RK3399 Efuse Operation Instructions V1.00 20190214

User Manual:

Open the PDF directly: View PDF PDF.
Page Count: 17

http://www.rock-chips.com/
ecurity Class: Top-Secret ( ) Secret ( ) Internal ( ) Public ( √ )
RK3399_Efuse_Operation_Instructions
(Technical Department, R & D Dept. II)
Status：
[ ] Modifying
[√] Released
Version：
V1.00
Author：
Wu Liangqing, Wei Jianxing
Date：
2019-2-14
Auditor：
Date：
Fuzhou Rockchips Electronics Co., Ltd
(All rights reserved)
http://www.rock-chips.com/
Revision History
Version no.
Author
Revision Date
Revision description
Remark
V1.00
Wu Liangqing,
Wei Jianxing
2019-2-14
Initial version release
http://www.rock-chips.com/
Content
Preface............................................................................................................................................................ 1
1 Windows tools signature step........................................................................................................2
1.1 Generate public keys and private keys..................................................................... 2
1.2 Signature firmware............................................................................................................ 4
1.3 Programme efuse............................................................................................................... 7
1.4 Burning signature firmware........................................................................................... 9
2 Linux tools signature step............................................................................................................ 11
2.1 Generate Key Pairs..........................................................................................................11
2.2 Sign firmware.................................................................................................................... 11
2.3 Sign loader......................................................................................................................... 11
2.4 Package update.img....................................................................................................... 11
2.5 Sign update.img md5.....................................................................................................11
2.6 RK3399 commands......................................................................................................... 11
3 Make efuse ota update.zip........................................................................................................... 12
4 Efuse power up................................................................................................................................. 13
http://www.rock-chips.com/
1
Preface
Overview
This document mainly describes Rockchip RK3399 efuse burning method and other
related notices.
Product version
Kernel version
Android version
Linux4.4
Object
This document (guide) is mainly suitable for below engineers:
Field application engineers
Software development engineers
http://www.rock-chips.com/
2
1 Windows tools signature step
1.1 Generate public keys and private keys
1) Open tools “SecureBootTool v.1.85”
2) Select chip：3399
http://www.rock-chips.com/
3
3) Select “Encrpyt” type: efuse
4) Select “Generate Key Pairs” to create key
5) Create successfully and save
http://www.rock-chips.com/
4
6) After saving the following key file
1.2 Signature firmware
1) Open tool SecureBootTool v.1.85, configure as create key
http://www.rock-chips.com/
5
2) Click “Load Key” button to load key
3) Select the key files generated in the previous step, and the public and private
keys need to be loaded twice.
4) Click the “Sign Firmware” button to select the target firmware. For more details
about the compilation and packaging of Firmware, please refer to section 2 of
rockchip_secure_boot_application_note_v1.2.1 _20171128.pdf.
http://www.rock-chips.com/
6
5) The firmware signing process takes about 10 minutes, and the signed firmware
is under the out directory in the path where the tool is located, and its name is
update_signal.img
http://www.rock-chips.com/
7
1.3 Programme efuse
RK3399 board configuration: efuse power on, enter “masrom” mode
1) Open tool: ”Efuse 工具 v1.37”
2) Select the firmware signed in previous step
http://www.rock-chips.com/
8
3) After identifying the maskrom device, click start to write
http://www.rock-chips.com/
9
4) Burning successfully
1.4 Burning signature firmware
1) Open tool: ”FactoryTool_v1.63”
http://www.rock-chips.com/
10
2) Select the firmware signed in previous step
3) Start to download
http://www.rock-chips.com/
11
2 Linux tools signature step
2.1 Generate Key Pairs
SecureBootConsole -k|-kk SaveKeyDir //generate key -k(1024) -kk(2048)
2.2 Sign firmware
trust.img uboot.img recovery.img boot.img
SecureBootConsole -si privatekey _path image_path
2.3 Sign loader
//SignEx Loader （efuse 2048）
SecureBootConsole -slx privatekey_path publickey _pathl oader_path
2.4 Package update.img
Package the signed images such as Loader, trust.img, uboot.img, recovery.img and
boot.img into update.img.
2.5 Sign update.img md5
SecureBootConsole -sh privateKey _path firmware_path
2.6 RK3399 commands
SecureBootConsole -kk SaveKeyDir
sudo ./SecureBootConsole -slx privateKey.bin publicKey.bin
Image/MiniLoaderAll.bin
sudo ./SecureBootConsole -si privateKey.bin Image/recovery.img
sudo ./SecureBootConsole -si privateKey.bin Image/boot.img
http://www.rock-chips.com/
12
sudo ./SecureBootConsole -si privateKey.bin Image/trust.img
sudo ./SecureBootConsole -si privateKey.bin Image/uboot.img
./mkupdate.sh
sudo ./SecureBootConsole -sh privateKey.bin update.img
3 Make efuse ota update.zip
1) Make sure build/tools/ has “drmsigntool” sign tool, if it is already existing, no need
to add manually.
http://www.rock-chips.com/
13
2) Copy key to build/target/product/security/
Need to sign loader, uboot and trust before making ota package and then put it into
SDK project to replace the original file.
3) Make ota package as normal
4 Efuse power up
1）Use the power supply method of reference design, as shown in below picture:
The above circuit is designed in the test fixture (recommend to use the LDO with
voltage adjustable, then you can increase the LDO voltage in case there is voltage
reduction on probe) to save cost. When flashing EFUSE, RK3399 （GPIO4_D3 ）
EFUSE_VQPS_EN_H will output high to enable LDO to supply power for EFUSE_VQPS.
2）Directly use the DC regulated power supply to supply power for EFUSE_VQPS:
The two test points shown in above picture are designed in the main board. Directly
http://www.rock-chips.com/
14
use the DC regulated power supply to supply 1.8V for the test fixture. Make sure the
main board enters masrom, then supply 1.8V for EFUSE_VQPS, and finally flash EFUSE.

Navigation menu