This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

secure boot

Note: This was originally posted on 5th August 2010 at http://forums.arm.com

Hallo,

I really need to know on how to write or get the secure boot code for ARM1176.
One more question is: If the secure boot code is located in internal ROM, what should I do to write the code in that location. (I have full set ARM1176 deve.board and RVDS 4.0)

** Is there any tutorial for new user like me....(boot --> secure mode --> load 2nd boot --> NSC mode --> load OS) for example..
Really really need help.Please some one guide me.
  • Note: This was originally posted on 6th August 2010 at http://forums.arm.com

    Some ideas about secure boot here (although only at a a very high level):

    [url="http://infocenter.arm.com/help/topic/com.arm.doc.prd29-genc-009492c/CACGCHFE.html"]infocenter.arm.com/.../url]

    For a development board you won't be able to change the ROM - hence the "read-only" part of the name - so you will have to emulate the secure boot. If you are looking to buy an off-the-shelf chip then secure boot is often an advertised feature, as it is something which much be built-in by the silicon vendor during device manufacture. As you are finding, you can't add it afterwards (unless there is some form of write-once Flash or metal fuse, but unusual for large regions suitable for code). If you are building your own chip, then part of the process will be defining your own ROM mask to use when the chip is manufactured.


    **** May I know to emulate secure boot. What emulator do I need to use.
    Thank you for your reply. Reaaly appreciate your suggestion.
  • Note: This was originally posted on 5th August 2010 at http://forums.arm.com

    Hallo,

    I really need to know on how to write or get the secure boot code for ARM1176.
    One more question is: If the secure boot code is located in internal ROM, what should I do to write the code in that location. (I have full set ARM1176 deve.board and RVDS 4.0)

    ** Is there any tutorial for new user like me....(boot --> secure mode --> load 2nd boot --> NSC mode --> load OS) for example..
    Really really need help.Please some one guide me.



    Interesting,, You have board that means you have device that means it must have some ROM code... ROM is read only memory so you can not write it..I think you need it for some other Device for which ROM still has to burn?? 


    Kedar
    One all Digital world will be in my ARMs
  • Note: This was originally posted on 5th August 2010 at http://forums.arm.com

    ** Is there any tutorial for new user like me....(boot --> secure mode --> load 2nd boot --> NSC mode --> load OS) for example.


    Some ideas about secure boot here (although only at a a very high level):

    [url="http://infocenter.arm.com/help/topic/com.arm.doc.prd29-genc-009492c/CACGCHFE.html"]http://infocenter.arm.com/help/topic/com.a...c/CACGCHFE.html[/url]

    For a development board you won't be able to change the ROM - hence the "read-only" part of the name - so you will have to emulate the secure boot. If you are looking to buy an off-the-shelf chip then secure boot is often an advertised feature, as it is something which much be built-in by the silicon vendor during device manufacture. As you are finding, you can't add it afterwards (unless there is some form of write-once Flash or metal fuse, but unusual for large regions suitable for code). If you are building your own chip, then part of the process will be defining your own ROM mask to use when the chip is manufactured.
  • Note: This was originally posted on 6th August 2010 at http://forums.arm.com

    **** May I know to emulate secure boot. What emulator do I need to use.


    I wasn't talking about a specific emulator - "emulate" as in "pretend" that it is in ROM.

    For example, booting the secure device and loading the "ROM" from a Flash device is normally good enough for development purposes. But it isn't secure by any means, but the code will work and you can test that the logic is correct. I nthe real device you would actually place the "ROM" in physical ROM, obviously ...