Differences

This shows you the differences between two versions of the page.

--- products:sbc:vim3:applications:secureboot [2023/08/30 02:36]
nick
+++ products:sbc:vim3:applications:secureboot [2023/08/30 02:48] (current)
nick
@@ Line 8: / Line 8: @@
 If you want to enable the Secureboot feature, you can follow this documentation to apply extra patches and sign the image.
+<WRAP important >
+  * Only support eMMC installation image.
+</WRAP>
 ===== Warning =====
@@ Line 58: / Line 63: @@
 {{:products:sbc:vim3:applications:secureboot-3.webp?600|}}
-The path of generated keys is in the ''key'' directory within the current sign tool's directory, named after the current time, e.g.
+The path of generated keys is in the ''key'' directory within the current sign tool's directory, named after the current time:
 {{:products:sbc:vim3:applications:secureboot-4.webp?600|}}
@@ Line 69: / Line 74: @@
 ===== Encrypt the image =====
+<WRAP important >
+  * Only support sign tool under Windows system.
+</WRAP>
 Also using the sign tool ''AmlEToolV3.exe'', select ''Entire'', import the ''User Key'', which is the file ''aml-user-key.sig'' generated before,
-and also check ''Only_BootLoader_Encrypt'' and ''Disable OTA sign''. Then, import the image that needs to be encrypted in the ''Input'':
+and also check ''Only_BootLoader_Encrypt'' and ''Disable OTA sign''. Then import the image that needs to be encrypted in the ''Input'':
 {{:products:sbc:vim3:applications:secureboot-5.webp?600|}}
@@ Line 93: / Line 100: @@
 After successful signing, a new encrypted image will be generated in the original image directory, with a filename containing the ''secureboot'' suffix,
-e.g. if the orignal file is ''vim3-ubuntu-22.04-server-linux-4.9-fenix-1.5.2-230830-emmc-develop.img'', then the encrypted image is ''vim3-ubuntu-22.04-server-linux-4.9-fenix-1.5.2-230830-emmc-develop.20230830105011.secureboot.img''
+e.g. if the orignal file is ''vim3-ubuntu-22.04-server-linux-4.9-fenix-1.5.2-230830-emmc-develop.img'', then the encrypted image is ''vim3-ubuntu-22.04-server-linux-4.9-fenix-1.5.2-230830-emmc-develop.20230830105011.secureboot.img''.
@@ Line 101: / Line 108: @@
 ===== Flash encrypted image  =====
+<WRAP important >
+  * Only support USB flash tool under Windows system.
+</WRAP>
-Download and install the [[dl>products/vim3/tool/usb_burning_tool_v2.2.0.zip | USB flash tool), after installation, you need to copy the previously generated file
+Download and install the [[dl>products/vim3/tool/usb_burning_tool_v2.2.0.zip | USB flash tool]], after installation, you need to copy the previously generated file
 ''SECURE_BOOT_SET'' to the ''licence'' directory within the USB tool installation directory，e.g. ''C:\Program Files (x86)\Amlogic\USB_Burning_Tool\license''.
@@ Line 114: / Line 124: @@
 <WRAP important >
 The key can only be flashed once, meaning you should only check ''secure_boot_set'' during the first encryption image flash.
-Do not check it again for subsequent flashes or it will fail.
+Do not check it again for next time flashing with the same board.
 </WRAP>
+===== See Also  =====
+You can find some documentations about how to flash the keys with Amlogic USB Flash Tool from the USB Flash Tool: ''About->Key Help'' and ''About->Burning Key Instruction'':
+{{:products:sbc:vim3:applications:secureboot-12.webp?600|}}

Khadas Docs

User Tools

Site Tools

Differences

Page Tools