Syntax
-authenticatedjtag <algorithm> [filename]
Description
Generates an Authenticated JTAG message that authenticates a JTAG debug session
during secure boot. The message is signed with the
BIF-rootpskfile/sskfile; the corresponding
ppkfile/spkfile are embedded in the message.
Per-partition key overrides do not apply.
Use the authjtag_config BIF block to set the message attributes
(revoke_id,spk_revoke_id,
device_dna, jtag_timeout,
authjtag_sign). See authjtag_config { ... } in BIF Attribute Reference.
Arguments
<algorithm>: One of the following (support varies by architecture; see the following table):
- rsa
- ecdsa
- lms_sha256
- lms_shake256
- hss_sha256
- hss_shake256
- [filename]: Optional output file name. If omitted, the default authenticatedJtagImage-.bin` is used.
Supported Architecture
| Algorithm | versal | versal_2ve_2vm | spartanup |
|---|---|---|---|
rsa
|
Yes | Yes | Yes |
ecdsa
|
Yes | Yes | Yes |
lms-sha256
|
Yes | ||
lms-shake256
|
Yes | Yes | |
hss-sha256
|
Yes | ||
hss-shake256
|
Yes |
Example
```
bootgen -arch versal_2ve_2vm -image boot.bif -w -o BOOT.bin \
-authenticatedjtag rsa authJtag-rsa.bin
```