Generating All of the AES Keys - 2025.1 English - UG1209

When all the desired encryption features have been enabled, you can generate all key files by running Bootgen. Some of the source files (for example, ELF) contain multiple sections. These individual sections will be mapped to separate partitions, and each partition will have a unique key file. In this case, the key file will be appended with a “.1.”. For example, if the pmufw.elf file contains multiple sections, both a pmufw.nky and a pmufw.1.nky file will be generated.

1. Create all of the necessary NKY files by running the bootgen command that creates the final BOOT.bin image.

   bootgen -p zcu9eg -arch zynqmp -image key_generation.bif
   

2. Verify that the NKY files were generated. These file should include edt_zcu102_wrapper.nky, fsbl_a53.nky, pmu_fw.nky, pmu_fw.1.nky, pmu_fw.2.nky, tmr_psled_r5.nky, and tmr_psled_r5.1.nky.