338.135] I> Writing rce-fw_b partition.
[0338.186] I> Writing adsp-fw partition.
[0338.228] I> Writing adsp-fw_b partition.
[0338.263] I> Writing sc7 partition.
[0338.298] I> Writing sc7_b partition.
[0338.331] I> Writing BMP partition.
[0338.366] I> Writing BMP_b partition.
[0338.398] I> Writing kernel partition.
[0342.231] I> Writing kernel_b partition.
[0346.063] I> Writing kernel-dtb partition.
[0346.111] I> Writing kernel-dtb_b partition.
[0346.187] I> Writing BCT partition.
[0346.282] I> Writing MB1_BCT partition.
[0346.342] I> Writing MB1_BCT_b partition.
[0346.402] I> Writing MEM_BCT partition.
[0346.456] I> Writing MEM_BCT_b partition.
[0346.546] I> Rebooting : reset-coldboot


Shutdown state requested 1
Rebooting system ...

Stuck again!

Summary of actions to help with troubleshooting:

Timeline of commands to help with troubleshooting.

Generation of keys, pbk, sbk, kek2.

cd /storage/keys
openssl genrsa -out /storage/keys/pkc.pem 2048

SBK=$(openssl rand -hex 32)
for i in {0..3}; do
        start=$(( $i * 8 ))
        length=8
        printf "0x%s" ${SBK:$start:$length} >> sbk.txt
        if [ $i != 3 ]; then
                printf " " >> sbk.txt
        fi
done

KEK2=$(openssl rand -hex 16)
printf "0x%s" $KEK2 > kek2.txt

Offline fuse package generation

cd /storage/Linux_for_Tegra
./odmfuse.sh -j -i 0x19 -c PKC -k /storage/keys/pkc.pem \
-S /storage/keys/sbk.txt \
--KEK2 /storage/keys/kek2.txt \
--noburn \
jetson-xavier mmcblk0p1

Fuse attempt

tar xpf fuseblob.tbz2
cd bootloader
./fusecmd.sh

# logs https://forums.developer.nvidia.com/t/unable-to-burn-fuses-dev-kit-no-more-output-serial-hdmi-bricked/117585

...
[   2.8667 ] Stat for RECFILE failed
[   2.8668 ]
Error: Return value 4
Command tegrahost_v2 --chip 0x19 0 --partitionlayout flash.xml.bin --list images_list.xml zerosbk
...

2nd attempt using odmfuse.sh directly

root@ubuntu:/storage/Linux_for_Tegra# ./odmfuse.sh -j -i 0x19 -c PKC -k /storage/keys/pkc.pem -S /storage/keys/sbk.txt --KEK2 /storage/keys/kek2.txt jetson-xavier

Error: Cannot fuse non-production board.

Apply patch to odmfuse.sh - Unable to burn fuses (dev kit) / no more output (serial/hdmi) / bricked? - #4 by DaneLLL
Output - Unable to burn fuses (dev kit) / no more output (serial/hdmi) / bricked? - #5 by yusufftran

copied and ran tegrafuse on jetson and all values were 0

Reverted to original odmfuse.sh, applied different patch, removed keys from odmfuse_pkc.xml and ran fusecmd.sh

Error, suspected needed to generate new fuseblob after patch so generated and ran again

This is when it started acting strange whilst running fusecmd.sh, it would reboot into the OS and fusecmd complains of USB communication errors.

Tried to run odmfuse.sh directly - Unable to burn fuses (dev kit) / no more output (serial/hdmi) / bricked? - #13 by yusufftran
Error: Return value 3

Tried again but supply explicit environment variables

This seemed to go well but it got stuck at rebooting.

Now is the point when there’s no serial output or hdmi output and nothing appears to be booting.

Various steps to flash directly with ./flash.sh and following the mass flash process all yielded the same result. Though there was a failure with ./nvmflash.sh on first attempt
Unable to burn fuses (dev kit) / no more output (serial/hdmi) / bricked? - #25 by yusufftran but succeeds on 2nd attempt with --showlogs flag.

Anyone know of a way to query the fuse values to confirm the values for pkc, sbk and kek2?

Hi,
Please follow

And check if you can see log of booting. You should see some initial prints at least. A bit strange none is printed.

Nothing is printed after flashing.

May I know how is your setup and connection on xavier? How is your host setup? Which port did you read for UART log?

Using a mac with an ubuntu VM via virtual box and usb filter / pass through ‘Nvidia Corp…’, and serial connection (micro usb) direct from mac using minicom, (would use screen but it seems buggy).

I use the VM to flash, no issue with usb ports when using virtual box usb filter / passthrough.

Flashing and serial console output was fine before fuse process.

Hi,
Do you have X86 host running Ubuntu 16.04 and 18.04? This is listed in prerequisites. Using VM as host is not verified and may misbehave.

Right now it looks like Xavier does not boot at all. We would need some time to discuss about how to debug further under the condition,

Yes, X86 host but it’s a mac (laptop), VM is ubuntu 18.04 running under VirtualBox.
usb passthrough / filter (for flashing)

Hi,
You probably misunderstand the prerequisites. It has to be X86 host running Ubuntu OS(16.04 or 18.04). Running through VM is not suggested.

Assuming the VM isn’t an issue, can you see a problem with my previous steps?