RK3399 Efuse Operation Instructions V1.00 20190214

User Manual:

Open the PDF directly: View PDF PDF.
Page Count: 17

DownloadRK3399 Efuse Operation Instructions V1.00 20190214
Open PDF In BrowserView PDF
http://www.rock-chips.com/

ecurity Class: Top-Secret (

)

Secret (

)

Internal (

)

Public ( √ )

RK3399_Efuse_Operation_Instructions
(Technical Department, R & D Dept. II)
Status:

Version:

V1.00

[ ] Modifying

Author:

Wu Liangqing, Wei Jianxing

[√] Released

Date:

2019-2-14

Auditor:
Date:

Fuzhou Rockchips Electronics Co., Ltd
(All rights reserved)

http://www.rock-chips.com/

Revision History
Version no.

Author

Revision Date

V1.00

Wu Liangqing,

2019-2-14

Wei Jianxing

Revision description
Initial version release

Remark

http://www.rock-chips.com/

Content
Preface............................................................................................................................................................ 1
1

2

Windows tools signature step........................................................................................................2
1.1

Generate public keys and private keys..................................................................... 2

1.2

Signature firmware............................................................................................................ 4

1.3

Programme efuse............................................................................................................... 7

1.4

Burning signature firmware........................................................................................... 9

Linux tools signature step............................................................................................................ 11
2.1

Generate Key Pairs.......................................................................................................... 11

2.2

Sign firmware.................................................................................................................... 11

2.3

Sign loader......................................................................................................................... 11

2.4

Package update.img....................................................................................................... 11

2.5

Sign update.img md5.....................................................................................................11

2.6

RK3399 commands......................................................................................................... 11

3

Make efuse ota update.zip........................................................................................................... 12

4

Efuse power up................................................................................................................................. 13

http://www.rock-chips.com/

Preface
Overview
This document mainly describes Rockchip RK3399 efuse burning method and other
related notices.

Product version
Chip name

Kernel version

RK3399

Linux4.4

Object
This document (guide) is mainly suitable for below engineers:
Field application engineers
Software development engineers

1

Android version

http://www.rock-chips.com/

1 Windows tools signature step
1.1 Generate public keys and private keys
1) Open tools “SecureBootTool v.1.85”

2) Select chip:3399

2

http://www.rock-chips.com/

3) Select “Encrpyt” type: efuse

4) Select “Generate Key Pairs” to create key

5) Create successfully and save

3

http://www.rock-chips.com/

6) After saving the following key file

1.2 Signature firmware
1) Open tool SecureBootTool v.1.85, configure as create key

4

http://www.rock-chips.com/

2) Click “Load Key” button to load key

3) Select the key files generated in the previous step, and the public and private
keys need to be loaded twice.

4) Click the “Sign Firmware” button to select the target firmware. For more details
about the compilation and packaging of Firmware, please refer to section 2 of
rockchip_secure_boot_application_note_v1.2.1 _20171128.pdf.
5

http://www.rock-chips.com/

5) The firmware signing process takes about 10 minutes, and the signed firmware
is under the out directory in the path where the tool is located, and its name is
update_signal.img

6

http://www.rock-chips.com/

1.3 Programme efuse
RK3399 board configuration: efuse power on, enter “masrom” mode
1) Open tool: ”Efuse 工具 v1.37”

2) Select the firmware signed in previous step

7

http://www.rock-chips.com/

3) After identifying the maskrom device, click start to write

8

http://www.rock-chips.com/

4) Burning successfully

1.4 Burning signature firmware
1) Open tool: ”FactoryTool_v1.63”

9

http://www.rock-chips.com/

2) Select the firmware signed in previous step

3) Start to download

10

http://www.rock-chips.com/

2 Linux tools signature step
2.1 Generate Key Pairs
SecureBootConsole -k|-kk SaveKeyDir //generate key -k(1024) -kk(2048)

2.2 Sign firmware
trust.img uboot.img recovery.img boot.img
SecureBootConsole -si privatekey _path image_path

2.3 Sign loader
//SignEx Loader (efuse 2048)
SecureBootConsole -slx privatekey_path publickey _pathl oader_path

2.4 Package update.img
Package the signed images such as Loader, trust.img, uboot.img, recovery.img and
boot.img into update.img.

2.5 Sign update.img md5
SecureBootConsole -sh privateKey _path firmware_path

2.6 RK3399 commands
SecureBootConsole -kk SaveKeyDir
sudo

./SecureBootConsole

-slx

privateKey.bin

Image/MiniLoaderAll.bin
sudo ./SecureBootConsole -si privateKey.bin Image/recovery.img
sudo ./SecureBootConsole -si privateKey.bin Image/boot.img

11

publicKey.bin

http://www.rock-chips.com/

sudo ./SecureBootConsole -si privateKey.bin Image/trust.img
sudo ./SecureBootConsole -si privateKey.bin Image/uboot.img
./mkupdate.sh
sudo ./SecureBootConsole -sh privateKey.bin update.img

3 Make efuse ota update.zip
1) Make sure build/tools/ has “drmsigntool” sign tool, if it is already existing, no need
to add manually.

12

http://www.rock-chips.com/

2) Copy key to build/target/product/security/
Need to sign loader, uboot and trust before making ota package and then put it into
SDK project to replace the original file.
3) Make ota package as normal

4 Efuse power up
1) Use the power supply method of reference design, as shown in below picture:

The above circuit is designed in the test fixture (recommend to use the LDO with
voltage adjustable, then you can increase the LDO voltage in case there is voltage
reduction on probe) to save cost. When flashing EFUSE, RK3399 ( GPIO4_D3 )
EFUSE_VQPS_EN_H will output high to enable LDO to supply power for EFUSE_VQPS.
2) Directly use the DC regulated power supply to supply power for EFUSE_VQPS:

The two test points shown in above picture are designed in the main board. Directly

13

http://www.rock-chips.com/

use the DC regulated power supply to supply 1.8V for the test fixture. Make sure the
main board enters masrom, then supply 1.8V for EFUSE_VQPS, and finally flash EFUSE.

14



Source Exif Data:
File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.7
Linearized                      : No
Page Count                      : 17
Author                          : user
Comments                        : 
Company                         : 
Create Date                     : 2019:02:26 10:03:49+02:03
Creator                         : WPS 文字
Modify Date                     : 2019:02:26 10:03:49+02:03
Producer                        : 
Source Modified                 : D:20190226100349+02'03'
Subject                         : 
Title                           : 需求规格说明书
Trapped                         : false
EXIF Metadata provided by EXIF.tools

Navigation menu