boot_config - boot_config - 2026.1 English - UG1283

Syntax

boot_config { <options> }

Description

This attribute specifies the parameters that configure the boot image. The options are:

• bh_auth_enable: Boot Header authentication enable, authenticating the bootimage while excluding the verification of PPK hash and SPK ID.
  Note: Versal AI Edge Series Gen 2, Versal Prime Series Gen 2, and Spartan UltraScale+ do not require bh_auth_enable.
• pufhd_bh: Boot header stores PUF helper data; by default, efuse does. Use the puf_file option to pass the PUF helper data file to Bootgen.
• puf4kmode: Set PUF to use a 4K-bit syndrome configuration (default is 12K-bit).
  Note: For Versal AI Edge Series Gen 2, Versal Prime Series Gen 2, and Spartan UltraScale+, it is 4K.
• shutter = <value>: 32-bit PUF_SHUT register value to configure PUF for shutter offset time and shutter open time.
• smap_width = <value>: Defines the SelectMAP (SMAP) bus width.

  Options are:

  • 8,16, 32 for monolithic/Master SLR (with default 32-bit)
  • 0 for SSI technology Slave SLRs only
  Note: Set smap_width=0 for SSI technology Slave SLRs to indicate the internal downstream connection. Do not change this option value; it applies only to SSI technology Slave SLRs.
• dpacm_enable: DPA Counter Measure Enable
• a_hwrot: Asymmetric hardware root of trust (A-HWRoT) boot mode. Bootgen checks against the design rules for A-HWRoT boot mode. Valid only for production PDIs.
• s_hwrot: Asymmetric hardware root of trust (S-HWRoT) boot mode. Bootgen checks against the design rules for S-HWRoT boot mode. Valid only for production PDIs.

Examples

example_1:
{
    boot_config {bh_auth_enable, smap_width=16 }
    pskfile = primary0.pem
    sskfile = secondary0.pem
    image
    {
        {type=bootloader, authentication=rsa, file=plm.elf}
        {type=pmcdata, load=0xf2000000, file=pmc_cdo.bin}
    }
}