I studied well the UG1283 with its recipe for MPSoC Bootgen with HSM Mode.
Additionally, I know this: https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/18842432/Loading+authenticated+and+or+encrypted+image+partitions+from+u-boot
What I am missing: The combination of both.
How to achieve a HSM based build of a uboot loadable authenticated fpga image? ("uboot> fpga loads ...")
Help is appreciated ...
Sorry, too late: It might better fit in "Embedded Development Tools"
Someone might want to move it.