This project contains a set of scripts to automate the secure boot process outlined in the Nvidia L4T Development Guide
The scripts are currently hard-coded to use Jetson TX2 as the target.
The scripts contain a patch provided by Matt Madison (see this link) which fixes fuse programming steps on Jetson TX2.
Run
./download-and-prepare-files.sh
Put your device in recovery mode, then run
./flashing-and-booting.sh
Verify your device boots successfully
Run
./installing-secureboot.sh
To install secureboot
Follow the instructions in Generating the RSA Key Pair to generate a key file, name it rsa_priv.pem and place it in the same directory as the scripts.
Run
./burn-pkc.sh
To burn the PKC fuse on the part
Run
./signing-pkc.sh
To sign your local images
Put your device in recovery mode. Run
./bootloader-flash-signed.sh
To write signed images to the part