The following figure shows RSA signing of partitions. From a secure facility, Bootgen signs partitions using the Secret key. The following steps describe the signing process:
- The Authentication Certificate (AC) stores PPK and SPK.
- Sign the SPK with the PSK to obtain the SPK signature; store it as part of the AC.
- Use the SSK to sign the partition and obtain its signature. Populate it in the AC.
- The device appends or prepends the AC to each partition selected for authentication.
- The device hashes and stores the PPK in eFUSE.
Figure 1. RSA Partition Signature
The following table shows the options for Authentication.
| Key | Name | Description | Supported File Format |
|---|---|---|---|
| PPK | Primary Public Key | This key is used to authenticate a partition. It should always be specified when authenticating a partition. |
*.pem *.pub |
| PSK | Primary Secret Key | This key is used to authenticate a partition. It should always be specified when authenticating a partition. |
*.pem |
| SPK | Secondary Public Key | This key, when specified, is used to authenticate a partition. |
*.pem *.pub |
| SSK | Secondary Secret Key | This key, when specified, is used to authenticate a partition. |
*.pem pub |