cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Visitor
Visitor
2,279 Views
Registered: ‎11-08-2017

Zynq-7000 Fallback to Golden Image (multiboot)

Jump to solution

I am implementing and testing a golden image fallback (multiboot) for the Zynq XC7Z020 device.  Both the primary and golden images consist of an FSBL+ PL bit file + application.  The primary image is located at address 0x0 and the golden image is located at 0x80_0000, both in QSPI flash.

 

I am testing the following scenarios expecting them to fallback to the golden image:

1) Corrupt image header of the primary image

2) Corrupt FSBL region of the primary image

3) Corrupt PL bit file region of the primary image

4) Corrupt application region of the primary image

 

These are all valid scenarios that could occur during a firmware update process of the primary image.

 

I have successfully verified that scenarios 1, 3, and 4 all fallback to the golden image.  However, scenario 2 just hangs and never successfully falls back and boots the golden image. I suspect it just hangs because the FSBL is loaded and executed but gets an exception due to it being corrupted.

 

From reading the documentation (and from my experimentation), it doesn't appear that the bootROM checksums the FSBL region and compares against the FSBL checksum stored in its partition header prior to loading and executing it.  Is this true? Is there any way to protect against a corrupted FSBL region?

 

 

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Moderator
Moderator
2,225 Views
Registered: ‎03-19-2014

Try adding RSA

-------------------------------------------------------------------------
Don’t forget to reply, kudo, and accept as solution.
-------------------------------------------------------------------------

View solution in original post

0 Kudos
5 Replies
Highlighted
2,049 Views
Registered: ‎06-20-2013
I have the same problem, although I am not convinced that 3 and 4 are detected either. Did you manage to find a solution?
0 Kudos
Highlighted
Moderator
Moderator
2,226 Views
Registered: ‎03-19-2014

Try adding RSA

-------------------------------------------------------------------------
Don’t forget to reply, kudo, and accept as solution.
-------------------------------------------------------------------------

View solution in original post

0 Kudos
Highlighted
Visitor
Visitor
1,816 Views
Registered: ‎11-08-2017

Adding RSA solved the problem of not falling back to the golden image when the fsbl region of the primary image is corrupt.

0 Kudos
Highlighted
Participant
Participant
1,366 Views
Registered: ‎11-12-2018

Does someone know where to find a step by step tutorial how to add RSA?

Just for curiousity:

Does RSA do compression so than the Bootimage gets smaller?

0 Kudos
Highlighted
Moderator
Moderator
1,359 Views
Registered: ‎03-19-2014

RSA authenticaiton is a build option in Bootgen.   Refer to UG1283 for instructions on how to generate a bootable image with authentication.   Refer to UG821 for how to include RSA in your Zynq 7000 design.   The Design Security hub is also a good resource. 

-------------------------------------------------------------------------
Don’t forget to reply, kudo, and accept as solution.
-------------------------------------------------------------------------
0 Kudos