fsbl_config - fsbl_config - 2026.1 English - UG1283

Syntax

[fsbl_config <options>] <partition>

Description

This option specifies the parameters used to configure the boot image. FSBL, which must run on A53 in 64-bit mode in Boot Header authentication mode.

Arguments

• bh_auth_enable: Boot Header Authentication Enable: The device RSA-authenticates the bootimage but skips verifying the PPK hash and SPK ID.
• auth_only: Boot image is only RSA signed.Do not decrypt the FSBL. See the Zynq UltraScale+ Device Technical Reference Manual (UG1085) for more information.
• opt_key: The operational key decrypts block 0. Secure Header has the opt key.
• pufhd_bh: The Boot Header stores PUF helper data (default is efuse). Bootgen receives the PUF helper data file through the [puf_file] option.
• puf4kmode: This option tunes the PUF to a 4 k bit configuration. The default is 12 k bit.
• shutter = <value>: 32-bit PUF_SHUT register value to configure PUF for shutter offset time and shutter open time.
  Note: Ensure this shutter value matches the shutter value used during PUF registration.

Example

all:
{
	[fsbl_config] bh_auth_enable
	[pskfile] primary.pem
	[sskfile]secondary.pem
	[bootloader,destination_cpu=a53-0,authentication=rsa] fsbl.elf
}