RK3399 Efuse Operation Instructions V1.00 20190214
User Manual:
Open the PDF directly: View PDF 
.
Page Count: 17
| Download | |
| Open PDF In Browser | View PDF |
http://www.rock-chips.com/ ecurity Class: Top-Secret ( ) Secret ( ) Internal ( ) Public ( √ ) RK3399_Efuse_Operation_Instructions (Technical Department, R & D Dept. II) Status： Version： V1.00 [ ] Modifying Author： Wu Liangqing, Wei Jianxing [√] Released Date： 2019-2-14 Auditor： Date： Fuzhou Rockchips Electronics Co., Ltd (All rights reserved) http://www.rock-chips.com/ Revision History Version no. Author Revision Date V1.00 Wu Liangqing, 2019-2-14 Wei Jianxing Revision description Initial version release Remark http://www.rock-chips.com/ Content Preface............................................................................................................................................................ 1 1 2 Windows tools signature step........................................................................................................2 1.1 Generate public keys and private keys..................................................................... 2 1.2 Signature firmware............................................................................................................ 4 1.3 Programme efuse............................................................................................................... 7 1.4 Burning signature firmware........................................................................................... 9 Linux tools signature step............................................................................................................ 11 2.1 Generate Key Pairs.......................................................................................................... 11 2.2 Sign firmware.................................................................................................................... 11 2.3 Sign loader......................................................................................................................... 11 2.4 Package update.img....................................................................................................... 11 2.5 Sign update.img md5.....................................................................................................11 2.6 RK3399 commands......................................................................................................... 11 3 Make efuse ota update.zip........................................................................................................... 12 4 Efuse power up................................................................................................................................. 13 http://www.rock-chips.com/ Preface Overview This document mainly describes Rockchip RK3399 efuse burning method and other related notices. Product version Chip name Kernel version RK3399 Linux4.4 Object This document (guide) is mainly suitable for below engineers: Field application engineers Software development engineers 1 Android version http://www.rock-chips.com/ 1 Windows tools signature step 1.1 Generate public keys and private keys 1) Open tools “SecureBootTool v.1.85” 2) Select chip：3399 2 http://www.rock-chips.com/ 3) Select “Encrpyt” type: efuse 4) Select “Generate Key Pairs” to create key 5) Create successfully and save 3 http://www.rock-chips.com/ 6) After saving the following key file 1.2 Signature firmware 1) Open tool SecureBootTool v.1.85, configure as create key 4 http://www.rock-chips.com/ 2) Click “Load Key” button to load key 3) Select the key files generated in the previous step, and the public and private keys need to be loaded twice. 4) Click the “Sign Firmware” button to select the target firmware. For more details about the compilation and packaging of Firmware, please refer to section 2 of rockchip_secure_boot_application_note_v1.2.1 _20171128.pdf. 5 http://www.rock-chips.com/ 5) The firmware signing process takes about 10 minutes, and the signed firmware is under the out directory in the path where the tool is located, and its name is update_signal.img 6 http://www.rock-chips.com/ 1.3 Programme efuse RK3399 board configuration: efuse power on, enter “masrom” mode 1) Open tool: ”Efuse 工具 v1.37” 2) Select the firmware signed in previous step 7 http://www.rock-chips.com/ 3) After identifying the maskrom device, click start to write 8 http://www.rock-chips.com/ 4) Burning successfully 1.4 Burning signature firmware 1) Open tool: ”FactoryTool_v1.63” 9 http://www.rock-chips.com/ 2) Select the firmware signed in previous step 3) Start to download 10 http://www.rock-chips.com/ 2 Linux tools signature step 2.1 Generate Key Pairs SecureBootConsole -k|-kk SaveKeyDir //generate key -k(1024) -kk(2048) 2.2 Sign firmware trust.img uboot.img recovery.img boot.img SecureBootConsole -si privatekey _path image_path 2.3 Sign loader //SignEx Loader （efuse 2048） SecureBootConsole -slx privatekey_path publickey _pathl oader_path 2.4 Package update.img Package the signed images such as Loader, trust.img, uboot.img, recovery.img and boot.img into update.img. 2.5 Sign update.img md5 SecureBootConsole -sh privateKey _path firmware_path 2.6 RK3399 commands SecureBootConsole -kk SaveKeyDir sudo ./SecureBootConsole -slx privateKey.bin Image/MiniLoaderAll.bin sudo ./SecureBootConsole -si privateKey.bin Image/recovery.img sudo ./SecureBootConsole -si privateKey.bin Image/boot.img 11 publicKey.bin http://www.rock-chips.com/ sudo ./SecureBootConsole -si privateKey.bin Image/trust.img sudo ./SecureBootConsole -si privateKey.bin Image/uboot.img ./mkupdate.sh sudo ./SecureBootConsole -sh privateKey.bin update.img 3 Make efuse ota update.zip 1) Make sure build/tools/ has “drmsigntool” sign tool, if it is already existing, no need to add manually. 12 http://www.rock-chips.com/ 2) Copy key to build/target/product/security/ Need to sign loader, uboot and trust before making ota package and then put it into SDK project to replace the original file. 3) Make ota package as normal 4 Efuse power up 1） Use the power supply method of reference design, as shown in below picture: The above circuit is designed in the test fixture (recommend to use the LDO with voltage adjustable, then you can increase the LDO voltage in case there is voltage reduction on probe) to save cost. When flashing EFUSE, RK3399 （ GPIO4_D3 ） EFUSE_VQPS_EN_H will output high to enable LDO to supply power for EFUSE_VQPS. 2） Directly use the DC regulated power supply to supply power for EFUSE_VQPS: The two test points shown in above picture are designed in the main board. Directly 13 http://www.rock-chips.com/ use the DC regulated power supply to supply 1.8V for the test fixture. Make sure the main board enters masrom, then supply 1.8V for EFUSE_VQPS, and finally flash EFUSE. 14
Source Exif Data:
File Type : PDF File Type Extension : pdf MIME Type : application/pdf PDF Version : 1.7 Linearized : No Page Count : 17 Author : user Comments : Company : Create Date : 2019:02:26 10:03:49+02:03 Creator : WPS 文字 Modify Date : 2019:02:26 10:03:49+02:03 Producer : Source Modified : D:20190226100349+02'03' Subject : Title : 需求规格说明书 Trapped : falseEXIF Metadata provided by EXIF.tools