fsbl_config - 2024.1 English

Bootgen User Guide (UG1283)

Document ID
Release Date
2024.1 English


[fsbl_config <options>] <partition>


This option specifies the parameters used to configure the boot image. FSBL, which should run on A53 in 64-bit mode in Boot Header authentication mode.


  • bh_auth_enable: Boot Header Authentication Enable: RSA authentication of the bootimage is done excluding the verification of PPK hash and SPK ID.
  • auth_only: Boot image is only RSA signed. FSBL should not be decrypted. See the Zynq UltraScale+ Device Technical Reference Manual (UG1085) for more information.
  • opt_key: Operational key is used for block-0 decryption. Secure Header has the opt key.
  • pufhd_bh: PUF helper data is stored in Boot Header (default is efuse). PUF helper data file is passed to Bootgen using the [puf_file] option.
  • puf4kmode: PUF is tuned to use in 4 k bit configuration (default is 12 k bit).
  • shutter = <value>: 32-bit PUF_SHUT register value to configure PUF for shutter offset time and shutter open time.
    Note: This shutter value must match the shutter value that was used during PUF registration.


	[fsbl_config] bh_auth_enable
	[pskfile] primary.pem
	[bootloader,destination_cpu=a53-0,authentication=rsa] fsbl.elf