spk_select - 2021.2 English

Bootgen User Guide (UG1283)

Document ID
UG1283
Release Date
2021-10-22
Version
2021.2 English

Syntax

[spk_select = <options>]

or


[auth_params] spk_select = <options>

Description

Options are:

  • spk-efuse: Indicates that spk_id eFUSE is used for that partition. This is the default value.
  • user-efuse: Indicates that user eFUSE is used for that partition.

Partitions loaded by CSU ROM will always use spk_efuse.

Note: The spk_id eFUSE specifies which key is valid. Hence, the ROM checks the entire field of spk_id eFUSE against the SPK ID to make sure its a bit for bit match.
The user eFUSE specifies which key ID is not valid (has been revoked). Hence, the firmware (non-ROM) checks to see if a given user eFUSE that represents the SPK ID has been programmed. spk_select = user-efuse indicates that user eFUSE will be used for that partition.

Example

the_ROM_image:
{
	[auth_params]ppk_select = 0
	[pskfile]psk.pem
	[sskfile]ssk1.pem

	[
	  bootloader,
	  authentication = rsa,
	  spk_select = spk-efuse,
	   spk_id = 0x5,
	  sskfile = ssk2.pem
	] zynqmp_fsbl.elf

	[
	  destination_cpu =a53-0,
	  authentication = rsa,
	  spk_select = user-efuse,
	  spk_id = 0xF, 
	  sskfile = ssk3.pem
	] application1.elf

	[
	  destination_cpu =a53-0,
	  authentication = rsa,
	  spk_select = spk-efuse,
	  spk_id =0x5,
	  sskfile = ssk4.pem
	] application2.elf
}