Trenz Electronic GmbH Support Forum

Trenz Electronic Products => UltraScale => Topic started by: Kle on September 16, 2020, 09:32:29 AM

Title: TE0820: encrypt binfile - fsbl
Post by: Kle on September 16, 2020, 09:32:29 AM
Hello

I have a binfile for TEß820 (bare metal, generated from : using fsbl.elf file from Trenz, design (bit-file) and a Program(elf-file))
This flow works fine.
Now I need to encrypt this bin file. I ticked the "Use Encrypted" option in the "Creat Boot Image" of Vitis
and got following error measage:
[ERROR]  : Key Source can be enabled only if bootloader is encrypted or auth_only is used in [fsbl_config] attribute.

Is there an easy way to generate a encrypted fsbl file ?

Thanks   Kle
Title: Re: TE0820: encrypt binfile - fsbl
Post by: JH on September 17, 2020, 07:37:50 AM
Hi,
I have not much experience with encrypting.
So please check Xilinx documentation for secured boot and encrypting:
https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/18841763/Zynq+UltraScale+MPSoC+Secure+Boot
https://www.xilinx.com/html_docs/xilinx2020_1/vitis_doc/boottimesecurity.html
https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/18842019/Zynq+UltraScale+FSBL

And maybe it's also good to check Xilinx forum or write also a post there, because this is more a Xilinx device specific question, which is independent from the module.

br
John