To program the AES key into the BBR, right-click FPGA in the Hardware window, and select Program BBR Key.
The Program BBR Key dialog box appears.
In the Program BBR Key dialog box, specify the AES key file (.nky) and Enable DPA PROTECT as follows.
- Specify the AES key file (.nky) by typing the file name or navigating to the desired file. After specifying a valid .nky file, the AES key field automatically fills in.
- Check the Enable DPA PROTECT check box.
- Specify the DPA_COUNT value. The valid range is 1–256 when enabled.Note: For more details on the BBR AES key and DPA_PROTECT feature refer to the UltraScale Architecture Configuration User Guide (UG570).
- Click OK, to have the Hardware Manager program load the key into the BBR.
- After programming the key, program the FPGA with an encrypted bitstream that was encrypted using the same AES key as was loaded into BBR and had BBRAM selected as the specified encryption key location. .
verify_hw_devicesis performed on the BBR key, an error will be shown. To verify the BBR key, the user should test this by programming the FPGA with a bitstream that has the key. Vivado does not support any post BBR program verify option to verify the programmed BBR key.