Jump to content

RidgeRun Platform Security Manual/Getting Started/Secure Boot: Difference between revisions

Line 474: Line 474:
* kernel-dtb images (in rootfs, and kernel-dtb and recovery-dtb partitions)
* kernel-dtb images (in rootfs, and kernel-dtb and recovery-dtb partitions)
* BOOTAA64.efi
* BOOTAA64.efi
==== Set up working directory ====
{{review|do we need to download this again or we can use the one we presented in secure boot?|lleon}}
Create a working directory. For this example it is going to be nvidia-jetson:
<syntaxhighlight lang="bash">
mkdir nvidia-jetson
</syntaxhighlight>
Download the Driver Package (BSP) and Sample Root Filesystem from the drivers section on the following [https://docs.nvidia.com/jetson/archives/r36.4/DeveloperGuide/SD/Security/SecureBoot.html#uefi-secure-boot link]. Extract the downloaded files with the following commands:
<syntaxhighlight lang=bash>
tar xf Jetson_Linux_R36.4.0_aarch64.tbz2 -C nvidia-jetson/
sudo tar xpf Tegra_Linux_Sample-Root-Filesystem_R36.4.0_aarch64.tbz2 -C \
nvidia-jetson/Linux_for_Tegra/rootfs
</syntaxhighlight>
Run the following scripts inside the Linux for tegra directory:
<syntaxhighlight lang=bash>
cd nvidia-jetson/Linux_for_Tegra
sudo ./tools/l4t_flash_prerequisites.sh
sudo ./apply_binaries.sh
</syntaxhighlight>
Output should look like the following:
<syntaxhighlight lang="bash">
.
.
.
L4T BSP package installation completed!
Disabling NetworkManager-wait-online.service
Disable the ondemand service by changing the runlevels to 'K'
Success!
</syntaxhighlight>
(Optional) Create a Default User
<syntaxhighlight lang=bash>
sudo ./tools/l4t_create_default_user.sh -u <user_name> -p <password>
</syntaxhighlight>
And we are ready to start the process to enable UEFI Secure Boot.


==== To enable UEFI Secure Boot, first install the following dependencies: ====
==== To enable UEFI Secure Boot, first install the following dependencies: ====
168

edits

Cookies help us deliver our services. By using our services, you agree to our use of cookies.