Syntax
[spk_select = <options>]or
[auth_params] spk_select = <options>Description
Options are:
- spk-efuse: Indicates that spk_id eFUSE is used for that partition. This is the default value.
- user-efuse: Indicates that user eFUSE is used for that partition.
Partitions loaded by CSU ROM will always use spk_efuse.
Note: The
The user eFUSE specifies which key ID is
not valid (has been revoked). Hence, the
firmware (non-ROM) checks to see if a given user eFUSE that represents the SPK ID has
been programmed. spk_id eFUSE specifies which key is valid. Hence, the ROM checks the
entire field of spk_id eFUSE against the SPK ID to
make sure its a bit for bit match.spk_select = user-efuse indicates that
user eFUSE will be used for that partition.Example
the_ROM_image:
{
[auth_params]ppk_select = 0
[pskfile]psk.pem
[sskfile]ssk1.pem
[
bootloader,
authentication = rsa,
spk_select = spk-efuse,
spk_id = 0x5,
sskfile = ssk2.pem
] zynqmp_fsbl.elf
[
destination_cpu =a53-0,
authentication = rsa,
spk_select = user-efuse,
spk_id = 0xF,
sskfile = ssk3.pem
] application1.elf
[
destination_cpu =a53-0,
authentication = rsa,
spk_select = spk-efuse,
spk_id =0x5,
sskfile = ssk4.pem
] application2.elf
}