130
edits
RidgeRun Platform Security Manual/Getting Started/Secure Boot: Difference between revisions
RidgeRun Platform Security Manual/Getting Started/Secure Boot (view source)
Revision as of 20:02, 4 March 2025
, 4 March→Generate the UEFI Secure Boot DTBO
| Line 203: | Line 203: | ||
==== Generate the UEFI Secure Boot DTBO ==== | ==== Generate the UEFI Secure Boot DTBO ==== | ||
This device tree blob overlay is used to store the security keys in the form of UEFI authenticated variable. It is used during flashing time. To generate it: | This device tree blob overlay is used to store the security keys in the form of UEFI authenticated variable. It is used during flashing time. To generate it, first, move to the Linux for Tegra folder: | ||
<syntaxhighlight lang="bash"> | |||
cd .. | |||
</syntaxhighlight> | |||
Use the gen_uefi_keys_dts script to generate it: | |||
<syntaxhighlight lang="bash"> | <syntaxhighlight lang="bash"> | ||
sudo tools/gen_uefi_keys_dts.sh uefi_keys/uefi_keys.conf | sudo tools/gen_uefi_keys_dts.sh uefi_keys/uefi_keys.conf | ||
</syntaxhighlight> | </syntaxhighlight> | ||
You should get the following file on the uefi_keys directory: | |||
==== Flash the board with the --uefi_keys option ==== | ==== Flash the board with the --uefi_keys option ==== | ||